{ "Event": { "published": true, "date": "2026-04-01", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-04-01", "timestamp": 1775088923, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "6ca744dd-a23c-47b9-b464-a3371f0405fb", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775001725, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775001725, "uuid": "ed33a121-709b-46ec-a73a-deea1dc00b01", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775001725, "uuid": "b3a7c176-815a-408a-90c2-cecd2c2765c0", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775001725, "uuid": "7bf027c5-8097-4343-9b78-749f78c8516e", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775001725, "uuid": "07c99471-c60c-4b32-b19b-696714c5e06e", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775001725, "uuid": "60a2d0c2-076f-4fce-b621-4cef2e9db9cf", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1775001848, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775001848, "uuid": "9af7b9f1-ecd2-4803-9681-8a35b2fc6b97", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775001848, "uuid": "63d3e1dd-4e05-4fca-9485-e25fc7f95698", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775001848, "uuid": "f0148ad9-1958-4007-8cf1-ee0725cfa992", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775001848, "uuid": "fde76c42-3094-438e-87b1-2eea10c1d565", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775001848, "uuid": "0085d987-42d0-4c90-810e-1c78cc1ea7fa", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775002457, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775002457, "uuid": "2e950404-edee-4b5a-baca-25e6404e114e", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775002457, "uuid": "fa280413-d507-4ffb-8368-7c1a38c0d599", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775002457, "uuid": "bff41668-ced8-49ea-8846-c6d17319cc96", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775002457, "uuid": "08a7a470-5e79-4159-bbfd-6dc4e568712f", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775002457, "uuid": "d558072a-d2b3-4c10-9aa3-f430b7f63039", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1775002998, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775002998, "uuid": "6868e838-f242-4600-9f32-29850244ee05", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775002998, "uuid": "b0f1fdfb-a75a-4a07-9152-0368a2f3f834", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775002998, "uuid": "d4d82c49-ddb5-4b4b-9d7b-3273d6c40ee5", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775002998, "uuid": "724eacfb-9baa-4a46-bdce-9db1d06fe9eb", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775002998, "uuid": "ea50da5d-5030-4337-b715-2527372cc743", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21b8f835-153c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1775003578, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775003578, "uuid": "c2d50ceb-d8a3-4a7c-a6c6-3e67030879f3", "comment": "Malware payload", "value": "1326c16a18441423830933fbb3a6a290", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775003578, "uuid": "d8e9edab-c21c-4023-8dfa-63de0a5bb825", "comment": "Malware payload", "value": "3bb40456027c77d05b991e4686f10e51739a6ebdca3e33ec5edcd1e2c28b34cf", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775003578, "uuid": "ab50c1c0-9a7b-4d97-ab02-b4aaa0bab166", "value": "T1BC310FB618F340915C13946647F77749AAA6C503E58EC84138DCA248CFA9EE4C5E3B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775003578, "uuid": "2e6f81d4-c9c3-485d-9583-3c5ee4b01e1c", "value": "24:hY8DqCsgnIRRZ2gbIOUpGpDST9Cq9PG5iAxGJfAI1+Fb8YEzUL8oh4z4j:bcgIE6UmUCqh7AxGJIi+WNqRhRj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775003578, "uuid": "2d01a715-5fc2-4d90-9dbd-353a8b0d48d2", "value": 1686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775003578, "uuid": "4838dd42-1f87-4752-af29-e60603cece4d", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f32e484-2d64-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775004320, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775004320, "uuid": "0356ffbd-585b-4f2d-aac3-e5484a07d849", "comment": "Malware payload (Mirai)", "value": "acdec8014b63dae4bf3a209e2f14e8ae", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775004320, "uuid": "a72c8000-be1f-43d9-a36f-b53cd624874b", "comment": "Malware payload (Mirai)", "value": "16f69274db76257ba627b00ca7787ca700f4bbc1260707d8e9949ab958817b30", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775004320, "uuid": "df533e7a-cbb4-4de2-808e-5bb6bdcc0019", "value": "T14AE37B8BB7026CA2C9918BF54BC747AD2B6312115F5BCBE76C0C6A3D4E219DD5E0B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775004320, "uuid": "9291ca7d-dfb1-46b5-bc78-ea409917419c", "value": "1536:344o/gvT40qIYqqwhLgfKq+eorWUGip1ogLgI/LWaFmCrmKmuRl:oMeqNZUKJXGip1ogLgIqadrmKmuRl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775004320, "uuid": "dc43c877-be1f-4b75-b1dc-9a7641e0e827", "value": 150664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775004320, "uuid": "cf3f901c-021a-4caa-ad2e-2ed8b049d68f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce2d4afb-2d67-11f1-bc00-82aee05be84a", "comment": "Malware payload (ACRStealer)", "timestamp": 1775007175, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775007175, "uuid": "bc1d6bd7-69a7-4810-ad6b-3bd199d27b15", "comment": "Malware payload (ACRStealer)", "value": "616a34f76ad4edbf7667d1f46bbcda4f", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775007175, "uuid": "4b745312-b861-4680-8bc3-8336eb115c76", "comment": "Malware payload (ACRStealer)", "value": "68e47e20011cd303284737ff3cdba23527ecaa2a39df924edd2e749291c80f11", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775007175, "uuid": "ca4b5b58-cf00-41c9-9874-c5cbb2226e8f", "value": "T192365A4BFCA258F4C4A9923489675256BAB17C051F3123DB2AA1F3741F337E01EB67", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775007175, "uuid": "a3ab600d-18c8-411b-8071-ce5523c9bac5", "value": "534141bbeafb0cfa024f8b6830c176a9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775007175, "uuid": "45c10382-ea87-42b5-814f-78d6f35fe2a6", "value": "49152:/PxacdaJb6UuPG0sfqf7ExSsURy/cW6KQx3ADBljnnJFQclAlLpcL:/PJC7kExQ510", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775007175, "uuid": "e262838a-5058-4a90-8f76-31e8b849eae4", "value": 5125632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775007175, "uuid": "2e10c9e4-3f09-4074-895f-0ace0047898a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775011626, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775011626, "uuid": "6cd545db-28a3-49dc-b473-40a893a95664", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775011626, "uuid": "1bd2613e-b9b9-487e-8957-acfc4e18be5b", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775011626, "uuid": "e59ed068-a4de-46cc-a4ee-62230c448fa5", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775011626, "uuid": "8c498a2c-773b-4960-ba04-f356ee3e6cf8", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775011626, "uuid": "6a685b99-bd63-4850-9a8d-27d9d201140a", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ebb5cb80-2d7a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775014138, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775014138, "uuid": "965d7804-0bdb-4adb-9c48-ff563e139141", "comment": "Malware payload", "value": "84d0812e1e5c326d04df2126ade149f9", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775014138, "uuid": "65aa5f33-aa72-4b9b-aca3-4e211c19fcf0", "comment": "Malware payload", "value": "fde447b6a34aa1abfcd3d83ee3e71ccc4dfce3d997b22dc954dbdf4e7f099ce1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775014138, "uuid": "1bef07a6-afb4-4bdc-886b-3134441838dd", "value": "T1F093093178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775014138, "uuid": "681a8162-cf90-4bad-8c51-f5c20c0b6c34", "value": "1536:0Byp1tF/uwMmAIa14oXSuI7epeV7tb73WdxCrCitkb5fv2v05xB6rLKjCsMvKVC/:088I00GitkbFv2v05xB6rYCsMvWCqy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775014138, "uuid": "f9090014-d06f-4a46-bc2f-a931b528d5a5", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775014138, "uuid": "327c3e66-4f26-4a74-919e-0a15392f96ff", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca3fcba5-2d7b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775014512, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775014512, "uuid": "ab922f00-af95-448a-88d6-3166706ab6da", "comment": "Malware payload", "value": "b5c0bebc975435c9e9795dfc16da7c07", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775014512, "uuid": "8ad1ae23-7ebf-4c96-9cc0-a6bf2267a55d", "comment": "Malware payload", "value": "40ff75671d94c216ecf496c6ded907f967ecdc953119dde465abb1e801045106", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775014512, "uuid": "f1ef0f65-4bb1-486d-9834-fd86a9ba6c86", "value": "T164563345B2AC80D7F13489F7DB326E222DAD6B9F595316B9D083603C5E2C417A2768", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775014512, "uuid": "bf3f5196-d5d4-4f4f-b0bb-c683af01d1d4", "value": "4b8ea275b01195301d047f45b8ba14d3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775014512, "uuid": "8d4ed845-04b5-497e-93c3-f795b678d34e", "value": "98304:+qKRXyxoQzRElO90x/oTKZ5D7GwdaBTQz5/C89yhnclUVyFC02i9xT76MOs/cJDG:Zxpi49kguGBy5c22VUZ9xSm/pBCPhq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775014512, "uuid": "7d68d3db-6c2b-4d4a-bd1d-1d434ff13ecc", "value": 6313543, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775014512, "uuid": "eeebac70-8458-4df1-b120-9f6dbfc21931", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da0b2406-2d7b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775014538, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775014538, "uuid": "d9f2844d-a75e-4139-a9de-72eb0c26dcda", "comment": "Malware payload", "value": "0dd9d3c804c36509769c5a9164b45b19", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775014538, "uuid": "70f37fd8-54f4-4d22-b990-d3fc913176ea", "comment": "Malware payload", "value": "d0e5c7e846fe88a54e95768b88eeceece2d157a83a5cd383d592e420a4aa82c4", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775014538, "uuid": "63432cd9-a260-47d1-8154-caa866aefa8f", "value": "T1BF8309327488582A210B428FD267336C70AFDCE2D611E5B6F6F622344BA5EE135B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775014538, "uuid": "86780c35-2350-4827-af1c-baa424134212", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbntWaqVN/:XEKltp9txAX/yr2pbtW7VN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775014538, "uuid": "07313c4c-8179-4f85-b2b9-4939d45e05f6", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775014538, "uuid": "ddbb4e5a-24d4-4023-90fd-93a1b24e7b79", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02fe297a-2d7f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775015895, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775015895, "uuid": "bdc82fdb-b41e-46d2-bdbc-8056850ff059", "comment": "Malware payload", "value": "7e1284dc57ab86823309317203fc0278", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775015895, "uuid": "0b1128ba-d521-42e9-8293-2ea1ee179e04", "comment": "Malware payload", "value": "b81addb8db8c064de192d08e223ef0f1ba089f7ebf42b92185929f3a0592f63c", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775015895, "uuid": "37faf677-053c-40ba-a7bf-37ca40666650", "value": "T1C073021F9B07D1C5CE2FC7E618462B910B91336CBE4C56E8B8D55F788B8829E31E47", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775015895, "uuid": "8db7a30d-868e-4b91-b408-b1f54206ca1e", "value": "1536:dafSgdbiqzbIfLeGtHbJFIyentVQMyfFq1UnWiUfuzFH77idIFz:gdu/fl7JhenyNBWTfCFK8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775015895, "uuid": "0d709708-959a-4a82-9293-affc88255c3a", "value": 73919, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775015895, "uuid": "eb16da2d-30d1-4a59-9e51-de241b77e059", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84551299-2d83-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775017830, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775017830, "uuid": "1b0d9b89-5de1-4359-82ff-d59715056158", "comment": "Malware payload", "value": "346c44c0d85d278a3b0d6213284ea906", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775017830, "uuid": "ea85df85-50a0-4ae0-ba5d-0374affa31b9", "comment": "Malware payload", "value": "b87848212b7b9c5a1c3a1e2c3b75e6ecf27d3e8a1edd907eb7977f4bddc74e11", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775017830, "uuid": "83e96d2d-634d-451f-af6a-b19867b34edd", "value": "T1B993E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA523895F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775017830, "uuid": "058930b1-b056-44fc-b676-ca0e903b25bf", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPX/IH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775017830, "uuid": "6144d3f7-6d15-435f-8696-81d289fd1daa", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775017830, "uuid": "60cc17ca-4f6d-4ed9-94f7-802776efbe57", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef0ced27-2d87-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775019727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775019727, "uuid": "ad6eeffb-4205-4318-bec6-ac3361e39dbe", "comment": "Malware payload", "value": "6acb21ddca82bb165b1b19c0935179dc", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "HijackLoader", "colour": "#4edb86", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775019727, "uuid": "d94df281-f153-490f-9bce-4ff10ec98ba4", "comment": "Malware payload", "value": "8b7b3e3f7b194c3973dcd89919824210dd5f6cf57841f8f91682e47f3a996db7", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "HijackLoader", "colour": "#4edb86", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775019727, "uuid": "e5c19756-60a8-47c9-aae0-1ff2fac60748", "value": "T16E12BF69DF3D5857CECB25D0565F8599A2B8BA805433E2301BA460CB9ECD44393FD6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775019727, "uuid": "0a2d0207-3547-4654-9fdf-9eee7e6bdc3b", "value": "192:s1vy7B5kMoKB790JWCLQ11pb6bmyfTE+NF3pjrCFTITxmVuEFlBhOqq:0SbBaAUO1pubtTVrkTAxX1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775019727, "uuid": "eea8729a-c0e8-4bf4-946e-c4614fab1dfc", "value": 9284, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775019727, "uuid": "514bce3b-9e39-40d6-9f85-e9f6f37b670c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f101dd07-2d87-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775019731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775019731, "uuid": "d0af15d7-bef2-4a2d-b500-e9e09f00e027", "comment": "Malware payload", "value": "dae72afd97f04e76869b298264cc715a", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775019731, "uuid": "36be3b2c-de44-4ce5-8442-30f8fae76c78", "comment": "Malware payload", "value": "338dea3ea0f9fc3b7718bff345fc3b705b287b615161f357c5b15ecd630ab4a4", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775019731, "uuid": "93436b6d-f98e-4152-9820-5a382b1da11a", "value": "T17FE63322832AE455DDB33B7839BEC30AD92E86983B06F5CF2D760A6D6C855D0435B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775019731, "uuid": "3c6b48ba-0cf6-496b-bb77-193570558905", "value": "196608:tSNI3rg2DDB28b2cUk2tf6/oH53smLrOLFjQR6Hs5JqNx3Q8SDUidDOGAXUR4Jhf:rbDVHb2crwizmL0tEHUx3Q8SDUG4E81", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775019731, "uuid": "0d67ad10-3579-4988-b32e-161f48ee8f9e", "value": 14579697, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775019731, "uuid": "10b28105-ccba-4e0a-90b9-0a38e63b54d7", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f40c8b8b-2d87-11f1-bc00-82aee05be84a", "comment": "Malware payload (Arechclient2)", "timestamp": 1775019736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775019736, "uuid": "1d47e516-9a9a-4c34-a1c1-df661f468123", "comment": "Malware payload (Arechclient2)", "value": "a24ede051050bb416ee00751cd9017c7", "object_relation": "md5", "Tag": [ { "name": "Arechclient2", "colour": "#1b320a", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "HijackLoader", "colour": "#4edb86", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775019736, "uuid": "46a4b30a-898d-46d0-a96e-8ae7143794e9", "comment": "Malware payload (Arechclient2)", "value": "fe33d62ccf69d427a9a56be71d6866b5a79d92edb65d3ea248bba6da8cf31354", "object_relation": "sha256", "Tag": [ { "name": "Arechclient2", "colour": "#1b320a", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "HijackLoader", "colour": "#4edb86", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775019736, "uuid": "2f1a7182-699d-4301-b6bd-1650973a344e", "value": "T1CDE6CF1A7B988179D17BC13889878B87E7B674114B3187CF62A0176E2F337E15E3A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775019736, "uuid": "8e66af64-c552-4800-b85e-5cf7aa08a125", "value": "196608:RrPtpRmPh7HJWokaLfdfHk/Y5z47N7WnQexrYSVFLkL5yL4QF38eRZ:/mJ7oN2f5z4R7WVxF8LQB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775019736, "uuid": "61a2bb61-6842-44f5-9457-1dbbcaa5c0b8", "value": 15175668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775019736, "uuid": "dd979b34-e27f-415f-ab5e-bf53ac04a96d", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b86868d8-2d8b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775021354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775021354, "uuid": "2f2b4d22-e8b9-41e6-9282-22737aeafaa6", "comment": "Malware payload (Mirai)", "value": "a4ee121cf534259bbf0863b5ae9b7689", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775021354, "uuid": "bb418334-2dd6-4b5e-a1b5-fa869bb82a07", "comment": "Malware payload (Mirai)", "value": "3db7969c50574330d864c08ed6409055dd2153ff8763e8a47e11f8dca9d432e8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775021354, "uuid": "d9e33ed8-e7c9-4d7b-bc0b-3bc7d4e23189", "value": "T1A924A70E2E228F7DF268C73547B78A3597AD33D622E1D684D2ACD2151E6034E541FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775021354, "uuid": "9f9340d2-d3dd-4e59-9f8c-f7954d055ba3", "value": "3072:Wc6qANIMErR6ntb4/ESAgFPqhxMbscPLRH/AYCw0v1i6ftvGbG1Wplrz5Y:Wc6qzJrR6t8MSALxM7tCpVGsW/rzG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775021354, "uuid": "226cb44f-1fb2-47cd-8faf-e7a1d8e079d9", "value": 224300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775021354, "uuid": "e06c4f58-5b4a-4242-aba4-ae84bc423be5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6183e94d-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775021960, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775021960, "uuid": "b593ba21-3310-4511-9c07-095b548ad356", "comment": "Malware payload", "value": "dbc520ea1518748fec9fcfcf29755c30", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775021960, "uuid": "83629c93-3711-464b-82da-2ca87b60ef74", "comment": "Malware payload", "value": "c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775021960, "uuid": "8ade395e-cd97-4e81-bbcf-d4461762f638", "value": "D2D3128AA536ED54F11B9AF11B3B99907DF5659E82F4D4A4A2CF634312CC343FA4070B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775021960, "uuid": "c3d686a0-1d24-4061-8953-9f7fb34057a0", "value": "3072:Nc4i0agsmw3Py5CP5HM8EVLUuYtgB5H6oz:Nc/0aNPy54EVAhOae", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775021960, "uuid": "1b687c50-76c8-475b-a53a-682079650001", "value": 132860, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f5b9b223-2d90-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775023604, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775023604, "uuid": "1124464f-0426-4ad7-bc61-faace4edfd64", "comment": "Malware payload (Mirai)", "value": "1fa592343e0bcaea4304585f555bdf33", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775023604, "uuid": "de674db9-53c7-4cfb-9988-5f06cb2c0ed2", "comment": "Malware payload (Mirai)", "value": "c2b4be76dc1ab3b907e99a8440e752af2cc861516d6f7749fc2a3ac82b1068dd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775023604, "uuid": "70c89360-9e05-4e0f-af07-30e02aa242cc", "value": "T1E6258E46F2B374BDC067C03087ABD762A936F46501226D7B35C4DA342E92EB41B29F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775023604, "uuid": "21a725e5-cb35-458c-b591-3be9c7f6e63c", "value": "12288:7EY4Y/uuKU5YGWgX3SH2czmHqi6mywSiLQV5kDg/yhf0Fa:7Es/uuKUDWgX3SWcLyQFKhf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775023604, "uuid": "3bd60f21-4706-4a58-af80-76b50227820d", "value": 1000624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775023604, "uuid": "16c0de35-052c-4218-b964-8af2e92ab2be", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "88a6d16e-2d91-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775023851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775023851, "uuid": "5e25f26f-21c6-4ec8-bdaa-e30fdd0f9788", "comment": "Malware payload (Mirai)", "value": "dc4362bbe0a9346a3fe58ba2193da8e5", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775023851, "uuid": "2920d1cb-cbb1-4256-bbdc-1a4ec1e1ccec", "comment": "Malware payload (Mirai)", "value": "8b92f02ece73bd262a89f19d9f583dabb824b0fb683f2797614274341d149ed7", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775023851, "uuid": "98ac615b-cba5-4470-81bf-124d84a02821", "value": "T1ED142A46AA404E13C4D6277AFBAF424633339B64D3DB730599286FB43F8669E4E736", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775023851, "uuid": "ae1f9f0f-f565-417f-aeff-8fac68f1e378", "value": "6144:hIYV6IyyG50P/UrvIAnTyaJvLa84vbGbXin6M/9ch0g0fDM:h9V6ILQIATyaJvLa84Iyz/Kh0gt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775023851, "uuid": "7122cec4-568d-4feb-bafb-4f0ba33c3248", "value": 199171, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775023851, "uuid": "19fb98ef-4fc5-449a-a092-133955b8410e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a78f2c33-2da5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775032492, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775032492, "uuid": "217747cd-6e91-4aee-ad31-8eb4883d51c9", "comment": "Malware payload (Mirai)", "value": "3d1546c8a96036b426df4ea07cb70cef", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775032492, "uuid": "6db856a1-c4ad-4501-b151-fc357d84164e", "comment": "Malware payload (Mirai)", "value": "9ca881abd3c11368e381b8a9f6d32ef14e022058ce936922afb82164c17f3310", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775032492, "uuid": "7a3df68b-f90b-4ede-9e8a-09b93175073c", "value": "T130C162821145CF33BE08ED1679A55D0830D06AF1D896FF0AD8FA5592FA5DEC8A902E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775032492, "uuid": "00219b74-5f92-489c-bc8c-04c0aff21633", "value": "96:rhEVud2FvoGKP2p+xFt3zGJE/c3Fo8r7liJOpKdJ:uVud2Kp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775032492, "uuid": "5f8a755e-1821-4480-bd41-bfecc6769e25", "value": 5666, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775032492, "uuid": "e56e197d-6257-4267-87c5-9e1591cc2cac", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "97a5a50f-2dab-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775035043, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035043, "uuid": "4dcb192f-e8a3-47b4-aea8-85fa15bb8358", "comment": "Malware payload (Mirai)", "value": "872ae08626653a323cca7154fdc5034a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035043, "uuid": "3794059d-067d-40f3-bb20-6d16dd6b6266", "comment": "Malware payload (Mirai)", "value": "1d57ee028e58364660d400a755b67058b2a211b43c62dbfe16f1b316104f0e31", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035043, "uuid": "093e37a6-1609-4c01-9a6a-c0a4bb92b108", "value": "T12BF39D33C965AE98C6649474E0B1FE795B539A0641871FBB1AA7CBB54043DCCFE043", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035043, "uuid": "f698a680-fc7f-4d3d-97ff-f3c09583ed3d", "value": "3072:nJqn73FvDaOmynee0PI71NGH19rVCUQLhQhWjEKpGhB:nJG5aXeEH19M1QsjvGhB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775035043, "uuid": "102fdd92-8b68-4ae3-91fb-ba1273a5da35", "value": 164704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035043, "uuid": "83cf7216-ce1a-42c3-8ae2-c3d35ef33d42", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2423002d-28c1-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775035089, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035089, "uuid": "e08c27cf-66ab-4c19-889b-196c5b71003b", "comment": "Malware payload (Mirai)", "value": "e71c620456b01420b8de548e0d683090", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035089, "uuid": "d6bb3407-8e83-4377-9c08-ecb4b7c03f7f", "comment": "Malware payload (Mirai)", "value": "03439a4f19441041a4e6a7ca4194e89c3abdabf119f5f60e753794aa937582a3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035089, "uuid": "f21617cb-7d95-41e4-aeb5-f4e5d9922008", "value": "T1D3E3A80A6F228F7EF269877047F38E31975977D61AE1D681E1ACE5401F202CE641FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035089, "uuid": "2cfac867-83e9-4485-9417-009d50e9c132", "value": "3072:gA+aVXPKGq23zbUQhBmB0UYurxDEkE2/51SGu4L:gA+U/KF23zbHhBlINDvB5V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775035089, "uuid": "32f0c02c-e181-45f9-b30c-58fec4d0aa21", "value": 153768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035089, "uuid": "1690f6d1-08f5-4d34-ab24-f21802931fe9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1fb5574b-28c3-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775035089, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035089, "uuid": "f7d22293-79e6-45e9-b8ec-59f78a243d3d", "comment": "Malware payload (Mirai)", "value": "52545c24da361541b545018327f51014", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035089, "uuid": "43fe767d-ef6d-44fb-8ac5-3080cc1cdf2e", "comment": "Malware payload (Mirai)", "value": "5c88d830c55a5d9cf20e9dfec55d0b3def1037d478c44fca159512b5599c3aaa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035089, "uuid": "cde961ad-fc43-4e72-a8a5-aa6c54ea70e2", "value": "T14CB3F952BD529F13C5C322F6F7AE428837126778D7EA3102ED247FA1278A4DB0E276", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035089, "uuid": "d328fdfe-6c13-4e27-a0a4-d80d6d15c772", "value": "3072:2QDMx2rUxKg24uIci6Y40oHG0/6ugyuVmp3vMS:BrUxKgvci540R0/6uPn3vMS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775035089, "uuid": "f2782af7-86df-46d5-b08d-d0ef54e3e947", "value": 117268, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035089, "uuid": "1b9e73bd-ce9d-4480-80f1-cf2873c261a4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef3945c3-28c7-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775035090, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035090, "uuid": "d867af80-e186-48bf-874b-ea55faddfad2", "comment": "Malware payload (Mirai)", "value": "82a2db6408579dc8486adbe445df2881", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035090, "uuid": "c2f67522-fe74-44e1-bf24-a70cefb84363", "comment": "Malware payload (Mirai)", "value": "37c9c694f3fa721f213069d5ab032bb6c3772f41ed6e91c7525a4e1aa5abd7c3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035090, "uuid": "12f59f33-5821-4506-b566-c6247bb52241", "value": "T115C32956B9529B12D4C321BAFB9E514933133FB8E3ED3212DD206F60678B4DB0E7A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035090, "uuid": "a70322a7-c7a4-49b1-9434-810ad9d08744", "value": "3072:p9dnzPXNBriajy2Nj2kJLwawT9Xypcbt+oBy:BzPXNJzNiMUaOMpc/By", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775035090, "uuid": "27c5ca53-1c5c-4f3d-ac0c-e182bd7458de", "value": 124680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035090, "uuid": "82992a3e-1fc4-4f7c-8bdf-707d541c015d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21fbc5bf-28c7-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775035090, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035090, "uuid": "0729c31e-a98d-4452-b7e1-0e9918eeff93", "comment": "Malware payload (Mirai)", "value": "2aafd5c5b61ced37aa2f6569b4fa7d56", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035090, "uuid": "5119e28e-8ee2-41f1-b72c-1869fbb70c95", "comment": "Malware payload (Mirai)", "value": "5ba17425e52ed385298524a49a8a12e8b69b0d28df79311f4ef20c9db7810dcd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035090, "uuid": "88ad81f8-b7f6-484d-b549-e763eec63d21", "value": "T14FD30816BA519F12D4C331FAFB9E414933136FB8E3E97102DD206F64638A9DB0E766", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035090, "uuid": "7675953a-1515-4992-8db1-2ae7258a7de7", "value": "3072:f5D6CHWwqnJ3J41wAPaauOhS+BtZkzlKQHworJsPNVO:pvHWwM4VPazOhS+BtazlnQolslVO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775035090, "uuid": "4f3df6dd-a896-4c58-9d9b-85a2b19eaad8", "value": 142076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035090, "uuid": "7f6f2280-3e24-4332-bb58-47aa55c3fa85", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81477a8d-28e1-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775035090, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035090, "uuid": "7cecd146-d25c-4111-a2f5-9dc3aaddeb8d", "comment": "Malware payload (Mirai)", "value": "5030de2b8c6ea9c34986aff62eb69115", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035090, "uuid": "2209fe7d-0bba-4dcd-8af7-232584412d2c", "comment": "Malware payload (Mirai)", "value": "e561415a538e1a064a0efc1bfccc637340702eb6f05a34a965e14ca1ae0b3d0c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035090, "uuid": "cc9a278e-cfe5-483d-9b65-0ca1d91a73c3", "value": "T1DCE47D9CFE4E3C42E2D7E3789E4987E1722771E4D72391A33982434CD5CA9D98BB19", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035090, "uuid": "6cd5d195-ef48-4aec-a515-9453f79b6e57", "value": "12288:iIV34M5WVqAMbYMuz/B1l5jtKITyWYeXe3maI9ORDw5dWMzI:NV9WVqoTB1l5cIW9i0da", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775035090, "uuid": "add9b1c6-d005-4cf0-82f9-d535899ab100", "value": 702064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035090, "uuid": "b6b5006a-43f9-4ce4-873d-2ae3998c46b5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15aaf162-2dac-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775035254, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035254, "uuid": "7fdf254f-6f5d-4c81-8f8f-77ad86e9f5c3", "comment": "Malware payload (Mirai)", "value": "14c01200dc2e470954d583883041ab48", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035254, "uuid": "fed3ff33-39d1-4019-9d18-bd2f4bb6aa30", "comment": "Malware payload (Mirai)", "value": "1c912c5fb80edc312de11238b21d63f75fdf8e8221926a53dbe99d02a454815a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035254, "uuid": "4eadd007-12f3-4d9f-bd58-9c017fec51a2", "value": "T1AC04BFA3B34F2491C87106F80BCB6B9D262361125DA7DAD76C6F753A5E375DE08023", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035254, "uuid": "55f7bcf8-007b-425b-a340-34b7fb0bb87e", "value": "3072:ADBdjwnSSY0VLtsYPtkchPPd2WenqkxJjg/ClTK3Kiyqq:mX0LsYP2chXdCqk/yCdK3sqq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775035254, "uuid": "0327e9c0-c56c-474a-9b4c-af1aaa3ed99d", "value": 173700, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035254, "uuid": "49f32683-a59f-43b8-9037-90c2560a9019", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "867a50a0-2dac-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775035443, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035443, "uuid": "644c49d6-6f1c-4019-843e-2ae9d29fa339", "comment": "Malware payload (Mirai)", "value": "09cef530619995fbc527a98475f942f6", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035443, "uuid": "42ec4c79-941e-4239-a6c0-ff74a6fd795c", "comment": "Malware payload (Mirai)", "value": "c707b0e45191524a58acd5b82c5d7c87b9d2a1a2b52f3d29bbd41559863b9c2e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035443, "uuid": "1f153727-b749-417b-bc6a-5ec55e58f51b", "value": "T1F21429CBF801DDBDF80BEA3A4C531909B170B77214925B372257B967AD3A0E50927F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035443, "uuid": "ec27a025-1454-4ce4-88b8-7462417fdfe4", "value": "3072:V3D0W6+PRn0wVQUW5SuM+uOT0mhgO7qIpjzJH+1Y+3PTJ9lZ++fFEVNjbihLCXVu:N/LnHfAS2pzJH+1R33W+fpLC7yXEz0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775035443, "uuid": "fc2d75eb-d995-482d-adf0-7b6ec9c62791", "value": 200608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035443, "uuid": "a1697a57-831e-440b-8654-4b8d37ad64c5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31bf0686-2dad-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775035731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035731, "uuid": "5da18318-9c9f-4490-a221-d0862c3583dc", "comment": "Malware payload (Mirai)", "value": "0f5580bed510a3c7f106c7b43c05f67f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035731, "uuid": "7128855a-d55d-47ad-9e60-7819dd973378", "comment": "Malware payload (Mirai)", "value": "a65211cd909a1bf9ad9c528f9e49915dda62eb23d104d5f56772cedfefc9656e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035731, "uuid": "db3f4337-ed4c-4efb-a127-9273f1648a9f", "value": "T1027302BC070498DECD607AF782BA4B521F410DB910C6DD40E9A6EA622EC71743DD7A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035731, "uuid": "dc031ab5-6ed6-43b5-b849-b3216a5848d6", "value": "1536:w0B3b87urwemjU1Fh+V3z6HdTSPzy4JTJeSesSg0uqAvyigVJu5:wwweV+VGHdTyf3esTqlZVQ5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775035731, "uuid": "fe2c117d-6cb1-49a4-9bc5-c0f83930d626", "value": 73728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035731, "uuid": "2699c1c9-f822-47a9-bbaf-9345e7612603", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3da79e4a-2dad-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775035751, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035751, "uuid": "16378e5e-775f-4606-b567-801b38b8b3d7", "comment": "Malware payload (Mirai)", "value": "1b5df7f93f5a786bb9ae8c015844f0d7", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035751, "uuid": "e326d9fa-86d9-4d39-b200-6f7461c586cb", "comment": "Malware payload (Mirai)", "value": "f12da0de01043970050d584da976e34c8b4b8d32739a385c68ba1f5522ea99df", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035751, "uuid": "b8c95fb5-c729-480d-af85-9f414e7103d5", "value": "T13373F25DA92927D0C5310E34E49C36616D3AF5C00239CE5D632DACF9FE0D877A2661", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035751, "uuid": "ecd5c326-345c-41f1-85d7-60e532f8a3ec", "value": "1536:HiNnqKxdbnutez1ehkEwkfR0GyV96XNTrloRbis:CNqinuuehrw00Duds", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775035751, "uuid": "42509ab7-7b22-4374-84ea-d8476b554d8a", "value": 76060, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035751, "uuid": "6ac8ae1b-6102-426b-935d-358b976eb9aa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08bdfb6c-28c7-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775035989, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035989, "uuid": "3106a67e-8f64-4e85-8f59-708466a6fda3", "comment": "Malware payload (Mirai)", "value": "828bed67eeaf8510f174d5f24167b97b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035989, "uuid": "165ede66-4453-4863-95cb-4919c5363125", "comment": "Malware payload (Mirai)", "value": "04f0c5f71d4b934159b2bf2d8e13862a032a910704f5596422e5161b9181ee8d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035989, "uuid": "de3cf7a1-78c8-4c3f-8861-b943abf12e9d", "value": "T1D1B30A52BE429F17C5C321F6B7AE46483B127B78D7EA3102ED257FA0274A4DB0E266", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035989, "uuid": "4944da45-4204-42e3-b9b9-995763dcfbc5", "value": "3072:kwsPCxU2sEALe96ouv6ar83111111111111111wMnAS1HgS:cPCxU2bAShuv6aQHAoAS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775035989, "uuid": "2db3f86e-08dc-4272-bb7a-611657f86e86", "value": 113172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035989, "uuid": "a08780c5-7093-4cea-b647-3311a4606644", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52e75848-28c9-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775035989, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035989, "uuid": "d0d54057-e152-4bf5-891a-28c2c2b553e2", "comment": "Malware payload (Mirai)", "value": "68eaed383f8eb83599e828922ab86b50", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035989, "uuid": "6582cd15-b9b3-4459-9308-0f95a964f1bd", "comment": "Malware payload (Mirai)", "value": "22609df256833834d36c6d61e263fa78b6d625c05faf1460c289ff971b8e1e31", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035989, "uuid": "eaee83a0-be01-40be-a49e-08f576425908", "value": "T145C33A02B71D4F43D1632CF02B7B1BE08799FDA119B4F580651EBECA92749F62242E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035989, "uuid": "192ca7a5-f354-4a33-8169-df87d93f7119", "value": "1536:uqyZG7E+oTOOBoUw6EBy6oUXAAMrT8i+KFI/ceL3bfJD4L3/0XAvihvGJoHYeXZD:uq3A+/2wJYu/cudGIAvi0J2XuLS/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775035989, "uuid": "e79a980a-1cee-4cad-83cc-e86c08f3f1cc", "value": 121464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035989, "uuid": "f2a4abf6-2a84-4575-bcdd-423eca571dcf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93ffa240-28ca-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775035989, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035989, "uuid": "b1bdc193-d0f9-4247-b961-b4365e1bcf43", "comment": "Malware payload (Mirai)", "value": "6ae45c08505e61534904f6f81a5246c4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035989, "uuid": "17cfae70-d100-40b2-b105-5312ef0d53eb", "comment": "Malware payload (Mirai)", "value": "04c81f45441c3a817bb5e655abf3b48768e1b175c68945b9cc4e9b461429c806", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035989, "uuid": "d1bb0323-12d1-4322-8dcf-d624aa14699b", "value": "T137144A83EE890EDFC45BCDB086AF835B19E365AB4CD2F1F0583C8C1C755D29A56A36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035989, "uuid": "88474a40-d6b1-4aba-9c31-9517fcce9537", "value": "3072:HfZpyRHpBEKk6t2n2LL9mkso/yGDnNB0uOjGhU7CzCvQ5c+f7sWkB6qgcIr4:BsRHwKrt2n2LhhDXQjGhUOGvuAWkB6q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775035989, "uuid": "aa056214-e414-44fd-93df-a15b8af379f8", "value": 205380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035989, "uuid": "29b30e92-933b-47c3-8b03-74cb033b9435", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c893865-28eb-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775035989, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035989, "uuid": "9dc404f6-c9a6-4e5b-9bcb-17e186cb7bb8", "comment": "Malware payload (Mirai)", "value": "cb70ae7216ba236a95b42eb2d9e49eab", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035989, "uuid": "501ea359-f1f9-4d41-8170-04e2551b4177", "comment": "Malware payload (Mirai)", "value": "b6e16730d6d3ef3922e0a41f3e8c972ea1685baa08263b57c2664883e81a244a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035989, "uuid": "7a58dfd5-5797-4572-86a1-aa23aca1d196", "value": "T1C4E3E70AAF610FFBEC6BDD7702F90B0229CCB91716A53B797534E818B50A18B59D3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035989, "uuid": "2e1508ed-0fdf-4761-a423-8fc05ae7cc97", "value": "3072:EtXSnYstme6NBfN81u7pZSBeZK16RxBf:iXo+e6BfN88ZSIlr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775035989, "uuid": "c8983b19-b476-4a39-8b60-992b61cd3a42", "value": 153848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035989, "uuid": "8561d2b9-65c8-4478-98c4-b7bcccf78d78", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da60d1c5-28c5-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775035989, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035989, "uuid": "60bbb0cd-f6ac-4fe2-b31a-1e7c272d8af7", "comment": "Malware payload (Mirai)", "value": "6f634ad9e84a64f502bfdc0c588027cd", "object_relation": "md5", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035989, "uuid": "0651ff29-ecde-4e3d-b0f5-099653b84c89", "comment": "Malware payload (Mirai)", "value": "b4fb9c7262d93538464cb8f92c2ae3fbc16e7dd96d92badcb87cec1aed08be05", "object_relation": "sha256", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035989, "uuid": "e4a2a132-84b3-4eee-81d3-72775927892f", "value": "T111143B13B7324FA0D725D1720BB38B565EEB01811EE298D5936CCB143A207A9689FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035989, "uuid": "3fbb21f4-cd54-4d87-b737-e0e3f6c93165", "value": "3072:PdR0Z9hykiiHcwTB60i0oga+gJMk7sMjWJ5dE31Gt2UhpA:FR0XgkiKcwdJhogoJMYsMirulZUY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775035989, "uuid": "fc4959f1-d997-40c2-a3a7-761cb7c2df43", "value": 201280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035989, "uuid": "2d773d5d-a2e2-4a1a-a563-58c5faf01900", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d3d47b07-28e5-11f1-ba1a-82aee05be84a", "comment": "Malware payload (DDoSAgent)", "timestamp": 1775035990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035990, "uuid": "b4022f8c-d22e-4123-98aa-a8d11e264176", "comment": "Malware payload (DDoSAgent)", "value": "27df53f9cd07d454c401001d6ebba42e", "object_relation": "md5", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035990, "uuid": "c0561528-dfd3-4626-b96a-5a043feeb7b3", "comment": "Malware payload (DDoSAgent)", "value": "505d429c30920de8738ec53459ffe674a47554091c6c0a45d0076d456c1407db", "object_relation": "sha256", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035990, "uuid": "3f62c075-578d-4a8a-a71b-204c69c2efd2", "value": "T189157C4BB2A374BDC057C43043ABCAB2A935B43542226E7B65C8DB303E17E741B5DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035990, "uuid": "6bfe4352-af83-474f-a094-1352e08fb7d6", "value": "24576:X28n44sjkmvkbj6hTeotCxLQ+B/2ITM95x:mP4sjkW1htvmTTq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775035990, "uuid": "0304e488-fd22-44c9-a25b-31f23e8896cb", "value": 899144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035990, "uuid": "6294c66e-1f5e-4675-8d81-67119ccf0ed0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6c29efe-28c7-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775035990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035990, "uuid": "8a880fbe-b464-4c42-b0e7-6aaccfac57f8", "comment": "Malware payload (Mirai)", "value": "1c66357c7d4a00cb2003eba4d060d26f", "object_relation": "md5", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035990, "uuid": "15f7ff58-c8b5-4e3e-a75c-81cb0c0cdbf6", "comment": "Malware payload (Mirai)", "value": "cfe30f2b3a18b72405c7e982aae6fd2f272a5e4fbd6703674715bd050b6de296", "object_relation": "sha256", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035990, "uuid": "982fcd54-b19e-4b0f-a01f-11fd1a60b5e1", "value": "T10E157D9DE786E0F1F57300F1025ED7F60534A12A9013FAF6FF8A266274727A16F162", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035990, "uuid": "fa32d675-6233-4afd-bbc1-67fe014e3fe7", "value": "24576:QPviY/6n3AhIOhojX4oJMgTHWFDE92nU:lAhIOhojrMga9U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775035990, "uuid": "270d9498-a6f4-44ca-a339-32998365df88", "value": 927576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035990, "uuid": "3fa26e24-ca62-4ff1-b855-abd84eb9662a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8850e51f-2dae-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775036305, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775036305, "uuid": "890d371e-ffb2-4391-9987-23b2a2b5f975", "comment": "Malware payload (Mirai)", "value": "03c4f12be1e60ed144015ff0e15a3918", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775036305, "uuid": "4c06e16a-735d-49de-ac64-ddc412f6a955", "comment": "Malware payload (Mirai)", "value": "38b1260b84d6080157ddc1a5b04727b81383cda5a90b02e1902bf59a0511114a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775036305, "uuid": "3e19d8ef-8abb-45d8-80d3-a1adddbf4c9a", "value": "T12783120192958463E1A128B4E4DFCE49E0F771B874DD06F3A39A944F687DA507EF13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775036305, "uuid": "4c602a86-2ccc-47fb-97cb-a24b5b27fcd7", "value": "1536:nQOafW5DLJTcMf8sHNxU6mjJO1otXO40f20opRXVAJIoFJ44eELyxETXHUo7YkUl:nQsRJTkMUFj1M400yJIoASLgKHUo7Yxl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775036305, "uuid": "3bf00e06-5fae-4fe9-82d8-8e5752ac2fbc", "value": 88304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775036305, "uuid": "8a87f650-08bd-4636-9b32-7b2df3845ab4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c553ace2-2dae-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775036408, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775036408, "uuid": "9f2f6556-eb75-4b85-b774-3db95cb6e763", "comment": "Malware payload", "value": "a5d6f21ef6f0b2cfea71882213ce7a5b", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775036408, "uuid": "cabc1da6-402c-49df-8097-9c6b24339d1b", "comment": "Malware payload", "value": "fa526c16cf5da5d2b02b6123ff57069da511f47e6a6d285af3cdc0cb3094b364", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775036408, "uuid": "bf48b72c-2e50-43ab-845d-8161bd2384db", "value": "T181F300E3762016BFAD74C8AF7F1549CD50BAFF0043A1A0B2978F689494E4752E1B8B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775036408, "uuid": "ddd4d840-f46a-4e6f-a0b2-b0781c4d0520", "value": "1536:TeFwZbnhAOQY4VqrnK033AVJ1WhywFIioM6jWjFL3CVa7jXCTVRxv5oSkBCpDId0:TeobeOjprnpgVJ1WZn5MhkTX4ySL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775036408, "uuid": "d7a8eec8-c8ac-46d8-a322-0ef9c543c552", "value": 169998, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775036408, "uuid": "d76c0752-4525-4e0f-b389-d2587cfe91fe", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "121f2195-2daf-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775036537, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775036537, "uuid": "ddc29aeb-78a6-4e38-a490-aaf477cdfc5b", "comment": "Malware payload (Mirai)", "value": "26dbd3b125e7ce3c237367eb42ece5a3", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775036537, "uuid": "800191e0-a118-4d79-8415-c6aa87fb9a51", "comment": "Malware payload (Mirai)", "value": "b4c161f183d40a4e9908901e3519f2100a2cf14c19bbd5344ee8de5720f5790b", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775036537, "uuid": "169441d3-b7e2-4ba4-8656-283b40dca9c7", "value": "T1966301A4C311D9CBCFDB6DF40E04B7F1A2326D0996722AD3A77883906BD7E0A5249D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775036537, "uuid": "4a3afbbd-4583-4b29-a2f1-8596b167604e", "value": "1536:VjT9TY4ATMQiJ9LEf2q33MSwnI/FPZ7TKMMkqsLfZCklt4u+qgw09U:HY4bLPLEf933Dt/RZ7TNZT4u+qgwp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775036537, "uuid": "c2133c85-1791-4298-8a0b-a6e6c2934488", "value": 67684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775036537, "uuid": "5267a346-73a5-4e37-bb25-06cd5931e4a5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "faad716f-2daf-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775036927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775036927, "uuid": "52e55c37-4e5e-4cd6-bffa-8dc3986d8744", "comment": "Malware payload (Mirai)", "value": "9f991348778ceb0e4599397460ce6c8a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775036927, "uuid": "88633d8a-1821-4a17-9ff1-13ed9388134a", "comment": "Malware payload (Mirai)", "value": "1c580da3046e1cd892f51f3af3c327fa4c5c19435574f8e6277c4173bfa18ad4", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775036927, "uuid": "0a20e750-4143-4453-bb65-632bf7e1566b", "value": "T1A463023D572A36B969F860368042DAD3E1DBE3BD91BFB4AC0051C1DE2D9C0670B4E5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775036927, "uuid": "9f20c0c6-6014-408c-9dff-b78c1e7a61f3", "value": "1536:FZlqTVq40QhRrsw0qakCyaL7zgCHtVnjJ7aaznznzP:HlR4Fvow0rkSgUtFcEnzT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775036927, "uuid": "3f755520-67bb-4717-a9d4-dcefacf5582c", "value": 68872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775036927, "uuid": "06eb2839-7a60-45f2-9b85-776576db01ca", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d3db5c14-2db0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775037291, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775037291, "uuid": "2a4bbbfd-fbb7-4977-baa6-ab308e01c8f8", "comment": "Malware payload (Mirai)", "value": "d37ec7246720618ddfc58668422c30b4", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775037291, "uuid": "b0f7bb91-29b0-4803-a661-ead6fe0b7d5f", "comment": "Malware payload (Mirai)", "value": "989a4868eb390b4a1d97cf77bd810ca843ea7fdae3eef115a1ffcade96c5033f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775037291, "uuid": "430ab144-842e-467a-9f0a-5a1fecda4072", "value": "T1E634235847F4D367C53428BD88BC80FC1A014E2973FE60A7AE22E56FD9857202D59B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775037291, "uuid": "97ed9aa1-b446-4a75-a180-edf4043a23c0", "value": "6144:UJ3dOqy+6QLf0bru4b1wl0P7LzbyLtjRJDIGm/e:U1xy+6QLfY92WP7LzGLt1JDIP/e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775037291, "uuid": "cfcda7b6-1b8e-4dd4-a74a-6c7a86058729", "value": 252792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775037291, "uuid": "eb5ef307-0e54-48b5-857b-05b030025e9c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06824eaa-2db1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775037376, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775037376, "uuid": "addc9915-16f1-4981-bfc3-19adaefccd85", "comment": "Malware payload (Mirai)", "value": "60785244ea5e224032377fe3ee56f0c0", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775037376, "uuid": "ccef3728-d05b-4b4d-921d-77f563bc2f31", "comment": "Malware payload (Mirai)", "value": "9ab5896db88a6279a4c0e3060e0061d8357d2077ebb1115f9449d1eb3db40b80", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775037376, "uuid": "2014992c-fd92-491f-b30d-41b5a1e52716", "value": "T166430272DCB5C808B16646FB4536FBD1D1C2907E5AB808BB6B5038E119F95B8B621B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775037376, "uuid": "5d19e218-7dcc-484c-a7a8-f853959ebc5b", "value": "1536:6UaADD5K5ZZwFQesZBE+a3MrucFjZSPOvdoCQd4oZGclNUnouy8Hy0:jtlK5Zi/sFCLQjZSPOvdoCQq6Nkout/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775037376, "uuid": "e4adf78b-cac0-4143-b239-69e90b516eb9", "value": 59972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775037376, "uuid": "553444eb-a975-42ac-a1b8-1a24d89dbb82", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "403c6eec-2db1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775037473, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775037473, "uuid": "6329421f-7a0a-4994-8b09-87b670ccb1a0", "comment": "Malware payload (Mirai)", "value": "96816d4db24419beda26502574dc110a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775037473, "uuid": "48ff06a5-4438-4435-9449-d5e49743bdd1", "comment": "Malware payload (Mirai)", "value": "1ee1b7c114e3eca3597b10815417d933281dea5a05af2ca23c3445205839e446", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775037473, "uuid": "7336e181-9399-4cf1-9eab-cabddb3f57e5", "value": "T1EF7302F1B54E657382A324A6B8B3ED973CEC7A78E48EF50748ACD06AF502D4354953", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775037473, "uuid": "8d0575df-b1b9-4582-820c-b8a4a30b6856", "value": "1536:kguWOMb9QllElTTTg4GbhbbvxnhITUewquxIf5ZuHT7je7MKnPBvIEFO6afL0:kgGMbKi4hF7tHewquafuH61BfgL0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775037473, "uuid": "8dbf4ab1-65fd-432e-8ae3-86b3155cade4", "value": 73656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775037473, "uuid": "40609771-ac20-44c3-a324-64ff394f6c40", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "476d95f5-2db1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775037485, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775037485, "uuid": "9f8dcc4b-33f5-41d0-8427-939c5bdc91bf", "comment": "Malware payload (Mirai)", "value": "2a35891988ee136e6b61ccaf11401e84", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775037485, "uuid": "d534d745-9125-4e70-b704-34b85502aff9", "comment": "Malware payload (Mirai)", "value": "5c067ef70261e6ea744eb8bcedf95e8c52ad89ab1a1f0155e349b05207385da7", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775037485, "uuid": "d5ccd0c3-cfca-43f6-80fa-b6d746c6962a", "value": "T1F9F2F169A62F70B4EB72A0B370288A9DD24619EAA1F4723B2C800A3DD5D500BBD757", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775037485, "uuid": "bba1d04a-8e39-41f6-88a7-ebcc109e2726", "value": "768:8pxQBX9ACn0tmkFXL7Lfa0ZlafgEOIGr2PLF+kKLiFs3UozM09:8rQDAztmk/sfg5jracHLNz3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775037485, "uuid": "537d3d7c-d36e-4b0d-9c7a-7cdbf96b469d", "value": 34600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775037485, "uuid": "a4a7dcf5-554c-43ee-87bc-87a5d8269978", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "168b15e8-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775037599, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775037599, "uuid": "4ec88c1f-a133-4205-b565-0e4a735ab793", "comment": "Malware payload", "value": "c73634570e4a70d7040fabcad0ea2773", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775037599, "uuid": "2b926ad9-7d73-4a65-adaf-bbfdde622fd9", "comment": "Malware payload", "value": "a7576c44f6f25dc87fcc803b0e463e385c13a048169536a7c7a5de804b0891ef", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775037599, "uuid": "783fd3f4-f281-4dfd-8810-3269b75910e9", "value": "FA43124623662AB6857149F0A3FCFF8EE24A3E58CFF55C197C107A28A93136D2CC481C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775037599, "uuid": "980dae48-b853-437a-b7f9-3b5b3ba9a4b0", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyqe:yYI0ARqw1qAEv7UIFM8oJorFquyje", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775037599, "uuid": "7db99d55-ecaa-4538-a109-384d7c5bad7e", "value": 57920, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a1470c8-2d1d-11f1-bc00-82aee05be84a", "comment": "Malware payload (ACRStealer)", "timestamp": 1775038263, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775038263, "uuid": "ca7e13a0-d649-4fe0-ace6-cbe1f3d4c6af", "comment": "Malware payload (ACRStealer)", "value": "a1f2b1692dc3c5a731aeeb083a02b654", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775038263, "uuid": "ad8474ac-88b2-4b17-a2cd-57124e61fd81", "comment": "Malware payload (ACRStealer)", "value": "9da0a2d5d86790d615e32d54870656a7917f515c1a44ca2849c2c3e704b0286b", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775038263, "uuid": "57803bcc-25cc-4ae1-8877-ed1110c8d34f", "value": "T1B076E75AAC500180E0649134662F932377BB3CA85F355BC72E95F7342EB7BD42AB1B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775038263, "uuid": "fd9af4e0-6817-4b59-9dbe-ac67d5bf1a21", "value": "534141bbeafb0cfa024f8b6830c176a9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775038263, "uuid": "3a825339-d30e-4610-9d35-3814095c1414", "value": "196608:cv7MK/tUTDo6Td+npJnW3s769ZK5NLKdEoWLtdZWe4oOoDlCd3erFGXedmL7qulD:cv7VUvt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775038263, "uuid": "92b228ba-0878-407c-80c2-b8ff0d368ee0", "value": 7381504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775038263, "uuid": "65435281-896c-4073-931a-a6860af0498d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "37f47d9f-2db3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775038318, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775038318, "uuid": "6027cf8a-6a65-4b58-8b75-b71860f29050", "comment": "Malware payload (Mirai)", "value": "c58b5aa8abf7ae0fc6ec73efd3ad700f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775038318, "uuid": "13a046f9-db1f-49a5-9ddb-c4d9b02b151a", "comment": "Malware payload (Mirai)", "value": "793ed95eb6ef4d880d85e5aaf46a415949a1894a1f1022aa11e9d8923e8b1b84", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775038318, "uuid": "e1ec18b8-eddb-4883-a322-6de62cfc58d8", "value": "T1C863029BB01FDD71D8421D713AE2D148F350E64F9AA61B294D051A7C8EBAF32142DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775038318, "uuid": "9c6c50b4-4d62-4170-a762-48714541dee5", "value": "1536:fSA9ENb1r8Vr6oU19i0lzM339BtKfdYMWzT0nmMCS5mpxTVI:fSAUb1OQ19i0lz439BgdY10mMohI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775038318, "uuid": "3e0e8019-667d-4afc-a0b1-984521f937e8", "value": 70748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775038318, "uuid": "927ead11-4157-4ae9-aafd-9c7ae94d6589", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce58a12d-2db3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775038570, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775038570, "uuid": "5abacab5-8843-4263-a084-36a8ad5c37b4", "comment": "Malware payload", "value": "db60922639b466a0c8fc3e0042631129", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775038570, "uuid": "e06a12ed-5783-417e-9197-9b16968b3b1b", "comment": "Malware payload", "value": "4f08b9885e00cf695db5e4f06a2c40965d0636bc9c39d65a3574009cc7791a0d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775038570, "uuid": "a8e72679-668f-40f0-937d-2ccaf85d915c", "value": "T1BFA5E12CE102AD3BC967B2FD50976387D716E08111AC5DE2E8DA99380B4A7357F321", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775038570, "uuid": "75539c6e-9180-4575-865a-2debaf885ab2", "value": "49152:F2Zl6zn9GSmvS7v96gh+aLdYCn8i3+LBPuBvOA:UQII6g4WvdeoBvOA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775038570, "uuid": "aef76b7a-f350-478a-ba2e-9a2ece0b6d6c", "value": 2147342, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775038570, "uuid": "6c90835c-45e7-423e-89db-e997675a8ad4", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a53243d-2db5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775039315, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775039315, "uuid": "c37244b4-53d9-4e41-94a0-7cde689e82e4", "comment": "Malware payload (Mirai)", "value": "491586723dd5cdca284b1612b533d73f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775039315, "uuid": "949ebae6-9fbc-4b3a-b66b-559e0e3cd2f6", "comment": "Malware payload (Mirai)", "value": "ea61e090f64b28c641b4d7c1fd771082eaf91bec933242589e48f525cebb3da6", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775039315, "uuid": "346dd2d8-493d-4ae2-8150-dd2ff07154f4", "value": "T16143F22EC49D5C99F698C03C2DEC734E58B0D10AEACA5AE44744464EC983AFAFF64D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775039315, "uuid": "e67c8d88-6e88-489a-938b-77a780accd91", "value": "1536:SGIsYa2RmMEH6D1IqZdHXXCbgOg5R/GQREWnouy8KyW:SGIK95q2qZRXog5R/GcEmoutm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775039315, "uuid": "844a8293-5903-40b2-865d-19910692c3d4", "value": 57248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775039315, "uuid": "e141ab1e-7aee-4ae4-bef7-a19867e64c5e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c09b322-2dba-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775041305, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775041305, "uuid": "7a963b37-66e7-450e-ac83-faed5f709ff6", "comment": "Malware payload", "value": "e1a42eb2b503f7d0d149c3e40717dee1", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775041305, "uuid": "b86f743a-74d1-4e04-8927-e6478d31fde6", "comment": "Malware payload", "value": "4e089cd98ea6e6c8915f8ecac8f789cd07a037959f43f9ab4c2a380d6dcd4502", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775041305, "uuid": "37b61aec-f041-4f2f-bc1d-b7bca7611853", "value": "T15E3110B71CF340915C13942647F77749AAA68503F54ED84138DCA288CFA9EE4C5E3B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775041305, "uuid": "b51e02ae-e181-4d5c-9848-ed3b4cb6a518", "value": "24:hY8DqCsgnIRRZ2gbIOUpGpDST9Cq9PG5iAxGJfAI1+Fb8YEPakUL8oh4z4j:bcgIE6UmUCqh7AxGJIi+WN2RhRj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775041305, "uuid": "a6802195-f172-437f-b5b3-5b8c1bd30a57", "value": 1728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775041305, "uuid": "5a4b59da-ee34-4646-b3ad-7ed95708f167", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7dde2454-f2d8-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1775045947, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775045947, "uuid": "96a153a5-2e59-424d-8c98-34fd2d9c372f", "comment": "Malware payload", "value": "e4d5b4b0f98560e882ef7d24b1012b6a", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775045947, "uuid": "4b269f03-ce36-400f-aef8-6a043fc1708d", "comment": "Malware payload", "value": "d26c1da1978da0296f16094a6f20cca8d3d5e85f047fc0f80eb203aae6770599", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775045947, "uuid": "60b9e93f-de36-4ccc-97d4-7f87891d3d6b", "value": "T11CC3F1BCDC2C5442CA1B61F28C4ED11665DF841DF9E79A5672100A480E69EC0FFB6B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775045947, "uuid": "2b917ee5-65f9-4204-85eb-e44990378d6b", "value": "3072:7gg9/shHyGE5/wskZ0MnIUboP1TXQEAh4:VkIGE6taMnIUboTgNh4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775045947, "uuid": "30568bdd-de2d-4770-ac6c-3f2993f82bb2", "value": 120852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775045947, "uuid": "6635aff1-ee03-4b19-b14c-cd46fbc1c103", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00ac8487-2dc5-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775045956, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775045956, "uuid": "4240377a-fe82-4178-a6bd-40bf7650272d", "comment": "Malware payload", "value": "05fe0d372f6e6bf3e92a83c061299c6c", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775045956, "uuid": "3b69115d-3c57-41e3-8136-f69bea187961", "comment": "Malware payload", "value": "f75186f51a4ed00d24d07434bc8d1ea843680c0920d5952e06b64c6b24361c9b", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775045956, "uuid": "4961f23a-9265-40ac-8be6-06ee76e51c70", "value": "T14D772373F728CA2FC8BB01700CAB7231661A5E15CE82E35B6908775C7A779D41E89B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775045956, "uuid": "c044a950-383e-41f7-8527-60a2c4382717", "value": "786432:78zGthrhIOzD/mSFTq+P9oT6H3bI/5zXuT3Z49X+EQzoEYNX:gzMhrh/3Xq+P9oT6XbI/5zeTmYPz2t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775045956, "uuid": "1f6c0cfb-0f3a-4124-961c-b18f8478f84c", "value": 34661069, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775045956, "uuid": "093dfd75-6e8d-4cdb-9f7e-5994c91b0ff2", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07009ade-2dc5-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775045967, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775045967, "uuid": "4da5c512-4581-43d6-9cce-6e194ab84f37", "comment": "Malware payload", "value": "270902c6bb6844dc25ffaec801393245", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775045967, "uuid": "53091422-bbdc-4dfd-86e7-06b40b79825b", "comment": "Malware payload", "value": "7b024deda9a285ce08cdea266a351c5714ca61e6799cf12aa474ccdf04363a68", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775045967, "uuid": "0249b641-0a41-4f57-95ad-bc6eb8d82c5b", "value": "T1F9D633C9AA130EA4C9461E7F0F720E411A741A25DFF427506BA78CB71E6E34D2F05A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775045967, "uuid": "b0e5e198-37a0-448c-9eff-069ba22a5c8f", "value": "03e79a94d0dcb51acdcf1e8fbb5bd993", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775045967, "uuid": "72dd696b-0113-41ea-89ed-9099635e249d", "value": "196608:h5NPwiLljpH1lU9WMBHCxYPlyYrKguWjcWyJSNxUKLd5H5G2sZbt038OGl8ls:bljpHrUMAHCxOduoXNqKLdJFybagT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775045967, "uuid": "43392255-aae3-400c-9a8d-dcde9c614334", "value": 13195464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775045967, "uuid": "26db952b-153e-4369-9c85-831121959d9e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "97e97e05-0b1e-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1775045977, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775045977, "uuid": "3691d6c2-cd8c-4825-b9d4-b638b548944f", "comment": "Malware payload", "value": "095a009d86ea5580f3b9f829b8b0db48", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775045977, "uuid": "b2de867a-ab1b-4fdf-b491-beeeb4444dd0", "comment": "Malware payload", "value": "f90f4a90218ea63983fc1395362604236d159e2c3d49683e033a3bd272ad9b18", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775045977, "uuid": "4c41323b-80c9-48e8-a83f-45ae10339e1a", "value": "T16787337BA2606F8AF0F687B40CE1C45313317D6C6F62478E438F53546A327286F6DA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775045977, "uuid": "ef3e36f0-c85b-4a50-ab6e-dd17552f247d", "value": "58a01dcb342d5b69678b6a4c275d6c60", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775045977, "uuid": "2917f8a4-0678-405e-b753-09c16af9cfa7", "value": "786432:aa8ySBIhWXO93vhFw208gwgHSxz1hc2UOlyxTLAjf:aa8xJO9508gwgHKPcVOliAT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775045977, "uuid": "5e4a7396-6d42-4ee7-ae57-3486dacd664b", "value": 37964212, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775045977, "uuid": "6d9a8070-8c89-4b14-a5cd-7149e5434d18", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29a246c0-2dc6-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775046455, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775046455, "uuid": "85156ecd-8f3c-4f79-b3d8-00022dde57c9", "comment": "Malware payload", "value": "08db5e1f9e962f4ce192b1e120e9094d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775046455, "uuid": "fa7d59e9-9e29-45af-a782-17b32ec6afb8", "comment": "Malware payload", "value": "870e9e2b692f66f2978d842a8bed62fc623c1d62af3e259bb033e3b15c6905cc", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775046455, "uuid": "7e85dc95-9f36-4a32-ab58-b1966f9ec62c", "value": "T17E93E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB32", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775046455, "uuid": "fd9afd5f-b02f-413b-a3c6-8d841da792d0", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPX7IH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYP6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775046455, "uuid": "364bf805-d106-408e-922c-a2e13153e5a3", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775046455, "uuid": "0dec0de2-bae8-40a5-9404-1d36b6bf1694", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a013e862-2dd4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775052666, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775052666, "uuid": "2f607e3c-8839-4ce1-8d9c-bc7c4da28515", "comment": "Malware payload (Mirai)", "value": "3ae13a2e11fc6663a91f029b892fb15b", "object_relation": "md5", "Tag": [ { "name": "176-65-139-40", "colour": "#eec414", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775052666, "uuid": "b099d5c9-f557-4c60-94a3-cd69470b7f19", "comment": "Malware payload (Mirai)", "value": "8a1bf2a655dc0e6c1a6f12b4aaa99d213630794df21c00530cef615e64db950a", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-40", "colour": "#eec414", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775052666, "uuid": "287cfef1-bfcd-4550-b0ad-54a3d2b9bd9b", "value": "T1B9133AC1A643D1F2EC5212F5147B67628F76E4364A7DFA92EBA92531FC03B10960B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775052666, "uuid": "5ea9f998-a192-44cb-bc25-889534f632f6", "value": "768:QQaiSup66OkEgy5oD5YQuj4JnUTeU4wQOnVspVI/4bOGd7nX:QQaiSuptOkEX6D5YQ/JnUeUDtVspDbOY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775052666, "uuid": "edad4067-6624-46bb-9df5-433a1ad2a670", "value": 41840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775052666, "uuid": "127fd669-5cd2-45f7-80ce-84e649b3dd0a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5cdfd59-2dd4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775052730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775052730, "uuid": "f8350601-2977-421e-91aa-77d537a13d1b", "comment": "Malware payload (Mirai)", "value": "222276da74b6dffcbb2726a873a3bc39", "object_relation": "md5", "Tag": [ { "name": "176-65-139-40", "colour": "#eec414", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775052730, "uuid": "12b97d0d-fdde-49d4-ac9b-4ef9da059f61", "comment": "Malware payload (Mirai)", "value": "2beb8732866cc32c95cfcd9403a82bf9c26a0370e78093932f69d74ac135599c", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-40", "colour": "#eec414", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775052730, "uuid": "6412d659-6389-416f-b896-20ec33011806", "value": "T12A2329035491C0FDC955C230AB3FA636C922F47E123AB59D73E0BE227E5AE311F5A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775052730, "uuid": "529bc00a-d223-470f-a488-507ee7007315", "value": "768:FkrR8ysZAY+OGZZRw4x7wPtKOoKvHjKRDACGyjltp4B6gC:6d8y2+OOkyQDckCGyp4B6gC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775052730, "uuid": "f6056dbc-0c27-40c4-b877-596c4d49480c", "value": 46400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775052730, "uuid": "4201e94c-099b-4973-89c1-8092d1a8464c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99d99e5f-2dd6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775053515, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053515, "uuid": "bf149501-7565-42d0-9348-5f8d741537e0", "comment": "Malware payload (Mirai)", "value": "a0f26b9c23b0b16dcb2863f1e4fa81b0", "object_relation": "md5", "Tag": [ { "name": "176-65-139-40", "colour": "#eec414", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053515, "uuid": "83a9158d-9cb2-49e7-a331-5d36a5c3b382", "comment": "Malware payload (Mirai)", "value": "b9e9941cce29ab4e894e50ec4fab3a0563b8338499324bb49cec5906421ebff5", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-40", "colour": "#eec414", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053515, "uuid": "b553301a-810a-4c86-aebf-06b2605a5254", "value": "T107132742B3180547D1631EB0353F47E1E7ABAE8122E4F288760F9B4DC171E77A942E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053515, "uuid": "d0a465ac-6208-47d0-acb5-121a1d275f4b", "value": "768:TuZQBal6xzFogyxBvDM2ccDP1UqI9XFPTMJy6/janpyvsM73V+Otauo:T0UFogW5DM23DyqWPwJy3nYx73V+uaD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775053515, "uuid": "01033b1e-8de2-4741-8148-4271c141ceb5", "value": 44168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053515, "uuid": "8d8816fc-76d9-4776-8069-4232d90bf47c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99e39615-2dd6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775053515, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053515, "uuid": "1065df07-db7d-4f6c-bc49-cff754e2b87e", "comment": "Malware payload (Mirai)", "value": "4792ebda1e56ec53eda63ee32dd63b01", "object_relation": "md5", "Tag": [ { "name": "176-65-139-40", "colour": "#eec414", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053515, "uuid": "be91d980-7c03-428a-8452-1a593c5b4790", "comment": "Malware payload (Mirai)", "value": "ee656f2bdca81a937e8ff706351d16adb4851342c48b6d81c929bd5f61c7e238", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-40", "colour": "#eec414", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053515, "uuid": "cfc2f645-d568-49ee-bbe8-d5f40c1ca90d", "value": "T1D353831AAF650FFBEC6BCD3745A91B49349C640A12E93B367934C818BA5B20F45E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053515, "uuid": "01d971e1-fceb-477b-9eb2-010fdbab7240", "value": "1536:yGtQ8AKyjOz8lI4DXUAFsMSL3bKL2LZgsF8qD:yM6KyazQJDU4L2LB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775053515, "uuid": "d3ef2858-ae63-452a-be20-942ac371ebb1", "value": 64380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053515, "uuid": "0bd01d42-9323-4859-9e15-d5d7bea04b05", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99ef0fa6-2dd6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775053515, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053515, "uuid": "4473c62d-a8f7-4c75-94fd-0c3c80ae78e0", "comment": "Malware payload (Mirai)", "value": "9ec65b3f9b040a1d3b0276ef0f44d5a3", "object_relation": "md5", "Tag": [ { "name": "176-65-139-40", "colour": "#eec414", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053515, "uuid": "8be1af0b-9377-471a-a876-74e216efc6cf", "comment": "Malware payload (Mirai)", "value": "7d4df570e094bb96a7ca39ea0581544658c287840708386729de73d0397b0c63", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-40", "colour": "#eec414", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053515, "uuid": "2eb600d3-0ab5-4af7-9c27-8f9242dea062", "value": "T1CF333A35B6752A1BC8D8987D22F74328B2F4168E28F8CB1F7D720E4EBF6085025176", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053515, "uuid": "535d2cf6-47ed-40e0-83b4-89fdba78e7a5", "value": "768:vj72UF999I26p/d1DNwm+BW4HpX2KlNhdtBBY3hju/QJwO+351TSOj:v3pF1IDp/nNwDBW4HpmKlzB+3IQJa3e8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775053515, "uuid": "c67a704d-a9d6-407e-a8fb-41f76c558218", "value": 50256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053515, "uuid": "c107168a-281d-46ad-b00a-146301ba802b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99f07b10-2dd6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775053515, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053515, "uuid": "f342851a-9de8-4f77-a1e9-2c88e012ea3e", "comment": "Malware payload (Mirai)", "value": "3a74716229e8e229bc5047f2bfe94ff9", "object_relation": "md5", "Tag": [ { "name": "176-65-139-40", "colour": "#eec414", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053515, "uuid": "97637c5c-58b1-486e-bb7f-1df78c146c0f", "comment": "Malware payload (Mirai)", "value": "72cc7f6a36482e2e5dd0e2d63aaec1878cfe09991c088d31575ce5667ddbd844", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-40", "colour": "#eec414", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053515, "uuid": "0a031845-6dea-4f02-b30f-418bce40a310", "value": "T109133A92B400AD7DF85EE73EC093090AF131A79551821A3763A3FD776C322A85D76E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053515, "uuid": "a55d6c1e-030f-4e42-a37d-0a4b16e00a1f", "value": "768:0xqFTD4t0MoBjFNWEw0Cmk+3oh6WluD811JtTRHGtHwl5bsW71:COaWVLWLHVv6WkD811bRHGtwlXB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775053515, "uuid": "fbeaaf10-f0d7-46af-9828-700a7e4faf9f", "value": 45516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053515, "uuid": "720324f5-d233-4612-9816-3eb3c1f8f008", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99f54cbe-2dd6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775053515, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053515, "uuid": "03e8a546-b58f-49f3-8114-544e2afeaba0", "comment": "Malware payload (Mirai)", "value": "cb906ffba3a4611efdbd8f22d4280fab", "object_relation": "md5", "Tag": [ { "name": "176-65-139-40", "colour": "#eec414", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053515, "uuid": "f39899ca-4b36-45f6-b7bd-d4c22e7ef43b", "comment": "Malware payload (Mirai)", "value": "4c5b939bbd442decde09e877bdc79a11f75d03d4d315fcb3a0e4a10e6f91e8fb", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-40", "colour": "#eec414", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053515, "uuid": "1d88540a-c6b2-4a6b-88e2-066966c18d72", "value": "T1D51349C59A43C0F1EC1112F110779B519FB2A436AA79FB47E7A93A32FC02B1196173", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053515, "uuid": "c8666561-46d8-41f3-9289-67c6cb8144eb", "value": "768:x73jOIDzzrq7WiEu+RiUjrejEx63a7x2Rq1z7yvEdTpKMxn:FjOAzwvEuP4ajEgwKkWItKKn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775053515, "uuid": "265b1b07-4669-4877-a3df-21b1067d9665", "value": 41840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053515, "uuid": "c9cc4ea7-0d99-4283-9de0-2530864f2a96", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99f5cf01-2dd6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775053515, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053515, "uuid": "576175f9-784c-4c2c-95a7-491aa887b3d4", "comment": "Malware payload (Mirai)", "value": "387815367399df6e44afc22276b397df", "object_relation": "md5", "Tag": [ { "name": "176-65-139-40", "colour": "#eec414", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053515, "uuid": "e41c7932-ad80-4b68-96db-391944d42e1f", "comment": "Malware payload (Mirai)", "value": "76757ba65d7eff5bbbf6b3b0717fff216b583b3116e33320af600d3bbd618bb7", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-40", "colour": "#eec414", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053515, "uuid": "ce26b1fc-20cd-434f-9189-f2140dde70d5", "value": "T15D233A49C703C1F0D8861570507BAB7AAE7AAC325570ED5BEB983A26BC32B11950B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053515, "uuid": "db7bb25e-a7d9-41d0-8912-ada781559330", "value": "768:sXK15wniDa6PO5+m0h5phjSrJzm3W/NqNG1UJwlAscucuN7iKlkH1GsPK9K:sXK1KIfPk+m0rSom/D9cu5CGsiE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775053515, "uuid": "25850993-be96-40eb-ac8a-f5d0306b9b2f", "value": 45728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053515, "uuid": "8dd0f1d5-94e0-4436-8b03-e34636170371", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a013419-2dd6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775053515, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053515, "uuid": "0fbc8666-4d8a-447b-8cbd-6d9bb2b5f237", "comment": "Malware payload (Mirai)", "value": "116052c5690e088d641a82fb9dfe25b7", "object_relation": "md5", "Tag": [ { "name": "176-65-139-40", "colour": "#eec414", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053515, "uuid": "9717c480-d289-4c0f-9c6a-282fbbf3277a", "comment": "Malware payload (Mirai)", "value": "3945a2f61ac81ab5e81f7234653bba6f07d138fbda6ff24c96c3c5077f23b62e", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-40", "colour": "#eec414", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053515, "uuid": "7dc3de7e-0719-4bfa-8663-fc2719fe75ad", "value": "T172231894B9829A16CAD0437BFE0E42DD3725A398E2DE3313DD225F6137CB92B0DA71", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053515, "uuid": "780e6ae0-6fb9-4fde-8ce2-4f27666163c1", "value": "768:UXYesyi5wPVQEkJVvOwxPFV4iRu6Jj3oSCt6gPj5+uB4Pl5Q1bL0xkbUFqBgEk9H:VZe4vrR476JdIPj5+uBaluKObUoBEH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775053515, "uuid": "e16aa8f2-b4e3-4eb4-b5ac-b784071a3d60", "value": 47940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053515, "uuid": "ac048424-262a-46da-93f0-0086ef86cb16", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1a28966-2dd6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775053582, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053582, "uuid": "c918bf81-53f2-4291-a550-1604da3bd381", "comment": "Malware payload (Mirai)", "value": "ce86c04e156c12859ce46347058b16a4", "object_relation": "md5", "Tag": [ { "name": "176-65-139-40", "colour": "#eec414", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053582, "uuid": "d8ffb8fa-b8c4-4de1-942f-3b74d6512f40", "comment": "Malware payload (Mirai)", "value": "dd7c7ad6059f02e87482e809d968b5017a8ee58eb6a7d81a884a35dabcae7561", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-40", "colour": "#eec414", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053582, "uuid": "78238be0-970c-47a8-9181-7ebdbc161135", "value": "T170039E53C93A2D94C63985B4F8219B7E2B53E949A5936FD6D826C274C003F9CFC2D2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053582, "uuid": "7e1cdee1-e438-4adf-b16c-e5327ea90131", "value": "768:iTUc2eBs3+EuYG6TKjj53iGa/AEK9AKblZ3ay3VJ5egoS6VnYUvC5YMy3:4D3BsOEw5YLKQS2rCje", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775053582, "uuid": "7d6b8399-3577-4fb3-b438-c33ab06b53ef", "value": 39908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053582, "uuid": "fcd908e3-6c24-47e1-8c50-2c65d138fb89", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1aaba06-2dd6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775053582, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053582, "uuid": "6b821482-f9fe-45a3-b2bb-5052303c6d2b", "comment": "Malware payload (Mirai)", "value": "672fb64c30845400a85a77fe73562a0d", "object_relation": "md5", "Tag": [ { "name": "176-65-139-40", "colour": "#eec414", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053582, "uuid": "d1315be2-bf45-49a1-b469-391fd34cf0e4", "comment": "Malware payload (Mirai)", "value": "0516e1041091c8a7d30f1a19bdff7fc54449e634f3d15b7cb6ac40395075ddb9", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-40", "colour": "#eec414", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053582, "uuid": "2b93a57f-e332-4137-9f4e-1d289bd5e11a", "value": "T11F53941A2A258FADF76C873487B74E229799379727E1C644D15CEE001F7038E641FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053582, "uuid": "0bace5bb-f2b7-4df1-ac66-93fa498849e3", "value": "1536:dMBsSfx/6HdeKImzB1M1a6Bc2ueZqf3J3J9:afyHdeKFB1ZeZEZZ9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775053582, "uuid": "3177b86b-9197-48c6-b997-05595fcf73ef", "value": 63660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053582, "uuid": "38949b3c-bd43-41cb-9714-0b9afcee936f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1c39f93-2dd6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775053582, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053582, "uuid": "c190e965-5eaa-4a9a-9d6e-68175e113d3c", "comment": "Malware payload (Mirai)", "value": "247e18be4d0665e931cb9c6207e03c6c", "object_relation": "md5", "Tag": [ { "name": "176-65-139-40", "colour": "#eec414", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053582, "uuid": "ebe19c46-e448-4dcb-8dcc-58d36a577283", "comment": "Malware payload (Mirai)", "value": "14405f522d9fe4a37433c8f6cc446bf48c3f83a44f11e523f6dcb5e562f17cf2", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-40", "colour": "#eec414", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053582, "uuid": "07748f3b-d498-49fe-a1c6-1a467246aaa5", "value": "T1DD3319B51516F2BCE9E22078F40720F529530A1C3ADCE2D3B0930579FFB5B48B96AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053582, "uuid": "584a1616-c5af-4e26-9410-575e9fccfe56", "value": "768:zMClhMqB0yBuKw3GoACzQyZRtlkABYxQCTUnRGww31:zF0vZ2oR9DtlksYiNrs1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775053582, "uuid": "f3061acb-5014-4ec3-9a07-d3c66da0d4ee", "value": 50632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053582, "uuid": "36b5ccf0-08ac-4dc0-89a0-4242418af266", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "045e2855-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775053693, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053693, "uuid": "2fd844a4-f8a2-4af4-a045-34a1ff619673", "comment": "Malware payload (Mirai)", "value": "794db95d2a8c3cb5b24a82b615902d21", "object_relation": "md5", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053693, "uuid": "0ed13868-595a-40ce-a9f5-e5f2bc3214b9", "comment": "Malware payload (Mirai)", "value": "acc5780bade13667b2f6a3b428046546e950a45bc0226bf771382e5f8bc696fb", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053693, "uuid": "f61857a8-a7ce-4374-9497-bd0153fe1613", "value": "T1B55302415AADE83ECDE2D5380B6800E646D849B4A482501E93CE7DF8CA07D64EBED5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053693, "uuid": "a9bc9f49-3b32-47c4-8e37-69b0105f7378", "value": "1536:Mdcqm5iERozq3p7o8FwOA4zCKOFGUfKbeH6UhV/uVt8AQb:MaHJgMo8FwOA4zUFGUO3UhAV1Qb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775053693, "uuid": "fdd3f572-fca6-4f09-b8f0-60e0ebac4878", "value": 63928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053693, "uuid": "ecd94213-66f7-40ec-a6a1-10e3d5fc024b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "047ff276-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775053694, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053694, "uuid": "73c0a8db-0883-4c1b-a64e-b3ca41328f88", "comment": "Malware payload (Mirai)", "value": "a48158771cb80d09617fcc986bcbe071", "object_relation": "md5", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053694, "uuid": "9d959bb3-c97b-43b3-8900-e980cb09c666", "comment": "Malware payload (Mirai)", "value": "d72aa8b312077ef515ff412ce72dc38691ff6de07238c81e0dd5e67ae5424bd6", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053694, "uuid": "ea1ff708-edf5-4649-906c-0ce8ebf84127", "value": "T191631246FFCC1F9DECCA17B507BA62CB2311603194B341F81DE69D86855FA6220AAC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053694, "uuid": "28ca3310-409d-4d54-a096-d16bfd514664", "value": "1536:Ja7MbwKNGjjH+Xq34n/q8Zu41zmX3sDg7AvrPL:47Mbp2L+Xqdfoz2sBrPL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775053694, "uuid": "36060893-7b7e-43aa-a460-3248543f5f0f", "value": 70852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053694, "uuid": "bfb80c0c-eacd-4778-96f9-d6761a4b0cf7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04824c3b-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775053694, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053694, "uuid": "4932097a-e5b2-401b-9f92-2af4ea7dc3ea", "comment": "Malware payload (Mirai)", "value": "7607422f369a9d4752abe91f0455f12a", "object_relation": "md5", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053694, "uuid": "e4255e71-40cc-4ce7-9b75-3e42dd642f7e", "comment": "Malware payload (Mirai)", "value": "e85eb5bccd2cfb000db6a0a4dd0d29921e1e512fa3787a1eb15e764a0b050037", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053694, "uuid": "5dd4105a-5908-4d4c-8257-6ccd485185fa", "value": "T11351A29B0280DB72D65CC54FB7F8B534B14AA18366DF9E08ED801A2C8ED9D4C76C5F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053694, "uuid": "30373cd3-fb0d-43c6-85cd-088254048e68", "value": "48:q+N8O82JMIVyVbiB8xnxuZUAUAcvyyk1YnYbwLPtxtm9YBnOnhM3Ia0:A52JMMqbiBsxuZQYbwY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775053694, "uuid": "1abdf8a5-20cd-4347-8114-49c73e7ca3ee", "value": 2881, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053694, "uuid": "0f1c7a06-a432-4086-820b-d161a79e2c47", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04938e20-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775053694, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053694, "uuid": "4bd66bf6-3d7a-40a5-b11c-723149e98853", "comment": "Malware payload (Mirai)", "value": "bf32acad80d9cf042e58dd93648a058d", "object_relation": "md5", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053694, "uuid": "8d212155-33b7-48bb-8717-2c65561d75b7", "comment": "Malware payload (Mirai)", "value": "52dae64b4f830c0437008cae906f34607b4016bf6e68c3ace0816b6872b2bf5c", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053694, "uuid": "8144577e-caf5-4897-a0be-a5878a62cb87", "value": "T1DD73126221B6DEB1E2B2843263477D157D23887603B463BABC7DA71FB487E115C0C8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053694, "uuid": "310e0e3e-c7fa-40bd-a741-047aa53d118a", "value": "1536:l8zRnwvX0/jMQwZuOPFPijvDMwhQi1rYGhQZ9zWmWXIJors:SzRnwP0bMQ2RijvDZZ1rYGhG13ECSs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775053694, "uuid": "4cf7a1fa-3060-4cc7-b30f-b55f0f76f9c0", "value": 74780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053694, "uuid": "fd57ef4f-3fca-4b65-b023-ee64644c4ecc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04987142-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775053694, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053694, "uuid": "2a7fd3e0-fd84-416f-a5db-c27d093b5a37", "comment": "Malware payload (Mirai)", "value": "6dce53abe0a849e17be39e4503d991eb", "object_relation": "md5", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053694, "uuid": "cd86f9ee-b77c-4894-b6b0-6d0b013ed32a", "comment": "Malware payload (Mirai)", "value": "0c57d23d936183c57b246b84ac572d7c9bc6f418841af2f26205244cfa5a6669", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053694, "uuid": "d9cbb242-0d19-466a-8cc9-abe8453765b2", "value": "T174B3E085B210AA55C02672FCB1870A9093B17E7B4B9A150B44B3F5B46DBCCD47E0BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053694, "uuid": "4aac6134-9c95-4752-a0ab-a20be7d42657", "value": "3072:jx63zpjhO5z01nCU375P5wk5SOez7wuA:as5zqhr5Nzy7wD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775053694, "uuid": "388bd80a-a08a-4a68-9817-84f74a3267b6", "value": 107680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053694, "uuid": "ca56b51d-a44b-4609-a0ee-8755e1eea1ae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0498917c-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775053694, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053694, "uuid": "481736e4-4d44-451d-b373-8ff035b6a2ea", "comment": "Malware payload (Mirai)", "value": "60c434c7a37ab76275741cd87657c678", "object_relation": "md5", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053694, "uuid": "28efac90-7bc3-4e72-aed9-b1b83bec549e", "comment": "Malware payload (Mirai)", "value": "6fe4a53323e0dcaed0c57799048ec76236b93de15b9d0266ad1b678cbfb5aec2", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053694, "uuid": "8ff8059c-f9b8-48d4-9c93-a280c186cd59", "value": "T1EED3CF32E0086DA0DD2117B434B6597C0340DEB40AD59243EFBEE5AE28B7DA57DEDB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053694, "uuid": "4c93a9c8-7381-4010-859d-d3096672a855", "value": "3072:jNOFV2mOAc6NBmjOd1CVOHVv3WDxGGRhaUNhkv0Zd6:xOFgpOEoVv3MXL5NhGOd6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775053694, "uuid": "aa304b71-f4ed-459c-9ac1-5bc626eb0e14", "value": 131656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053694, "uuid": "52657047-3328-4000-98ca-4c1d6f88490b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "049a2a27-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775053694, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053694, "uuid": "935a2d40-11d1-4db3-9395-895c3343d23b", "comment": "Malware payload (Mirai)", "value": "f47d7b9a75673ddafde6120ff52dc96f", "object_relation": "md5", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053694, "uuid": "aa3533e1-5080-44ea-a343-b1943c3efe2b", "comment": "Malware payload (Mirai)", "value": "fe0f5e7f7cf81296ce5c7ab4347ec98fcd0553081a24030061380bbf7af867b2", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053694, "uuid": "4d3938e3-8c8e-42fc-a970-fe62bafbbddd", "value": "T19F147120FA0663B1CC731A34A79A2E5A6E7704559FEB26312D1F533CDE628509B31F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053694, "uuid": "c5f83c17-0143-4032-a67b-a3f416655896", "value": "3072:IcHZcggt1NJmeDQBwnKUDMaVsb3pjr1lCR4UKG:IcY5JpMByVs9jSff", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775053694, "uuid": "3ef63d45-c003-481d-8c8e-9e21407a5ade", "value": 205416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053694, "uuid": "249cbd72-f3fd-4ffc-8e88-64ce6f5b9919", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "049a49b6-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775053694, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053694, "uuid": "cafe7a10-de53-44a3-97f8-25ac3e19c38d", "comment": "Malware payload (Mirai)", "value": "ad9b9623753358eb33f589560ffd97f1", "object_relation": "md5", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053694, "uuid": "2541ea06-19c4-44b4-bcb6-a8ac66d73cdb", "comment": "Malware payload (Mirai)", "value": "f722fa53c615a7655cdd2d6d9b7c0dd723de234d3fa6d9a573d5d728a6daf894", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053694, "uuid": "960a1f8a-836d-4e14-ac92-367bc2ef89dc", "value": "T15D5302F7A0D87ECDC1599774050B464A3EC172786096A63AB2C0F6688BF2380DFD8B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053694, "uuid": "edade2fb-86ff-470e-8b33-30f0fd9953e2", "value": "1536:C1/S5aOdeB51F+yuXkoPgvFbFX6hTZ0f8ASApgLkg4azHy:CM5az1Fy0oPgdZX6hTo8RSgLGazHy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775053694, "uuid": "1f2436e1-da5e-4116-a511-0f00e8e0a4e7", "value": 60808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053694, "uuid": "3ee0188c-cfab-445b-9817-d9e6257f8df7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "049bea53-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775053694, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053694, "uuid": "d1118c78-dd48-4179-949c-11c455522aa4", "comment": "Malware payload (Mirai)", "value": "881f19e54a0d64c687c3b56ffdaffadf", "object_relation": "md5", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053694, "uuid": "cd258179-d7bb-46d6-94f1-034e8d5f10f5", "comment": "Malware payload (Mirai)", "value": "6dbffd29dc9d670bde2b4569985ec22380eed1bbd01654735d5af039cca8de36", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053694, "uuid": "aa6c66ce-d8ad-47d6-831c-a93352b213e1", "value": "T141146C2BB3C39CE6C51063308C316362776FD7081958EAFFDA1B3794A9977225A246", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053694, "uuid": "ebbe7271-a4d4-415e-95b8-ca72b2cd0c5e", "value": "6144:1R9Om5159ZA0mzoWcz4Mm4ztkES7IKTtq:BZAyFzQSdS7Iz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775053694, "uuid": "7c40aebc-cb73-41ef-ae3f-2fb453bb6de8", "value": 197352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053694, "uuid": "afc0df6c-6c64-4f48-9979-71308972ea4d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "049eaf2b-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775053694, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053694, "uuid": "6b629cf1-f2c9-48b3-967c-840db3b2863b", "comment": "Malware payload (Mirai)", "value": "f56178d1d0927d540e2322d8674531ad", "object_relation": "md5", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053694, "uuid": "436fd084-0a1a-4bc2-a4ca-e132091c7d9f", "comment": "Malware payload (Mirai)", "value": "dde9fd731944a00b0403933560459362c2cf1ab1586062545f2050faf55f77c4", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053694, "uuid": "daaef166-590a-48b0-8d75-723acea38d35", "value": "T199B3AF87B2907ABEF0A45E3FC4135E26A6259F704583273D71FDF9906E3A3503292E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053694, "uuid": "ec879a63-1c19-4a43-aa4f-2789e3e777c9", "value": "1536:tdNSXAeuUGWnKYUqwaJ1Xq/3A5hcB57laZeCNjHWBOdiyWT15Ov6fHzk8rSR:t3SrlGWnKTU83AQB5A5Liy36fAUSR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775053694, "uuid": "07eb1bd6-8a30-4c2a-aef9-2474a9bcaa13", "value": 115116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053694, "uuid": "3be840ef-42be-4715-97d2-b01526e26b8f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04a0b513-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775053694, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053694, "uuid": "9f8b04dd-4ba8-4294-94d9-c949f7ddfac4", "comment": "Malware payload (Mirai)", "value": "998557e4da9daacb743a9cf85cf53428", "object_relation": "md5", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053694, "uuid": "49760771-9eea-4f03-9fe9-764718e8bd4c", "comment": "Malware payload (Mirai)", "value": "c76a44798598a9fa8df928f33fe4b80409ca1d9a8b6122e564bf25af3ad6c072", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053694, "uuid": "6e26d2e7-47a0-4df7-a578-9fe278024b86", "value": "T119D3C021E4006DD1EC2129F578BA97B80350EE700BDE1582EFFDF95E647BD9438AD2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053694, "uuid": "930b5edd-94bc-4b09-989a-b6fb410439a3", "value": "3072:PnicTtkAg7FSGp+VJE6AqUjq+c7zAbpb9/xl:PiySSGp+PMmT7zMplT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775053694, "uuid": "2d899c8c-79e5-4ca1-bdd9-251845325d86", "value": 131664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053694, "uuid": "fde8e3c9-aee9-4828-9880-aceb015fa848", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04a70433-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775053694, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053694, "uuid": "78b3d70e-44a7-40e4-a6b5-959579bb4f7f", "comment": "Malware payload (Mirai)", "value": "3292ff0da65b31a07024422c43d559f9", "object_relation": "md5", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053694, "uuid": "da8e7e03-8611-4d95-beff-f12a9152e402", "comment": "Malware payload (Mirai)", "value": "ce8de045874385a199fa6650b514893506c52c8a82dbeb654bcc7f3a84108c84", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053694, "uuid": "88be70af-b4e0-404f-809d-604ae8d64332", "value": "T1A8C3E185BB6369D1C1A342BDA4C00AC387916E318BE317080699F674387DDFB1F69D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053694, "uuid": "4766e479-1eb7-42ec-b300-4940f25e9d7f", "value": "3072:OBb4K+nqsnSjZldbaUXGSgqTWo1OWqEwztlMMTnb:0OCDjXG9qTWywxlxTnb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775053694, "uuid": "dff58358-1f09-4d88-8ac5-58a2d0527cbb", "value": 127816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053694, "uuid": "051c9193-68fb-4eb9-a1c0-255b3ccb355e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04aae862-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775053694, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053694, "uuid": "d519388f-d5d2-4dd7-84e3-e86ed04ffbbb", "comment": "Malware payload (Mirai)", "value": "e758c0f17afe97d9c794d3bd68fbdac8", "object_relation": "md5", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053694, "uuid": "90a43173-76fb-4194-8ab7-c1edd202a7c1", "comment": "Malware payload (Mirai)", "value": "ca96fc9183ce01efec68233bab25837b3f506e8ccb54dc3bad9976bdf012c40a", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053694, "uuid": "7d61f7eb-1d96-4c6f-8732-3c06e52a3106", "value": "T1F16302CB7EB03B26C09CA2B1703815D9CC3ADDCAE653865DD7D1A7960B3842661CCB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053694, "uuid": "c5daa107-7f49-43ac-9c11-789a68e3da98", "value": "1536:SaxZLmYKVDNSl2y08yumeJyGYVmIMGibyNM:SaxZLmYKX+t08jmeJhYTgyNM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775053694, "uuid": "29116fd4-a453-4ebb-87c0-81ac2b4541d7", "value": 70468, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053694, "uuid": "916ab495-f4ef-490b-8b32-83493956346e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b70733c-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775053759, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053759, "uuid": "154a71ac-0a4f-4ace-9f6c-6ee107107a7c", "comment": "Malware payload (Mirai)", "value": "589e9ec968a495c13eefb0158c29863f", "object_relation": "md5", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053759, "uuid": "30061acc-5f07-4b80-b774-fd768343c650", "comment": "Malware payload (Mirai)", "value": "cad72da6c1967ed10fc55bd37f4624fee16511074a8afb7f9a6f1d9c9c37e282", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053759, "uuid": "6631e551-9c4c-4590-b377-8d86febd1f73", "value": "T11B04392F358191F0F6411B746BCBD3976C390BBF51A9909F6B416329B6E0B7BA02C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053759, "uuid": "9db40325-946c-4a4b-a8a7-4c9ef03c94ac", "value": "3072:7mPX5bl7RDfPIX5eG/L1AL0SFU66gOSNL9CnNgRdgJi55w6UXS:7eJpJUVD1A8n0YNgEJi5aHi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775053759, "uuid": "410cae2e-0e9a-4425-a466-8d4d6e2e068f", "value": 180808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053759, "uuid": "7cd58a50-e806-4153-bb49-1de316e2de40", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0442ef67-2a1b-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775053807, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053807, "uuid": "069e7a75-7d90-4410-b1cd-3be27522388c", "comment": "Malware payload (Mirai)", "value": "5d6b435b49265454d0217efab4138884", "object_relation": "md5", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053807, "uuid": "3f46164f-cfe3-498b-8880-2830d8421dd8", "comment": "Malware payload (Mirai)", "value": "1d89432d9c4d27cb87145db6737ea4bb7d3c4ac8b4952b4e2c5b9e94faa7d05b", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053807, "uuid": "c7db427b-df40-4b3f-a01f-d857500d16ff", "value": "T1D8A182E974B4A36B2DA0ED7375D6CA42F14021A7E0C91C0FE6D6F0E9498CF61F494B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053807, "uuid": "f69f5fcf-d0fc-483e-bb59-7d4a9666d966", "value": "48:vpK8KMV4klpKDK1V4RpKrOKrWV4cpKQKoV4apKE0KEEV4EepKUKkV4+pKDK1V4RT:v37dWbPXDTGEpe7NFajEffjlt0rAjd/I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775053807, "uuid": "aff1fa7b-6ad5-45d2-8ba0-fc0514ee0204", "value": 4807, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053807, "uuid": "2514a239-9e0d-49eb-b29d-5f49ba3dda90", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "487268ad-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775053808, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053808, "uuid": "6680f57c-e16d-48eb-8a47-df7be3050aa5", "comment": "Malware payload (Mirai)", "value": "d195375346e4fa7bc24f41360fe1c65c", "object_relation": "md5", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053808, "uuid": "793fa856-dcf5-4830-8eb1-2cd1d1a4efe6", "comment": "Malware payload (Mirai)", "value": "debfe3cd6e14360251e5517ccf2b9e9275b82886bb6694c65d59f44784371959", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053808, "uuid": "782b8e2e-3303-48e8-92d7-dddd74b1da2a", "value": "T1DAA191E974B4937A3DA0ED7375D6CA42F24061A7E0C91C0EE6D6F0E8498CF61F494B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053808, "uuid": "2d8c3e9a-41e4-472f-a010-1e5c4d77fd7d", "value": "48:vpK8KMV4k0pKDK1V4QpKrOKrWV4hpKQKoV4bpKE0KEEV4EfpKUKkV4/pKDK1V4Q8:v3ednbiX2TGEpf7MFbjZfyj0tJr1jc/Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775053808, "uuid": "dbb9f2bb-fa3b-4969-a311-4f826277c352", "value": 4807, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053808, "uuid": "152bc4fa-f90f-4045-aaad-6169684890c7", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "292e5fcb-2a96-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775053809, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053809, "uuid": "d43d4c4b-8c3f-4e3f-9106-ac2689017a31", "comment": "Malware payload (Mirai)", "value": "3f792a93e1a59809c23f062b074890cb", "object_relation": "md5", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053809, "uuid": "6aec0bab-f1f5-4069-bb53-dc0e4c034fa7", "comment": "Malware payload (Mirai)", "value": "72220c720a75cdca9b03171a34f0f608422f6e1fa51af07a91aa4bf5f8760985", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053809, "uuid": "8964bbeb-51b1-4a05-be68-48956d08442e", "value": "T1EFA1FAE974B5A36B2DB0ED7371D6CA42F28060A7E0C91D0EE6D1F0E9458CF61F484B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053809, "uuid": "a53aac5c-a3f3-4d38-afcd-fe253144c56c", "value": "48:vpK8KMV4kuopKDK1V4KopKrOKrWV4jopKQKoV49opKE0KEEV4EhopKUKkV4BopKl:v3pdWb9XBTGEpO7LFKjsfNjTtcrYjb/u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775053809, "uuid": "08d88e7d-6344-42fd-8094-867c76d0d955", "value": 4821, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053809, "uuid": "0648978d-0d41-4f30-9520-8b45107a73ac", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1ca7924-2a97-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775053809, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053809, "uuid": "10c9bb2a-6c51-4978-beef-25c43c6b14ae", "comment": "Malware payload (Mirai)", "value": "98647a552e3e2ad7d1c3eb54be21ed97", "object_relation": "md5", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053809, "uuid": "d9f64d3d-4f86-41c9-b0ee-cd6d568bd0be", "comment": "Malware payload (Mirai)", "value": "c2fdfce419267542c98066a78e578644c5c95f6bb877df5cbac00f65d8b5d34b", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053809, "uuid": "25432af4-63f6-4007-87fc-741346e9a28f", "value": "T15CA1B4E974B4936B2DB0ED7375D6CA42F24061A7E0C91C0EE6D6F0E8498CF61F494B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053809, "uuid": "ed90dbe5-edce-42e8-8801-ab99c54d0df3", "value": "48:vpK8KMV4kEpKDK1V4opKrOKrWV4bpKQKoV4tpKE0KEEV4EppKUKkV4JpKDK1V4oa:v3OdRbKXmTGEpp78FtjTf6jEtjrnjs/J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775053809, "uuid": "f3e616e8-f539-4214-867a-c76fdfcce2d9", "value": 4793, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053809, "uuid": "940b93b2-9424-4cdf-bd08-7fcadfe734d4", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa9c1195-2a5a-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775053809, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053809, "uuid": "6758e32e-6cad-4978-8901-763af7d5d34c", "comment": "Malware payload (Mirai)", "value": "709d579c13a5b464626d1919d74ec2bf", "object_relation": "md5", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053809, "uuid": "15c582b4-2e86-42f6-a61c-08ed46096931", "comment": "Malware payload (Mirai)", "value": "7ec1c424d2bfcb4b08eba5fe31f2f3b20fdcd13b84cffefc2d0d53f017f7420f", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053809, "uuid": "bb647009-b13c-49e0-873d-9e95165046a5", "value": "T131A1A5E974B5A36B2DB0ED7375D6CA42F14021A7E0C91C0AF6D6F0E8498CF61F494B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053809, "uuid": "7039f9d6-b757-439a-bdbe-a15218b09203", "value": "48:vpK8KMV4kPpKDK1V4jpKrOKrWV4KpKQKoV4YpKE0KEEV4EEpKUKkV4kpKDK1V4jp:v3FdsbxXdTGEpE7nFYjCfhjPtSrGjX/K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775053809, "uuid": "4621acc9-347d-4c11-83c6-e12044e582d3", "value": 4863, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053809, "uuid": "22f06389-84ad-4a8c-a113-560b2086a6ed", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b263d5c-2abd-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775053809, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053809, "uuid": "e2a27fa9-a266-4038-af9a-35de29d0116c", "comment": "Malware payload (Mirai)", "value": "286d44869d42cef3206cfcc41f304889", "object_relation": "md5", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053809, "uuid": "8ab9b02c-acf7-4422-b0b3-0df71a5cd53e", "comment": "Malware payload (Mirai)", "value": "2e341b0e5f4da4c0f0a54ce9b96b53007d914de7da70ae1c0d99c0cce4ca2755", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053809, "uuid": "141027e5-3464-46fa-870a-a96eef5f59b8", "value": "T1BAA1E5E974B5936B2DB1ED7371D6CA42F14020A7E0C91C0AE6D2F0E9499CF61F484B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053809, "uuid": "57be397c-aefd-475d-9217-3d664f1e3275", "value": "96:v3m4dv4b64X+4TGEpn47w4Fz4jV4fq4j44tl4rh4jg4/eb:+6ZzmG4nPKs55A4Njb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775053809, "uuid": "1b157823-8cf0-42a0-bfd5-dd427706aaa1", "value": 4849, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053809, "uuid": "d26f87a6-5922-46bb-8b73-8537937c4756", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bb526800-2b2a-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775053809, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053809, "uuid": "bc0505a5-2774-4ea0-a794-7d7edb352965", "comment": "Malware payload (Mirai)", "value": "86e0ac10981f1ff60c24a23db304164d", "object_relation": "md5", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053809, "uuid": "3f0c772f-2bbd-48b3-8d70-048853743459", "comment": "Malware payload (Mirai)", "value": "455a2184eb7968578f8e89f00c4f5bb7ef8a526c0c3111a19bead76209153bc3", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053809, "uuid": "2affecaa-d98f-49b2-bf70-aec15a72aa01", "value": "T151A1C6E974B4936B2DB0ED7375D6CA52F14021A7E0C91C4EE6D6F0E8498CF61F494B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053809, "uuid": "18719ebf-fc8a-4563-8b6e-53fe227dc85a", "value": "48:vpK8KMV4kRWpKDK1V4NWpKrOKrWV44WpKQKoV4yWpKE0KEEV4E2WpKUKkV4WWpKd:v3CdjbmXKTGEpr7oF3j1fWjAtFrRjY/t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775053809, "uuid": "9b0723ea-0d6c-4d70-8c63-99ace0e109ae", "value": 4807, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053809, "uuid": "5c8bcc52-1866-4843-83c9-fc5777200fa7", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a8f56d46-2a4e-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775053809, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053809, "uuid": "8e71ffd1-fd46-470e-a7c1-38fa1ddfba6c", "comment": "Malware payload (Mirai)", "value": "8225c426e4983140c269b761682fd2b2", "object_relation": "md5", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053809, "uuid": "1c616ffb-7779-4a1f-b807-342920a8a4c6", "comment": "Malware payload (Mirai)", "value": "65b09ed2146a6c5f55cf42432dca34281771ab93f6596e87f858c55952fa332e", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053809, "uuid": "fd0a8e4e-8205-40c2-bba7-8154a3e33792", "value": "T148A1E7E974B5937B2DB0ED7371D6CA42F18060A7E0C91D0AE6D1F0E8498CFA1F484B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053809, "uuid": "1ad29b84-f7dd-4962-ac0f-26591b76970c", "value": "48:vpK8KMV4kIpKDK1V4cpKrOKrWV4TpKQKoV45pKE0KEEV4ElpKUKkV4FpKDK1V4c2:v3md9biXuTGEpl7QF5j7fyjItrrvjg/h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775053809, "uuid": "88b5c81b-e278-4aac-8115-e356c70b8103", "value": 4821, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053809, "uuid": "ef5640b1-5f1c-465e-ad48-78e0332af366", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c88a19a1-2a56-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775053809, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053809, "uuid": "5127132b-22f7-47c5-bdb7-d36e2f8bd39a", "comment": "Malware payload (Mirai)", "value": "3a7c12bc512f86a5081f8786c6cf5ce4", "object_relation": "md5", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053809, "uuid": "f48b67a8-e9bd-4258-9519-1e06e584a634", "comment": "Malware payload (Mirai)", "value": "51a952ccc8b1f190aa07d262f48baa6b0ec96386a1e462094767c83686c41739", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053809, "uuid": "8b1159d7-817e-4adc-9daa-d8956cc66ff0", "value": "T1D7A1C2EA74B5937A3DA0ED7371D6CA42F14020A7E4C91C0EE6D2F0E8499CF61F484B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053809, "uuid": "78bc559a-a648-4947-a504-9f45b23fd3c0", "value": "48:vpK8KMV4kUnpKDK1V4gnpKrOKrWV41npKQKoV43npKE0KEEV4EbnpKUKkV47npK1:v30dTbYXMTGEpr7qF3j1fIjytFrxja/v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775053809, "uuid": "f7b31323-3ab3-4ed5-8b59-b8b239514a4f", "value": 4849, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053809, "uuid": "c9815460-8d27-4567-bb29-f6d782db7bb9", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "499f1fbc-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775053810, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053810, "uuid": "534a7485-877c-41ec-b492-b999a870f67d", "comment": "Malware payload (Mirai)", "value": "7a8d080ecc2dd9b3e0ca9c32dbe33347", "object_relation": "md5", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053810, "uuid": "4e9655cc-467d-42a6-b74e-f040e96d3835", "comment": "Malware payload (Mirai)", "value": "4ab0ffffd571765b844e052462deabd6d4a9af19978c329776892cf10bc016a8", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053810, "uuid": "22ba7c13-5ce7-4d77-a7a7-3bf13063659a", "value": "T1E2A1C1F964B593AA2DB0ED7371D6CA42F14020A7F4C91D0AE6D2F0E8498CF61F494B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053810, "uuid": "6f302a1b-e831-4483-a628-18c5e9608d05", "value": "48:vpK8KMV4kIRpKDK1V4ERpKrOKrWV4DRpKQKoV4NRpKE0KEEV4EBRpKUKkV4hRpKl:v3MdbboXkTGEpz7SFXjdfYjattrBjC/X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775053810, "uuid": "6d8dee6b-07ee-4923-beef-b97392825723", "value": 4849, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053810, "uuid": "d290a3d9-f14f-402b-840a-5ee907a330f3", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "49a38699-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775053810, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053810, "uuid": "a5a92ef6-06ae-4188-9a97-cf482b8fb905", "comment": "Malware payload (Mirai)", "value": "df0db3fe51db17f25547e965133f156d", "object_relation": "md5", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053810, "uuid": "6ffe143a-af19-4349-942c-1bad9881defa", "comment": "Malware payload (Mirai)", "value": "a3bc6d03b87ed3649bea229713f0044c275921324dcaaaa66b415565e4484343", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053810, "uuid": "c089ee73-93a7-4b53-b0b0-531f88c4cbd0", "value": "T170A1E5E974B5937B2EB0ED7371D6CA52F14021A7E0C91D0AE6D2F0E8498DF61F484B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053810, "uuid": "51c1f5ce-553d-4e7d-b08e-091ed26f0ab4", "value": "96:v3LAdSAbXAXTATGEp6A7ZAFuAjUAfnAjRAtEAr4AjpA/zT:T/I2+G46Kfl4YRZUmT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775053810, "uuid": "cc0287c7-0945-4bd3-9027-18562736ea40", "value": 4835, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053810, "uuid": "9b1a4c3e-171f-4f54-833f-4781865c456a", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4052745-2a55-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775053815, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053815, "uuid": "1e8a9434-ecab-40da-ba1d-2ef80395b853", "comment": "Malware payload (Mirai)", "value": "7efd1b1c688c0935b312e9e2f3f72bba", "object_relation": "md5", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053815, "uuid": "84a454d1-89f7-4950-82a0-75bc1e8cb6b2", "comment": "Malware payload (Mirai)", "value": "2bb93f230f468468e66e2c0362d58bf3a0f96273df16f1fdabe22c61f5e8d1c2", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053815, "uuid": "83cdf12d-6cd4-48f4-8476-987b20a32e23", "value": "T1B8A1B6E974B4936B2DB0ED7376D6CA42F14061A7E0C91C0EE6D6F0E8498CF61F494B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053815, "uuid": "fa1fdaa3-af1b-4b79-b637-bda062b48bdf", "value": "48:vpK8KMV4k2pKDK1V46pKrOKrWV4vpKQKoV4BpKE0KEEV4EtpKUKkV4NpKDK1V46i:v3gd1bsX4TGEpt7OFBjnf8j2tXr7je/7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775053815, "uuid": "170a2ba6-f9df-453c-8465-7d913809f12a", "value": 4779, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053815, "uuid": "3abc768f-bc45-43e0-a6f3-7aabd8d2bb39", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a2b78cf2-2a31-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775053816, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053816, "uuid": "5ee904dd-e609-4ebb-a59f-dd27e2777686", "comment": "Malware payload (Mirai)", "value": "f4d3e0911c841ab90c0bffe9ab664805", "object_relation": "md5", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053816, "uuid": "7ab12ce2-0b5d-4bba-9541-66a6981cca57", "comment": "Malware payload (Mirai)", "value": "1fd6d68852a93148e8d04ac6089fda742ac5ffc4d326b3dba5e4884b3b0bd3a0", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053816, "uuid": "0c16ffc4-fbeb-4560-aa7a-d8a8e73541da", "value": "T1E4A1C5E974B4936B3DB0ED7375D6CA52F24021A7E0C91C0AE6D6F0E9498CF61F494B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053816, "uuid": "b4bd34b4-fb1f-4201-9935-c8450510c012", "value": "48:vpK8KMV4kUpKDK1V4ApKrOKrWV4bpKQKoV4ZpKE0KEEV4ENpKUKkV4tpKDK1V4A+:v3idFbGXqTGEpN7cFZjjf2jUtzrvjM/N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775053816, "uuid": "8a3141c5-ca4b-48d8-9feb-87a371df4c03", "value": 4793, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053816, "uuid": "3938d1c3-ecd3-42a4-8c83-2ea06d3154cd", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "880313a4-2dd9-11f1-bc00-82aee05be84a", "comment": "Malware payload (ACRStealer)", "timestamp": 1775055128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775055128, "uuid": "b268c92d-6c7b-4869-9146-d807b8160963", "comment": "Malware payload (ACRStealer)", "value": "a19b25c87bad3c69ba6b2917a45f024f", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775055128, "uuid": "64e55f07-e4ea-4b77-9e64-c9ec5590374e", "comment": "Malware payload (ACRStealer)", "value": "dd4ce1513732440da10a37042fc4d6ae082cc919b31c03dee7d56ea7076db3c8", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775055128, "uuid": "54106c1a-739c-4a72-a41e-cf65be50f5c5", "value": "T146364B4BFCA158E5C4AD913485679306BAB17C491F3523D72AB0F3B81F327D06ABA7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775055128, "uuid": "1a7d751e-ccdc-4f18-a9dc-9785c7c4a33b", "value": "534141bbeafb0cfa024f8b6830c176a9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775055128, "uuid": "4e27fc6a-59cd-4cfe-9074-da91e700426d", "value": "49152:JJMaC2kbW8LWWNdepvQXXYfcYKwTOCgpHbGjmrXIQclbpSOlqpc:JJVqTXV2SO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775055128, "uuid": "f7bacccd-625a-462c-b53a-08f638673130", "value": 5014016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775055128, "uuid": "f61e55c6-68fd-4d21-ba6f-f96c3c5e359f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c0e6570-2ddb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775055559, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775055559, "uuid": "500e9a4f-c558-4e6c-aa6d-d20d3e4a1538", "comment": "Malware payload", "value": "4dd7ff53fcc00ef3ddfaf12a29591b4c", "object_relation": "md5", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775055559, "uuid": "7a27dcc0-8191-4cb4-b8c0-c338cb262bb4", "comment": "Malware payload", "value": "0c0363bf24b7deab4eaff31bfa86cf7310b12d5aa4cb46eb895265701899c401", "object_relation": "sha256", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775055559, "uuid": "0401a7d9-43d2-428b-8a40-7e04b18cf3a1", "value": "T1E0B633AAB2A1CCB3D0B34236DC919722462D7631CF4D65F7EA5E42063F789F176227", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775055559, "uuid": "28f877ef-47f1-437d-b2f7-9eaf1955af04", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775055559, "uuid": "a8b5f90a-e93d-46a1-b16b-ededb887c1ac", "value": "196608:cLmJkdNbGBbL/v80AYDwc8+nO7bI01PG5yrfajgyRb+Ir2E2RB5:mSkPbgLMUDlfOo01bInwIrOj5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775055559, "uuid": "8d5b91e9-db52-4b05-91cd-f54037bba70f", "value": 11398656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775055559, "uuid": "3b5d2364-d107-4ef5-bcfa-031d7cd68244", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c1a8d00-2ddc-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775055908, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775055908, "uuid": "c2732520-4733-43a4-9f32-c3b49574e89f", "comment": "Malware payload (Mirai)", "value": "b5b85eb40c5b9b69c0c09158972d7129", "object_relation": "md5", "Tag": [ { "name": "178-16-52-148", "colour": "#7b8a72", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775055908, "uuid": "3825ff17-a2de-4b9f-bbd7-0af2a2cd97b1", "comment": "Malware payload (Mirai)", "value": "519924035570035bcdbde620a17ef34a0a97cc36e846a43b796134aa873c5ff9", "object_relation": "sha256", "Tag": [ { "name": "178-16-52-148", "colour": "#7b8a72", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775055908, "uuid": "19728041-37ff-4cef-88a9-dcb360840dbb", "value": "T1EBE04FCC8841F312C5AB884F7011C524F003C0E4A8001F0BDB8D887B338EA00E007F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775055908, "uuid": "2c915018-d5b4-4d03-8275-30f597f98af8", "value": "6:YkdMP2ISAM2IE47kdMP2Ix5AM2IkbH7kdMP2I2GNI1AM2IJ37kdMP2Iq6AM2IgO:YkdMvSHvE47kdMvx5HvQ7kdMvhNI1Hvp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775055908, "uuid": "37a45a12-f42a-4272-875e-bfc727839806", "value": 325, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775055908, "uuid": "a61abdc5-ee1d-47ff-bdb6-c634e0fb2b49", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c5b2140-2ddc-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775055908, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775055908, "uuid": "6de20d15-4b09-4d9d-88c2-ba4b08ed15b8", "comment": "Malware payload (Mirai)", "value": "7ce1317c78e77396b31423de337f3767", "object_relation": "md5", "Tag": [ { "name": "178-16-52-148", "colour": "#7b8a72", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775055908, "uuid": "19a04a6d-489d-43ba-a5a8-762da860dc15", "comment": "Malware payload (Mirai)", "value": "488e652d2a235f453d9ed700c331323d18c538abefbeaedb8323bef873c3f084", "object_relation": "sha256", "Tag": [ { "name": "178-16-52-148", "colour": "#7b8a72", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775055908, "uuid": "d49ca451-e03a-482f-be34-60e851dfc1b4", "value": "T18324D60AAB610FFBD86FDD3702E9070139CC554722A52B367674D928F54B64B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775055908, "uuid": "80ee6122-4eba-49f1-8b0c-43771215dd6c", "value": "3072:ySVheAzYmWpRHl/m3Oil0MOOUmeBOW91nBIAX8o6Sr1:ySLeAzonHlMOcOOSIW91BJV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775055908, "uuid": "aaf60a8c-423f-4399-a1cd-3261c28a7762", "value": 227276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775055908, "uuid": "c1309b00-f254-4df8-9d85-1b2dd23d3af7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f8ce79c-2ddc-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775055967, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775055967, "uuid": "212221f3-f2fd-45b7-a9dc-5bfa4fccf574", "comment": "Malware payload (Mirai)", "value": "380b42581d6386e4d5209061994cfcca", "object_relation": "md5", "Tag": [ { "name": "178-16-52-148", "colour": "#7b8a72", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775055967, "uuid": "dcd39971-1618-44e4-bd49-ac73a6741bf5", "comment": "Malware payload (Mirai)", "value": "39bb91671ae26554e7f1649f7aa8e990db27013304ef136d1e2f524d03c07e4c", "object_relation": "sha256", "Tag": [ { "name": "178-16-52-148", "colour": "#7b8a72", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775055967, "uuid": "063f26ad-588a-49c4-894f-993449b6a450", "value": "T1E6F05BCD8C41F343C59F9ADD3021C614F007D5D4A9451F0BE74C4972A74A950E4077", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775055967, "uuid": "c2a245fc-b57f-48cc-8f23-6870ef6461fa", "value": "12:YkdMvSHvtkdMvx5HvlZwkdMvhNI1HvBkdMvq6HvjJwkdMpH9wkdMAHy:+gvJPvlwhNIZvdtvdy9ty", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775055967, "uuid": "4a8f1b69-f4f2-44c4-bbd6-34a7ed80cb9e", "value": 493, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775055967, "uuid": "2589bb0f-5a9f-422d-a681-832074708188", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2691e770-2ddd-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775056328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775056328, "uuid": "1720cb9f-91ba-47e5-bd13-dfdee3855626", "comment": "Malware payload", "value": "5efa2d535064eb5bf92d332c7f36839d", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775056328, "uuid": "7666c5ac-08bd-49aa-aee8-7f4c87a87e78", "comment": "Malware payload", "value": "db35217f1fada8fdeefc7e7221831b702064fb392f5612843c7f52f7c09ecb27", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775056328, "uuid": "01db3c06-59a8-41b2-9d45-1f6af3ddddc0", "value": "T14FB4235E9E8E148F380980A05D1B367B6622161E2D38EC9B44794F33FB961B1D7C39", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775056328, "uuid": "17e07c19-8b20-416a-aedc-78d57d45a8e1", "value": "12288:Dqsrppj7+esF4NSMdKqJbro29or612NvJDTxur0h:+svj6PF4NSQXJbroxr6sbBuo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775056328, "uuid": "650bec50-28fb-4bfa-bf92-225dc498491d", "value": 528448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775056328, "uuid": "6105079c-b62a-4f6b-91c4-596ae196f7fe", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72e6e1c4-2ddd-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1775056456, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775056456, "uuid": "651cc8bb-2c69-44d9-a5c8-a31f891ee640", "comment": "Malware payload (ConnectWise)", "value": "3c4e2fbab9460a9f5059d0bb3b469b12", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775056456, "uuid": "23d1da72-9a91-4794-a35d-04e5a4ad970e", "comment": "Malware payload (ConnectWise)", "value": "6d9fc4497bb1344184cd73ba7fcd8126870e0b3d138e8b1f97ae9636d8e13f4b", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775056456, "uuid": "5a1dacc1-883a-4160-9e53-ddb0cfedee03", "value": "T13BD622226BF94908E1F32774FD3A52F19536BD65DF11C19F2224782E2871E8086A37", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775056456, "uuid": "b219d143-a18f-472b-86be-afcdf7b0542e", "value": "196608:+rnLYG3zDhukOernLYG3zJrnLYG3zfrnLYG3zBrnLYG3zErnLYG3zornLYG3zq:+bDDDgvebDDJbDDfbDDBbDDEbDDobDDq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775056456, "uuid": "2e6d10fa-f310-46db-8a51-f08e33cf09b7", "value": 13484032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775056456, "uuid": "8f6a68f8-67f5-4901-942f-268cd995ce09", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab0674d4-2ddd-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775056550, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775056550, "uuid": "68430e33-5925-453a-939d-4ff6b46521a8", "comment": "Malware payload", "value": "d3b99ef6041850bc512408375f58800d", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775056550, "uuid": "5c13397c-a9d4-4c6f-9b11-13de8fbcfd70", "comment": "Malware payload", "value": "ef49f34b5baa399bf7b30ce996cd76cf99983bf98810ce42064b6038652fd68e", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775056550, "uuid": "e49bfdb8-b9f0-49f8-9f4a-ce8a53464676", "value": "T16683C82CF36744BB3D2B67A5AC446214B24CAC56D6F663E174FDC014A388B9ED4923", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775056550, "uuid": "660d48f3-bba6-4ba0-9cec-8c31b43ea738", "value": "1536:7hBplap4nT8ldKwvrfCZJuFemlUYuXwrrha9WTzuj+RjyC1NtnqKWg4E:7hBpUpdXrfCZJuFemlUYugrrha9WTzuM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775056550, "uuid": "da66f969-e104-4434-8f2b-b02ef4bb4084", "value": 82013, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775056550, "uuid": "3f25aade-2e1f-46ad-ac95-c2db0a46736c", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d66dd2ab-2dde-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775057052, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057052, "uuid": "a0591cdb-49df-4a19-acf6-6c32e876aebb", "comment": "Malware payload", "value": "97655905edbe6533beafa27b7039ea22", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057052, "uuid": "227fc803-9f6d-4f8d-a361-32c07d691282", "comment": "Malware payload", "value": "127e52a6cb0cfe74f2cf5a30930e3559d4ee4261eac65a2a4dce3e209a3335e6", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057052, "uuid": "d70ed9f1-521f-4521-add9-ec0ad262b7cf", "value": "T126C3FE959EAE60BD837AED3186EBEC0392C0E32F225D8516B71DD4605F73086D1B96", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057052, "uuid": "ad64827d-09f8-44ca-ab0b-f682654f412e", "value": "768:oGSgtsIfGKe/5nVVtTUxEO6FbsPwuZH0sAQDu7IAKbvhPj:btsTnpTUWO6Ovl0sALMvhL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775057052, "uuid": "a7234d77-fc7f-4bae-81e3-a4fd39c09bfe", "value": 128249, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057052, "uuid": "7dc79ed3-2c3e-4250-8dca-3a3c67cb8f3d", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e7d9bfc8-2dde-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775057082, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057082, "uuid": "5c23a110-fa11-4ae3-8644-5bb7b163926b", "comment": "Malware payload (Mirai)", "value": "d6bbc2535eec233548e0319bd7b49c0b", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mossadbotnet", "colour": "#70c6b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057082, "uuid": "b8c5f70c-a9c5-452c-8442-3a4f6096c1b1", "comment": "Malware payload (Mirai)", "value": "838b326d32b16440811c1b113abfcc0ec1fb54211bd2abc898522329271348c8", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mossadbotnet", "colour": "#70c6b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057082, "uuid": "0ad99c49-4864-4839-b734-ad423f086bc2", "value": "T1D0C43959A8419791D1D02BBBFF1D934873131B38E3EFB1069D196B246BABC1B0F7A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057082, "uuid": "40f98a26-7280-4469-97ac-5495a414dc4f", "value": "12288:HA3uTu2OFxo8HCe6mIE3KqR9h4P46y3oRgg8enKHaMBk5gD/TDdehW:U6u2X8HCGbh4PV2gg5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775057082, "uuid": "b4abe64d-0c85-49ba-b8c3-ca79134e8d77", "value": 548100, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057082, "uuid": "fdf2a500-763e-4bfe-bb98-538bd9401a49", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a8efb68f-2ddf-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775057406, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057406, "uuid": "e179c77f-d87f-4d5d-adcc-ce1cc3b2e1b4", "comment": "Malware payload", "value": "cb16487186522a0e57cec8d49fb6ffb5", "object_relation": "md5", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "RedNet", "colour": "#c2b512", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057406, "uuid": "b87d707c-de2e-4311-a4dc-23d66e4ca2d9", "comment": "Malware payload", "value": "d87f2bfb9fd22f7b4f2876412ac0aeeb1570f9b37cb9c5ad2dd5434bca825198", "object_relation": "sha256", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "RedNet", "colour": "#c2b512", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057406, "uuid": "a5782667-9a48-4411-ab54-7bd519380651", "value": "T1A48633AD30C0C27BC46746B514D2891ACA33A5206BF6B5D7B996B7A23F15C63E3311", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057406, "uuid": "9839d8bc-41d3-4d92-9e51-1cb9c5cf9173", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057406, "uuid": "96586314-f17c-4346-8747-d9ae73ab333d", "value": "196608:x8Qe3vI3UKS6nS73kjbguUFdCqq6FhDXBfal9jddQ/img:aQefw5bnSYjw3v90DIimg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775057406, "uuid": "a6a8a067-1f05-4647-9300-c8c0d8bdccd3", "value": 8609792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057406, "uuid": "73708750-2106-4ff8-867d-6f31b132ef6c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ec39425-2de0-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775057711, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057711, "uuid": "e6883fac-a239-4764-8e2e-71453f257f70", "comment": "Malware payload", "value": "f6235af120fc7a4be743895fdfb43c38", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057711, "uuid": "d25b5cb6-645a-46c6-b336-8f7e7b078c35", "comment": "Malware payload", "value": "d0e3cb98459e5e83801441b8adc33a35ba6af2894c21bb06cfb20f1e80838961", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057711, "uuid": "4cfa65d4-4039-406b-85ef-b18c86c64180", "value": "T1533412B3E53AF4AF32F5AB104096AA46555264BA622828EC3CD1CD74F4EFB771041B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057711, "uuid": "c28594df-9135-4140-8151-67a84a7622a9", "value": "6144:4A1Aqu0aIFuL8xmEkSpvyfexjSWC4ocV2Fhw5+44RgEPQ:DQ0aIIAxm4LjSWC4oe2g74qE4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775057711, "uuid": "7c332e09-aa4b-4a4a-9e7c-96402ac1f1ba", "value": 245312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057711, "uuid": "d8da0705-121b-41e8-a9ec-8845ec566c26", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5eca3bdf-2de0-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775057711, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057711, "uuid": "359ea9d6-7c77-4d27-ab47-c977f6e467dd", "comment": "Malware payload", "value": "ae4d720f9b999cfc197b220b4e68d6b2", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057711, "uuid": "ea4c9797-be09-41c4-b9b4-5f32a4fb88ab", "comment": "Malware payload", "value": "4ce5c094efcca8ab7d53db7f6e891d3ec706e3e18401423940c087d44802127a", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057711, "uuid": "b322a49d-5ec3-4436-9de7-c8ac99547820", "value": "T1BC3412766D37BC3A8774469E431F2AE43BF4A0E5034CB92589AD61EC938426734B7D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057711, "uuid": "cae65b6e-e81b-4659-aec1-0f332e3f761f", "value": "6144:/d1NRw7CxelpBD4af4sAvW+taAf3JERq4Y:F1NRw72WAsAxPJx4Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775057711, "uuid": "ae965f3f-4ed0-48ec-a3e1-b0edfa8a0fb4", "value": 252992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057711, "uuid": "72603c95-9eaa-438a-b05d-a0ae57cf53af", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ed41e29-2de0-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775057711, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057711, "uuid": "0f5c9d2d-c278-4381-9f4a-5d4e523e6bd0", "comment": "Malware payload", "value": "2963db5a523237c5f91b971172dcbb80", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057711, "uuid": "d3e42255-a26f-449e-ac07-2fa14d0bae8d", "comment": "Malware payload", "value": "712861d9a09bff7d7b39051f5267291aeccf1a1dfc6642ecdbfcddb702274559", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057711, "uuid": "d8096028-e58a-4d86-be28-3b39d657e89e", "value": "T1F73412A3D08AEC4109ED028553FF698158973A3ECD97E764C827C1E2B6536DDDC2CB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057711, "uuid": "d5529c48-39d3-4135-b621-3b13c1ea56e1", "value": "6144:4qZF9QeAXzHp5NSZPG0o+2312BtCQZzjEQeHWsh+mBDi:4qZFKeAXzHp5ke0on312B/MEWDi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775057711, "uuid": "58f694a3-9dd3-44ed-aa09-244313ab6f06", "value": 252992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057711, "uuid": "871b2cf0-b0c0-46e1-98e9-09f81e5bf646", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5edca175-2de0-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775057711, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057711, "uuid": "a666d39b-07d4-470f-bf75-3a92b85c1665", "comment": "Malware payload", "value": "5cc2388de782592c89449fa3c9776184", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057711, "uuid": "180ec3aa-088a-4a77-ba4b-6f2efc55c4b7", "comment": "Malware payload", "value": "c0b2e1316e3334c861b7ed2b733491a6ab58b0711313a600e5837dda11f98626", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057711, "uuid": "798f50f5-6aff-4fe2-82f2-9df74e7831e1", "value": "T18154023A9C1E2528C844B57F1D15F0493F50AA03A7CDBFDCB66BE46619ECD4F149BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057711, "uuid": "8f57747b-8b94-404e-a9ba-2f61e9db3dcf", "value": "6144:8EK0wTv6nRDcwRXVW96PNi5MhWAhCZESDwcOby+mC8ns:810wTi7lW96PoyAAhZSkcObifs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775057711, "uuid": "b6910668-6024-49f4-a925-321470b6eee0", "value": 304060, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057711, "uuid": "a1781c16-605a-42c8-a7ee-d93a6db02041", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ef5d09f-2de0-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775057711, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057711, "uuid": "02e2f39b-ff7d-40da-84af-365f28a78b4d", "comment": "Malware payload", "value": "5ae7270ec67c1e38141e78cdb44db73a", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057711, "uuid": "bcc0d1a9-82d4-48df-bffe-08a16841df92", "comment": "Malware payload", "value": "458d8e7873808d6dedc37567ffb00b6f28bc8d2427cc4007c4df372415920445", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057711, "uuid": "015aff72-c6f1-4d4b-be33-155e52c52439", "value": "T124847A3FBB2952ACF1F6D33D172BB4033CD44017937DA09A644EB596280EAE2C644E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057711, "uuid": "e2be1179-0bfe-4736-aaac-0ca58706855c", "value": "6144:b2Kn4A2zLEcKwBj00JNSxhutT+nJH6YjVZriAlmwVSQ2pFOqWaAd:b2Ro6o0JA5JPZIAl7IQPqm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775057711, "uuid": "902648dc-58cf-45e4-bf87-393aa1270b91", "value": 400308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057711, "uuid": "47f1c559-0d71-4622-92a1-537e114e110a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5efb1501-2de0-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775057711, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057711, "uuid": "cfbf0b58-3bab-43e2-9ad6-be6006488792", "comment": "Malware payload", "value": "1a81a6e72ff7fd4fe279642fd629e5e4", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057711, "uuid": "2d67f6cf-9ea5-4e48-8030-7082d0284313", "comment": "Malware payload", "value": "7da2473125d1ccfd33fd03b6c7177bd236d79296496e3131a8de99364a2c96b4", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057711, "uuid": "3dd374eb-9f86-4a5c-bae1-f099e0be4118", "value": "T102A424710E348DCE10079B067124562E7E57412779C9F689CF78EF8BC4A786A7E80E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057711, "uuid": "1f611ace-6e57-4d18-9d8d-01058a0191d2", "value": "12288:853nGzV5F5jwUR0Ph+JuZlD5MY/ja9HfIo4te8bOD:/zPX2p9/+Ooce5D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775057711, "uuid": "10743470-a725-4697-a8db-e602900ed757", "value": 470832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057711, "uuid": "e92f4203-8af1-4b89-8f47-2b27bebd1d1b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f0d8368-2de0-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775057711, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057711, "uuid": "28f94622-3707-49c9-ae78-a5ce68e0b7d2", "comment": "Malware payload", "value": "00b7b55a3314c6363adca1b57187ea25", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057711, "uuid": "6e71bdf7-c976-433b-81a1-886974a43c47", "comment": "Malware payload", "value": "4b83200776ca1f085f990c3573d8aceb45faa735450854a3237df16cc226285f", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057711, "uuid": "892c01ba-9c79-4ded-8a8c-61ae3488ebaa", "value": "T12894AC718F4C3551B494D02CB036E6823E8765FB4AAE46627793D1622F08BC4DCBF6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057711, "uuid": "7a9c6802-8372-4fc8-8586-974533828fc5", "value": "12288:291FzCBhZuJXGegpDKDxuoVnFV8OzXj2OaK:41FuhsGeoDKwo57RjpD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775057711, "uuid": "e7c39e84-01eb-4315-a9da-be6ec4ffbccb", "value": 444604, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057711, "uuid": "5ee1b91b-d09a-4f8d-8625-071ab9143547", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a44212ed-2de0-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775057827, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057827, "uuid": "8c6dc90b-c449-4101-9f9d-1766730a55fa", "comment": "Malware payload", "value": "fbafe596277205ff9b080655ef609727", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057827, "uuid": "969aba89-d25b-44da-a80e-2f0ef1e56a04", "comment": "Malware payload", "value": "11b6bedb3ce01b856d533d4e08e93d0b90ce971eef709c0d2d90dadf750cb512", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057827, "uuid": "9fee84ea-dd28-4f82-aff9-057be777a95b", "value": "T15CA537E288B0FF17B7661D1873745E691018153B0FDB0209B8BEDBC67683DAA346F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057827, "uuid": "aeda2c88-600b-497b-9673-9b135fbb3ef8", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFTb:m0eF4xaDjDONijDG8ZxFTb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775057827, "uuid": "a1eebd55-37f6-4c30-a315-58a655e7b627", "value": 2152278, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057827, "uuid": "bbfa3ca9-fade-4552-a9e2-e37276f8cce1", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a54702e6-2de0-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775057829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057829, "uuid": "696f4e4d-853c-47d6-ab59-4efb20ecae9c", "comment": "Malware payload", "value": "b9b546de06e10125f3f6a63dce96f125", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057829, "uuid": "033ccf4c-71b8-4424-a62f-11459d3f2da9", "comment": "Malware payload", "value": "c449f2639a2898be2362e89db91ee0ad40f39fc92446d006a8486fc3437d0861", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057829, "uuid": "d52caef8-fbb5-4a29-97a2-db72c0b36c0d", "value": "T1ACA537E288B0FF17B7661D1873745E691018153B0FDB0209B8BEDBC67683DAA346F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057829, "uuid": "eaaeb255-efc2-48cc-a127-10cf0fc4a504", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFT5:m0eF4xaDjDONijDG8ZxFT5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775057829, "uuid": "0b6d0bc5-133d-465b-94d1-4794bf521c3d", "value": 2152300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057829, "uuid": "88b6d1f9-9e18-42b4-adad-da76a9a6219f", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5bf76e2-2de0-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775057830, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057830, "uuid": "cc9678ce-5826-411a-80e4-4d06a60d7e6d", "comment": "Malware payload", "value": "c68db2424f4d553c487fc1a2b0f54ce6", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057830, "uuid": "5fb8cc08-5079-42ec-ba4e-f8023a54627d", "comment": "Malware payload", "value": "47b9372892e397f5084cf295948eb1db75918ed3a316c79f14a6a4b9fa0f88a7", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057830, "uuid": "3a95aaea-b62e-43e0-ac3e-49d91448db5b", "value": "T188A537E288B0FF17B7661D1873745E691018153B0FDB0209B8BEDBC67683DAA346F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057830, "uuid": "98743a24-075b-4618-848f-290322241d35", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFTX:m0eF4xaDjDONijDG8ZxFTX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775057830, "uuid": "d5d4bf46-ed88-438e-b437-2908bb5f783f", "value": 2151340, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057830, "uuid": "6bf7529c-6afe-481b-8e7c-0cdf9619f4eb", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7753f501-272c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1775057831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057831, "uuid": "352b9947-b953-4534-b960-fb76eb812562", "comment": "Malware payload", "value": "1e93b4bbc2dec3b675f72921c12cde1d", "object_relation": "md5", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057831, "uuid": "7e5315c9-11c0-4fb1-8b5c-e09b8de7f1ee", "comment": "Malware payload", "value": "95e6c6c13f65217f41c371abf6d03594b2bfed2259a1813bb4222fb2d3c32745", "object_relation": "sha256", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057831, "uuid": "3d0ea9ce-28bd-42a7-b8d8-f9a2c5a4b38d", "value": "T146D57DDE194555E2D3FFB7A0C2B42E2E267173325C67691BA2FCA1C8CE103A66D43B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057831, "uuid": "f4e51248-d773-426b-b96d-9d241d638baa", "value": "24576:8+EhkjixLXR+bG/f29mFusqa+n0tkR5JoZh73VVPYDlJ0K3x0cG0dAtVJlzFrpf0:8UixbItdTrJoFVPMvXGlVTFrRid3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775057831, "uuid": "5af0f154-cc35-485f-8184-ae3a99b92ff9", "value": 2939045, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057831, "uuid": "22226699-766b-4b45-aa70-d5a2837e66dd", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a156ecb5-2de1-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775058252, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775058252, "uuid": "1a35005e-f456-4afd-b3e5-5267016bed20", "comment": "Malware payload", "value": "2e2436f5497f7442260593e23ff929be", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775058252, "uuid": "98cc780f-cf1b-408a-9b05-d3019602caa4", "comment": "Malware payload", "value": "4aca40c10f8129e3009f07ecd73f9c2d2e170d6129ebf12005f926e0237bedf6", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775058252, "uuid": "a0912026-2747-4fdb-8cea-ad1b2108fc86", "value": "T1D8D4AF6A36534E21D2C41733C6CB580193B4978679A7F38E758823A729073FEDE4B6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775058252, "uuid": "e3544e2f-fe8f-48c8-a1d2-7137b8b51ac1", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775058252, "uuid": "b33c1576-3eb2-4613-be10-5ee0c3451b8f", "value": "12288:Aq0TQPOhPreYRw7ijHa6FgSpNscevQEFHugft9G4ftCcQQ:N0z1ren7ijHa6FgSpNscQLOglPoc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775058252, "uuid": "7d73b683-db85-4f83-ae28-5af2bf2053f2", "value": 644096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775058252, "uuid": "60d09590-b9cb-4c72-a4b1-97cd9d986b4d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7fee3be-2de1-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775058317, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775058317, "uuid": "b5f97bd3-f4c6-45f6-b9c7-365bf0ec8d8b", "comment": "Malware payload", "value": "99842c93b2db16979c956797dd7e150b", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775058317, "uuid": "f140932b-cb94-43fd-b24c-b644f71e9762", "comment": "Malware payload", "value": "35d5c20d1267dec761b57cb459556c62470cb132b07cc4d4d8b50e7a5cc01e71", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775058317, "uuid": "fa175b83-87f3-4807-a8a9-9cc4b4c32b15", "value": "T1E55423AFFBCC69F108A0E37F6E6AA426FF99D593EC7581D058F088736651665E0C24", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775058317, "uuid": "28db98fe-2642-4fcd-945c-c5825eff0759", "value": "6144:L6GJRSn4TUL6zoHkoKvHsYNjTm7JnmQUnjNuIcS/tUZ2Xa9fx:L6SRdoZ4jTmdnxUULS/+ZIOfx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775058317, "uuid": "f37484b7-2138-4729-b9f8-c4c7b083c5ee", "value": 283712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775058317, "uuid": "56c0fee7-7663-4385-af25-88302282a560", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c884d60b-2de1-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775058318, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775058318, "uuid": "813ec1e9-e301-49ad-93ad-ca76762cb8b1", "comment": "Malware payload", "value": "ebe835c15d7c1b155216723294bd2f50", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775058318, "uuid": "d57986d3-36e5-4659-be22-a5a76ec2db2d", "comment": "Malware payload", "value": "223697070d8c4c951e7e65ae6ffacb1d0fd9dfbb8161376d0fbf72cfb3da4b80", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775058318, "uuid": "59e1cb77-096e-40f3-a3da-a676e82d3456", "value": "T1A67468F94E1EA575E89294F5EA3F83F91DD724E7D2E9869C24B84FE0378872061800", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775058318, "uuid": "2f458df6-ed99-4408-8386-dbb03b7bb556", "value": "6144:Ie3Pyx/wxoqt+rXMOrmRuv8Df/3mlykYgxPFUem88VbRaO6FB+c9ccx9Vd:Ieq1wa9rX3mEH+APFZNQDTcCKd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775058318, "uuid": "962c7670-53f9-4ef4-8844-1708f39f385f", "value": 341028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775058318, "uuid": "76285ccc-3568-456a-9c68-e55bf3d1b686", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f667bdb5-2de1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775058395, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775058395, "uuid": "228b28e0-9ea5-4c0c-8323-e661f293a9f6", "comment": "Malware payload (Mirai)", "value": "fa94bf8539aa040e36d037d71b587359", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775058395, "uuid": "51b15348-8d8f-4d37-9cc3-57d58197852e", "comment": "Malware payload (Mirai)", "value": "3f5ee6898ec6be2eca2c0dda4461478007d335c15273c294e018ddef3901b88f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775058395, "uuid": "25abf79b-e714-4124-96b7-06d4d9d5657d", "value": "T199C32905B30C0D47D1633EF43B3B27E193DFDA8121E4E640655FAA8A91B2D32558AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775058395, "uuid": "75fda83c-ce7d-4a1e-9a5a-03b72e9d9b44", "value": "1536:LNnCbDcZ4Ox10RXomB7Y7ZraAYWrvAnjSL1ROj6+cTRqadmNuZv3dW6:Lim4OxgR7cZ6WsnCdIas6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775058395, "uuid": "0f8f4a2a-bb74-4d57-9ae2-a25bedec0933", "value": 121508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775058395, "uuid": "1f552825-3a1c-4fae-9e91-311296091eaa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d63c50c-2de4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775059346, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775059346, "uuid": "6e063a93-7b3e-44e5-9459-fc452e6338d6", "comment": "Malware payload (Mirai)", "value": "8ddb7f6b13575cb90bf396f975722d0b", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775059346, "uuid": "a3a96188-4e4f-4937-b005-68b01b02b1fd", "comment": "Malware payload (Mirai)", "value": "bde354a5173817ed429712a21a4ea1bbe1c9b3005137941bc354060bcfc9b8f8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775059346, "uuid": "5a4e4159-5150-4bd7-9f19-fc067a00e722", "value": "T1F3930749FD416B10D8D635FAFF4F024973934B6CE3FA7201AA245B2123CAA6B0F765", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775059346, "uuid": "b2b6d9c0-f182-4c3a-98cd-8c64ec37bfce", "value": "1536:AanWI8VRprZPFtqfBA+fITgaaalDQOhuvNKlMx8viluAYTqJZ8Yw4:x8VxPXaOcITgaaalDQOGoyuAYTqJqj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775059346, "uuid": "5c6fe0e0-c31a-4c11-b68d-7c341d34a9ee", "value": 93276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775059346, "uuid": "40c06857-318d-4cdf-8d7b-1ccefd7e4ee8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d8cdd60-2de4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775059534, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775059534, "uuid": "e374097d-731f-4178-ba1f-905c694a46bc", "comment": "Malware payload (Mirai)", "value": "9f16e5596a7d2fa48d7be03a71fdb21b", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775059534, "uuid": "9db4c0d8-1ba6-42e1-af90-c47dcf248f31", "comment": "Malware payload (Mirai)", "value": "19b0d78cf757f06e536c795fc1166cb5c469f17dd0eb0e31897aa9b99f6f6b6c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775059534, "uuid": "93d2b398-47ad-4541-a6bd-c623bf69997d", "value": "T1942301C391BBD4BDC421EC77804981C6EB718E03F387AE2B966F9ABC98943516C311", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775059534, "uuid": "3be52988-079d-4d2d-9c05-a675c3d7f97a", "value": "768:+CSSdfRHMych20IgWTxEvOcnFUXFA75FaDenUMY4OakAz4s44SONlKYP:+Cd/Mych204xEDFUM54DeUN4ZE9IH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775059534, "uuid": "9969dfac-8e01-47f0-ae62-c7c7351f71b5", "value": 47828, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775059534, "uuid": "ea064825-aec8-4954-bef5-edff0f89c67f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4fd0588a-2de5-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775059833, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775059833, "uuid": "7a3f6bbc-65fd-44e0-999b-131f53ebe09f", "comment": "Malware payload", "value": "1e8179b41f48818073567837b276fa40", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775059833, "uuid": "c63a52ae-50b0-4d8a-ad58-d81d2e0bb285", "comment": "Malware payload", "value": "6c0647bd0ef2abe54ac55f849332d37c289e26cdeecda47a2edf6164219de153", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775059833, "uuid": "fcda631a-ed6e-4b4f-be01-038f47422a1f", "value": "T1E3F33969BA0F6C41F2C2D3F9DA8C87E13E1735E3C6778DA1790252EDDBA39D949805", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775059833, "uuid": "3561535d-ab2f-4ff1-af71-2af042984565", "value": "1536:4Fj0K0cbqDHavMLDtr88VRVk4b1Y7gygmnP7Dy+4fMJrEn5p5M/LW:vVDtrTVXi7RgmP7DyrfMJrxq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775059833, "uuid": "716044d0-e241-487d-8a44-421396368719", "value": 157544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775059833, "uuid": "388799f6-aa1e-4b74-94d6-afdcb11f9967", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc6a7c48-2de5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775060042, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775060042, "uuid": "bdb0337c-0de5-4d72-a4af-9ae26acb60f7", "comment": "Malware payload (Mirai)", "value": "dfb3c52aad8900c82b8b6b7c6e55d1a4", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775060042, "uuid": "291e271a-aff1-4e32-abe1-e0f6032ed668", "comment": "Malware payload (Mirai)", "value": "a18fc0b5c985173cf7db7d3507c773edfd5c40c3f709bd4e992007ca8aadcb72", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775060042, "uuid": "34396415-bf3f-40fa-9fd9-e05e80bc3c5a", "value": "T1B2B30945F8505B17C6C652BBFF4E428D7B2A1768D3FE720399256F30378B96A0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775060042, "uuid": "6fb9ba86-8618-468d-9128-edf87aeccae8", "value": "1536:GUi9yqnU8vGRz4VA4j6TJGK83y6OxV5Zpq4cxblK8wywXvqcVKaflP9wsA1nvT:LaxnUHz4Z+tGxgnvmE+T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775060042, "uuid": "73954fa6-7816-4414-b656-b8f1c43a2e26", "value": 117280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775060042, "uuid": "533df669-c613-4462-a8e6-c902850d7bff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b18e435c-2de6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775060426, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775060426, "uuid": "e54b4a83-92cb-4251-9cd9-dab3b4cbc88f", "comment": "Malware payload (Mirai)", "value": "298ff8a6a04593861828e2392433e81c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775060426, "uuid": "367a2691-6819-4dfc-a2c3-1efc93a83f58", "comment": "Malware payload (Mirai)", "value": "546f9791429d4a67c72f5fbca785e424130760cb491668496bfe77d3a8648ed3", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775060426, "uuid": "0c707547-ed48-41f4-b24b-94954dae89e3", "value": "T1E7B39CDBF24701A0C8624AF007CB4BED3E2723815F27C5E72C6A657968791CF8906F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775060426, "uuid": "62425e0e-bcff-4fa6-8407-c44dca6275bd", "value": "1536:Fu27gBY9FSSpj3z5Qxw6YaWWgg1e/LWy:c9sSyzz36YaWWgg1eq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775060426, "uuid": "4e94fc9a-6b47-4467-b22d-ecd6b07c3541", "value": 107800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775060426, "uuid": "eceeb5c2-1b62-4905-a0c7-08c0d6965c83", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13a5fbbe-2de7-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775060591, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775060591, "uuid": "df70ad39-1764-41d1-94c4-e3353f349356", "comment": "Malware payload", "value": "7da39144565f4681ea61d24121dddffc", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775060591, "uuid": "3af77216-c8ab-4d13-a5f9-db3b41b8f43c", "comment": "Malware payload", "value": "7cd70e5bcac44a895ed7540b9a9fba51e6065825fafa1772c37fbc87a648bf3c", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775060591, "uuid": "6719e653-6132-4fdd-afc4-7add3685e6a6", "value": "T172E19A4C2D40A88023D536BB3766FCDEE2650AB47AD0C747811BECBD64A0617F97B2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775060591, "uuid": "372afe4b-96b6-4d8c-86c6-b41d23f5e804", "value": "192:cKGFtSDgSiCRZwvf7E0HoeyNhzwaDAPyEuNd+tQ1xTisCIlScomTcPs:QFtSDgSiIZwvf7E0HoeyXzwaDAPyES3X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775060591, "uuid": "743f2db6-f088-418e-969d-8b8b23a37f54", "value": 6955, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775060591, "uuid": "f12c8f7f-4b66-4bba-9f61-ea4165c63fa1", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e30c5a6-2de7-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775060689, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775060689, "uuid": "6c3a3b29-ca02-4039-83c3-526a04ef50cc", "comment": "Malware payload", "value": "f71dc41c91ac1be833a27b7c8003da1e", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775060689, "uuid": "752c2d5f-0916-4d42-96ed-1d6a4bc520a1", "comment": "Malware payload", "value": "cea3d2d8c26bf27965247ba363cb8db2c0eaa5db75a9f21545c6ab161b7ee9d3", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775060689, "uuid": "df661748-f6d1-41f7-bd18-890d7598a2de", "value": "T1E9B39CABB24F1450C42507F51BCB679C2E3324019E2B9AF77C6E363E2A769DE58063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775060689, "uuid": "beb72782-4908-4296-ae0e-820fa39f69bc", "value": "3072:KOfGwN/YA5+owRVQLBOlzK6smqTaNbgiCdAVil/02q3:KOfdSRRVaB0MNTSnCdAVi5q3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775060689, "uuid": "0a11685f-a159-46bd-a53c-8dcd3d447b07", "value": 116152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775060689, "uuid": "ba7b382e-7ef8-46d2-9e84-fc7250683b2c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1548ca8-2de7-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775060829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775060829, "uuid": "7c7c3575-1a3b-4d03-a0b4-fc6562efbe7f", "comment": "Malware payload", "value": "ab12b4b3dfe26d2727fbfd905a4242f2", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775060829, "uuid": "00f78f1a-58e8-4e1f-be84-445a4ebe2c3c", "comment": "Malware payload", "value": "413f7b2dcb5c87d499570487046fe4f26083c18f7d886dbac3193861d7bd1a06", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775060829, "uuid": "5562221e-423e-4833-a5d2-b506eef9da36", "value": "T1A4E3875A6E228FAEF67C873147F74A20976D23D623E1D684D2ACC1141F6038E545FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775060829, "uuid": "4f0fb6e5-0dda-430a-acc4-20fbd9e73e37", "value": "1536:CjTc2oCR5VutZ57JlqK/KrxLWLeULBgoZhXESToRy63hPtt01UeVl:CjbPirJwK/KrxLWNgoQzy6xPtt0Lf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775060829, "uuid": "b4576bcc-2008-4300-8cfd-bab15b96bf35", "value": 156680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775060829, "uuid": "ee027915-73ec-4864-9de1-c764fe348b5a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cf5fa941-2dea-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775062194, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775062194, "uuid": "76813474-89dc-414f-8e48-e546557e9af7", "comment": "Malware payload", "value": "2f1ff33448575f87952b4dd4e8901e48", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775062194, "uuid": "362e6283-0472-4368-9ac9-296c3f05c544", "comment": "Malware payload", "value": "1292eadec3c359d8cdf3f11c911ef82b3df22420d618b2ed29e66dbb12222d3c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775062194, "uuid": "d506f5ab-b833-42a6-aa0e-61210920625a", "value": "T15B8309327488582A210B428FD267336C70AFDCE2D611E5B6F6F632344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775062194, "uuid": "30c7268d-c947-4e77-8663-f572a59625bf", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbngWaKVN/:XEKltp9txAX/yr2pbgWfVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775062194, "uuid": "e262a752-4ccd-4d5c-bb7a-4340ba5c3bb1", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775062194, "uuid": "9fe51ab8-97f9-497b-b6a2-7e83e53a4d12", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "230f7fd2-2dec-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775062764, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775062764, "uuid": "bdf96fba-4e96-4ec1-ad1a-c67f112dd650", "comment": "Malware payload", "value": "e412530b8eef2c02bdf57a1f03dfd60b", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775062764, "uuid": "4da03bae-4e82-4096-a568-a97a51e056df", "comment": "Malware payload", "value": "24e8c437fd971140b5b616acea1102572d00688d6590caa0d8a335ee4d2189f4", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775062764, "uuid": "c9c08436-291e-4f0d-993a-683db01c4af5", "value": "T15BB633BD89313CB2C6DEF872A0675D287CC8041765AED0FA3B7A36559B477907233A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775062764, "uuid": "f9f2893b-89c5-43a1-a3e8-e87ae1fee7f2", "value": "196608:kOVOdlFnsuc6Dnxi/PEkloEePBtKriRbJdDHQZxP3bpoKFZbx:5VOdzsucm3Ge2rKq5rp5n9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775062764, "uuid": "2a73260d-34e7-4a51-b31a-efb5a596b964", "value": 11243352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775062764, "uuid": "9b1f2bc7-54a0-4c24-a78c-6a7ab3ecc68a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6147258e-2dec-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775062869, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775062869, "uuid": "5f0d1f81-2991-4392-b129-9aa3d8b1c788", "comment": "Malware payload", "value": "7bd85d9577ad04f2fa17a846dba127d1", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775062869, "uuid": "1b104346-9882-4028-9d96-9c40ce05c059", "comment": "Malware payload", "value": "f5902ef25464d3231b3b731b7835c4e1fb8e6b3be62de42158a1e23668735e52", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775062869, "uuid": "e46a41b4-7dc3-4577-a30c-41c0d2970121", "value": "T1D434D0F7868A6D1E1CC81D070EFD5BA18AF6097649D328609B322899F1EC751F3764", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775062869, "uuid": "735b2581-aca6-417e-b043-f57bb51da31a", "value": "6144:Gly3zzSZMpspYt5ChAEYpPJPU8nnN0kCSvOlcowJAj:Gly3zzSZMG0T5nukCG8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775062869, "uuid": "80721a19-5784-4c26-a1f5-c4130a6d2dec", "value": 239695, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775062869, "uuid": "20c4ead6-cca0-44e5-ac49-4ecc950c75c1", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9505aff9-2dec-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775062956, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775062956, "uuid": "1161ac22-c167-4d4d-b1d0-59914cab58ef", "comment": "Malware payload (Mirai)", "value": "69756046f66ed02754a1a530e76d6702", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775062956, "uuid": "2ca84bd8-d86f-41c8-86a2-8a48f0728970", "comment": "Malware payload (Mirai)", "value": "6ef5fe2086a7356d6a72fd309443ec71b3101938bfb6c4574160149451718f4e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775062956, "uuid": "1f7aa430-27a6-468f-9f42-df2e26e879da", "value": "T1E5E3C71A9F950EFBDC6FDD3302A9060235CC954722A43B763674D528F64AA4F4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775062956, "uuid": "0dcb5fec-13b1-4c27-ae97-0ddf5814d973", "value": "3072:i9TmusSMxQw5Zaws4/3UrVDBDPhHqBpw:i9yusZaw/8x1Puw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775062956, "uuid": "5c7d05bc-8adc-41cd-8393-adc4042c506e", "value": 156680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775062956, "uuid": "a52caeee-4fbb-4076-81af-342e403de80e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b03e0600-2dec-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775063001, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775063001, "uuid": "dd20f621-e6fb-4580-8ceb-82d8956e9b0f", "comment": "Malware payload (Mirai)", "value": "f497bf8388f513e21caac04c28685cc5", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775063001, "uuid": "d392348e-5cd8-4b18-a0ec-e3a3a0da826b", "comment": "Malware payload (Mirai)", "value": "9a9bd0c42b15fb395d59d904d5b44d9c2e43fdb4862c762f78dd2bcde8d72a6b", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775063001, "uuid": "5073f4b6-4cc3-4556-8ca5-20421fb2e261", "value": "T11D333B4CF783E0F0ED4B0571115BF77E96349E025124DE7EEB98BE62AE32B12A1176", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775063001, "uuid": "fc74e514-a6ba-4a5d-8304-66cb9c049de3", "value": "768:IwJixk1eCZmUJ2SrpFlPjlWwhTlFtBZ6zDYvBeVwXU2X31ANA0BCRhOqD198+tEr:IwrtHrp9TwLwXUY31ANA0B0BCTr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775063001, "uuid": "fd893e39-5303-4022-b1df-400514137207", "value": 50508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775063001, "uuid": "7ba65198-703b-4c17-8e9c-30f23d92c501", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1770bd7a-2ded-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775063174, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775063174, "uuid": "f34c4748-5ce7-49bc-99bc-1d4c807378c9", "comment": "Malware payload (Mirai)", "value": "89356e16c7c276ce79503ce65546171a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775063174, "uuid": "0a330379-9262-49c5-aa7a-b74d21e0cae6", "comment": "Malware payload (Mirai)", "value": "92c5a73b12b763e644c6811c064f5719505a8923dab8861a2deff5c8a1f3c076", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775063174, "uuid": "f1d532b7-aa5d-4edb-a486-cc7f6bc71bd4", "value": "T12DD308C7F900D9F6F80AE3374853080AB230BBA549925A377257357FED3A1990577E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775063174, "uuid": "61a5a778-709e-4414-8aea-7ab652b99a01", "value": "3072:98iDZk+ook7ybLutEz2WXpiidGBb0xO6V1jbiALL5+b8N5:e7ybyt22WZi9wxOgLVP5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775063174, "uuid": "85a8b7a2-9acb-4ab1-b5f0-2b53599ee0a2", "value": 140128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775063174, "uuid": "647a2c6f-849d-4081-9ff8-baf9b3f2532a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18b292ae-2e13-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775079497, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775079497, "uuid": "f6511035-4f49-4d4e-a23c-d372e47e4b71", "comment": "Malware payload", "value": "e7227ab78cdef65823546541f491206e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775079497, "uuid": "957de832-0401-4cd8-b977-d93a898213ec", "comment": "Malware payload", "value": "e5d1d21c5fc8164fed2a00196f29d1f9b3c53d3b394a51c3b12d6274604d3b5e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775079497, "uuid": "610966c3-b8c1-4180-9123-4447e538c1a7", "value": "T1998184649AD192BB58801597E214BD9ACBF68CF983F204117D0FBCD7EB885FCC70A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775079497, "uuid": "7a16657c-c962-455b-b7dc-13753520c189", "value": "96:DuP5W/Gjh2wah/H5VC/JX21/JVQ3/37of/3NKXKmMiPZHlJpQJHQhC7p//pg:DuP5WOF2t/u/C/2/e/oamdFlJGJw09/y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775079497, "uuid": "f3b7438e-9c41-4bae-82df-e6b49b434246", "value": 3897, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775079497, "uuid": "1d87c797-cf6e-47e9-bdfc-4a0d19913a72", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ddd7147-2e18-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775082801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775082801, "uuid": "b677da51-8988-4cf2-8840-4e651e90851f", "comment": "Malware payload (Mirai)", "value": "465fab71a15739781f3bc071dbdc6b3d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775082801, "uuid": "a4aa8f51-e963-4c16-96cf-1d4692798249", "comment": "Malware payload (Mirai)", "value": "3c5af0c30df69b4cff4a08149611824647fe19fde0f9103cc4c174e1f64d2500", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775082801, "uuid": "e6c854a1-7a08-42ee-b3a4-d121dff03a9f", "value": "T1D08533A54DBC5A28879128EF3B2B49DE3564CC7CCCF33D256547ED31288B274728EA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775082801, "uuid": "30572fcc-a488-4fb0-8a0e-bca6cd685992", "value": "24576:reTae8Fk9M3pO/o2dtK39x5rjL8itI8AdA9eRmlI0t3kNnqeyJ6OSulEwgAeRHlX:reVJ+ZCo2dK9H0itIC21wNnlEfAMB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775082801, "uuid": "e50dbd2a-d767-4805-8d2f-80845879fb73", "value": 1840056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775082801, "uuid": "c099b1e4-a768-4754-b45e-810d9836d94d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775001726, "uuid": "05247ebc-2d5e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.167.58:45651/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775001726, "uuid": "056ed8d4-2d5e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.105.78:40855/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775001849, "uuid": "4eba9111-2d5e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.113.153.132:39635/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775002148, "uuid": "00bf83b2-2d5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://board-mgr.infocircuit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775002327, "uuid": "6b4fb7f0-2d5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.251.84:36535/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775002328, "uuid": "6c3c792e-2d5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://chip-set.infocircuit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775002457, "uuid": "b9087a6f-2d5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.236.151:49952/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775002569, "uuid": "fbb6cee7-2d5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://secure-key.cryptovault.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775002579, "uuid": "020c8b68-2d60-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.58.229.39:47979/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775002580, "uuid": "0247fc5b-2d60-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.88.164.210:56541/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775002871, "uuid": "af9a418a-2d60-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lock-box.cryptovault.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775002880, "uuid": "b520ae13-2d60-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.125.217:36422/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775002998, "uuid": "fb8c37a9-2d60-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.254.234:46513/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775003227, "uuid": "8423925a-2d61-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://secret-api.cryptovault.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775003590, "uuid": "5c7cc5af-2d62-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.210.216.160:50016/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775003660, "uuid": "8660abe8-2d62-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.219.218:53101/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775003826, "uuid": "e9267c18-2d62-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.251.199:41625/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775003888, "uuid": "0dc34597-2d63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://anon-auth.cryptovault.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775003962, "uuid": "3a34fc44-2d63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.187.126.220:44511/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775004010, "uuid": "56bb65a2-2d63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hash-store.cryptovault.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775004011, "uuid": "5768eadf-2d63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.88.164.210:56541/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775004126, "uuid": "9be41753-2d63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.13.16:58003/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775004190, "uuid": "c1f328ba-2d63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://enc-tunnel.cryptovault.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775004320, "uuid": "0f3b10c9-2d64-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.112.124.72/arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775004429, "uuid": "5070e9bc-2d64-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.127.234:38071/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775004552, "uuid": "99891d00-2d64-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-frame.logicmatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775004916, "uuid": "728a973c-2d65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rule-engine.logicmatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775004919, "uuid": "748f3d35-2d65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.113.153.132:39635/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775005028, "uuid": "b53e058d-2d65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.251.199:41625/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775005270, "uuid": "45a92dc5-2d66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://truth-table.logicmatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775005338, "uuid": "6e69be0a-2d66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.20.126:43911/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775005448, "uuid": "b016268e-2d66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.198.238.18:49083/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775005569, "uuid": "f7df5130-2d66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://process-io.logicmatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775005927, "uuid": "cd1b504a-2d67-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.13.16:58003/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775005929, "uuid": "ce3a52bb-2d67-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://decision-svc.logicmatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775006348, "uuid": "c877ec84-2d68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://brain-base.logicmatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775006589, "uuid": "5808d5dc-2d69-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://global-net.technosphere.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775006596, "uuid": "5c4a6b74-2d69-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.24.11:45058/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775006598, "uuid": "5d60a6e4-2d69-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.35.162:57192/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775006948, "uuid": "2dd86257-2d6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://urban-hub.technosphere.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775007197, "uuid": "c2512210-2d6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.20.126:43911/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775007248, "uuid": "e0af0671-2d6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://eco-monitor.technosphere.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775007379, "uuid": "2ed2e9d2-2d6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.24.11:45058/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775007433, "uuid": "4f381c2f-2d6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.254.123:50139/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775007669, "uuid": "dbd83de6-2d6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://world-view.technosphere.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775007795, "uuid": "26c31e10-2d6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.30.6:35042/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775007968, "uuid": "8da8ca28-2d6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://meta-layer.technosphere.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775008027, "uuid": "b0feea4a-2d6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.14.231:50589/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775008028, "uuid": "b180a78c-2d6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.6.243.195:38829/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775008095, "uuid": "d992e411-2d6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.154.51:40724/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775008269, "uuid": "412f9a96-2d6d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://outer-shell.technosphere.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775008569, "uuid": "f42c81b1-2d6d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://synapse-log.neurovector.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775008638, "uuid": "1d07b154-2d6e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.229.24:57827/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775008819, "uuid": "88fdc4a1-2d6e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.77.17:33343/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775008819, "uuid": "89035479-2d6e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.229.24:57827/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775008928, "uuid": "ca2371c4-2d6e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nerve-center.neurovector.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775008928, "uuid": "ca3f5047-2d6e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.48.162:36465/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775009288, "uuid": "a0a0f4c6-2d6f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://impulse-api.neurovector.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775009588, "uuid": "5350a70a-2d70-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://thought-hub.neurovector.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775009652, "uuid": "79856f4e-2d70-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.211.230:53557/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775009950, "uuid": "2b3a1c32-2d71-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://brain-scan.neurovector.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775010252, "uuid": "df159688-2d71-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mind-node.neurovector.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775010557, "uuid": "95181d48-2d72-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.48.162:36465/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775010616, "uuid": "b84f2837-2d72-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bit-stream.quantacircuit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775010670, "uuid": "d81ed277-2d72-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.14.185:50706/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775010726, "uuid": "f9c7b9d4-2d72-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.26.48:52572/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775010799, "uuid": "25278117-2d73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.254.123:50139/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775010799, "uuid": "252ae03f-2d73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.232.137.101:35890/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775010969, "uuid": "8a6025fd-2d73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://speed-test.quantacircuit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775011273, "uuid": "3f874a15-2d74-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://packet-flow.quantacircuit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775011327, "uuid": "6029e232-2d74-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.23.216:58141/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775011339, "uuid": "66e77877-2d74-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.211.230:53557/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775011626, "uuid": "12217f59-2d75-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.23.65:52586/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775011628, "uuid": "139db6c3-2d75-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://qubit-sync.quantacircuit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775011989, "uuid": "ea84260c-2d75-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-track.quantacircuit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775012227, "uuid": "78527b5e-2d76-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.23.216:58141/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775012287, "uuid": "9c728841-2d76-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://light-logic.quantacircuit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775012423, "uuid": "ed8c48f8-2d76-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.50.148.169:34321/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775012589, "uuid": "50135550-2d77-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://data-field.digisphere.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775012846, "uuid": "e9a550d7-2d77-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.244.250:41211/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775013009, "uuid": "4a42e8c1-2d78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cloud-ring.digisphere.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775013138, "uuid": "97765dbd-2d78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.28.154:58810/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775013369, "uuid": "20d6d88e-2d79-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://info-orbit.digisphere.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775013610, "uuid": "b0b9828d-2d79-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://web-portal.digisphere.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775013968, "uuid": "85da74cf-2d7a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://static-cdn.digisphere.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775014272, "uuid": "3b53cdf3-2d7b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://point-edge.digisphere.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775014398, "uuid": "86834d60-2d7b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.50.148.169:34321/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775014399, "uuid": "872ff9d6-2d7b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.244.250:41211/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775014522, "uuid": "d0704152-2d7b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.51.196:58528/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775014579, "uuid": "f21c97cf-2d7b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.28.154:58810/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775014628, "uuid": "0f9a2dbb-2d7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://flight-path.aerovector.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775014815, "uuid": "7ee99b2e-2d7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.28.43:40473/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775014988, "uuid": "e5d5c525-2d7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://air-traffic.aerovector.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775015228, "uuid": "74e8b502-2d7d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.67:44356/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775015350, "uuid": "bdd5458b-2d7d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sky-route.aerovector.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775015470, "uuid": "05a01730-2d7e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.190.63:56743/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775015648, "uuid": "6f65686c-2d7e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wing-span.aerovector.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775015901, "uuid": "063d938f-2d7f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.0.211:57909/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775016012, "uuid": "487631e8-2d7f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://alt-logic.aerovector.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775016367, "uuid": "1bf6035b-2d80-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pilot-svc.aerovector.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775016439, "uuid": "46ce4a07-2d80-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.28.43:40473/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775016733, "uuid": "f62c35f7-2d80-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://heavy-duty.mechaforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775017045, "uuid": "afe65216-2d81-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.190.63:56743/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775017088, "uuid": "c99c26e5-2d81-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://iron-works.mechaforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775017227, "uuid": "1ccc0cfa-2d82-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.120.250.204:34459/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775017327, "uuid": "585329fb-2d82-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://power-plant.mechaforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775017690, "uuid": "30c95f8a-2d83-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://auto-build.mechaforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775017926, "uuid": "bd4717c3-2d83-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://90.224.208.161:48263/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775017928, "uuid": "beab63ff-2d83-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.195.45:48590/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775017989, "uuid": "e2cff514-2d83-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://steel-core.mechaforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775018002, "uuid": "ea7c51e0-2d83-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.62.38:43183/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775018348, "uuid": "b8dcd2f3-2d84-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://robot-api.mechaforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775018951, "uuid": "201f5f25-2d86-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://border-gate.fetterland.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775019021, "uuid": "4a004f73-2d86-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.249.68:46464/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775019129, "uuid": "8a33d23a-2d86-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://area-scanner.fetterland.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775019368, "uuid": "18eef9d3-2d87-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://land-mark.fetterland.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775019727, "uuid": "eee5618b-2d87-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.195.45:48590/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775019728, "uuid": "ef32a331-2d87-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dfopetroleum.com/bins/binas.txt", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "HijackLoader", "colour": "#4edb86", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775019728, "uuid": "ef719a20-2d87-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://soil-monitor.fetterland.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775019731, "uuid": "f11ff6bb-2d87-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://2012.filemail.com/api/file/get?filekey=3Bc1FrI2tmhg1RY2vtfsjD5Qrhm25soto4juqCH1r9Oa_ULucj5OqmOeQGc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775019736, "uuid": "f417d8e9-2d87-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dfopetroleum.com/bins/RWBHGSQS.msi", "Tag": [ { "name": "Arechclient2", "colour": "#1b320a", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "HijackLoader", "colour": "#4edb86", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775020089, "uuid": "c6687320-2d88-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fence-logic.fetterland.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775020387, "uuid": "7838c8c9-2d89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://site-connect.fetterland.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775020466, "uuid": "a6fd9335-2d89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.136.143.101:57833/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775020688, "uuid": "2bb62f79-2d8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://water-flow.needwatka.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775020821, "uuid": "7afcd3a1-2d8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.251.209:43906/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775020890, "uuid": "a4233b2b-2d8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.155.12:52416/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775021051, "uuid": "03ebd370-2d8b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://liquid-api.needwatka.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775021053, "uuid": "04fca149-2d8b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dropmb.com/api/shares/RKGB/files/0ca73971-de65-44a4-bf2e-121e9a077133", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775021470, "uuid": "fdbc1a4b-2d8b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.62.38:43183/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775021648, "uuid": "67e6b22a-2d8c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://well-point.needwatka.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775021828, "uuid": "d317673d-2d8c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pump-ctrl.needwatka.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775021840, "uuid": "da5150d6-2d8c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.227.117:59511/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775021961, "uuid": "22299aee-2d8d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.51.135:53112/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775022073, "uuid": "64cfcddd-2d8d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hydro-svc.needwatka.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775022326, "uuid": "fbcfcff7-2d8d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.155.12:52416/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775022367, "uuid": "149d9cca-2d8e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://1k8v3k3.online/pixel.js", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775022369, "uuid": "155671fe-2d8e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://source-log.needwatka.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775022498, "uuid": "623d5934-2d8e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.251.209:43906/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775022508, "uuid": "6836222e-2d8e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.208.44:43571/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775022684, "uuid": "d1748725-2d8e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.211.140:53242/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775022793, "uuid": "1206fa18-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://spin-cycle.dervishpeel.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775022969, "uuid": "7adf428a-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.25.44:35836/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775022969, "uuid": "7ae48050-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.152.60:50583/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775022969, "uuid": "7ae48435-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.108.163:51375/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775022969, "uuid": "7b1e95ac-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.52.223:40856/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775022969, "uuid": "7b33215f-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.52.223:40856/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775022969, "uuid": "7b53f612-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.104.8:51742/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775022969, "uuid": "7b5a1fe7-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.46.162.175:36171/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775022969, "uuid": "7b62d84f-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.104.8:51742/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775022969, "uuid": "7b6ad28e-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.35.251:36567/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775022969, "uuid": "7b6cab7a-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.50.241:43073/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775022969, "uuid": "7b6cc8f5-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.236.22:56302/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775022970, "uuid": "7b80d89c-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.158.112:45519/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775022970, "uuid": "7b87ae36-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.4.9.144:60731/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775022980, "uuid": "81d708ac-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.38.106.19:56345/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775022981, "uuid": "821ca910-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.157.55.73:39040/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775023028, "uuid": "9e652a92-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.236.22:56302/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775023028, "uuid": "9e894b78-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.117.225:49671/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775023028, "uuid": "9e8b6180-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.246.84:49487/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775023028, "uuid": "9e8f7566-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.244.189:48732/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775023028, "uuid": "9e91405b-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.232.40:40757/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775023029, "uuid": "9ea0f45d-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.204.242:38970/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775023029, "uuid": "9eaa279a-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.114.139:46329/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775023029, "uuid": "9eaa5d45-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.254.165:41922/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775023029, "uuid": "9eab6a16-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.158.112:45519/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775023029, "uuid": "9eacfc49-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.253.116:46861/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775023029, "uuid": "9ebce72c-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.190.185.44:51322/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775023029, "uuid": "9f176f86-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.236.218:35105/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775023029, "uuid": "9f22646c-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.236.218:35105/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775023030, "uuid": "9f729b9a-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.99.87.112:36295/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775023048, "uuid": "aa18d7ac-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.65.215.0:42294/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775023087, "uuid": "c1973e68-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.180.80.59:59135/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775023088, "uuid": "c1ff7b8c-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.4.9.144:60731/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775023088, "uuid": "c2103ba5-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.38.106.19:56345/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775023090, "uuid": "c312f65d-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.99.87.112:36295/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775023090, "uuid": "c337e15a-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://layer-check.dervishpeel.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775023158, "uuid": "ebee85c2-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.211.140:53242/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775023388, "uuid": "74c8b2ac-2d90-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://outer-shell.dervishpeel.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775023400, "uuid": "7bfce2c0-2d90-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.186.103:46489/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775023748, "uuid": "4b81f826-2d91-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://core-wrap.dervishpeel.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775023928, "uuid": "b6ba25c5-2d91-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.140.24.61:53395/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775023945, "uuid": "c0e06ca3-2d91-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.132.225:55882/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775024110, "uuid": "23151f23-2d92-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rotate-node.dervishpeel.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775024295, "uuid": "91ba4598-2d92-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.51.135:53112/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775024419, "uuid": "db4b831e-2d92-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.208.44:43571/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775024471, "uuid": "fa51d617-2d92-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://skin-proxy.dervishpeel.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775024714, "uuid": "8b0484f5-2d93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://spider-net.industtarant.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775025011, "uuid": "3c3c3049-2d94-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.186.103:46489/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775025133, "uuid": "852caaec-2d94-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://web-crawl.industtarant.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775025431, "uuid": "3685aaaf-2d95-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://factory-io.industtarant.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775025439, "uuid": "3b888b86-2d95-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.37.232:58298/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775025683, "uuid": "cca89c7f-2d95-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.159.67:44100/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775025788, "uuid": "0b44040d-2d96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://heavy-link.industtarant.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775026089, "uuid": "bef0075e-2d96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://venom-dev.industtarant.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775026095, "uuid": "c26a2a81-2d96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.91.193:41173/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775026218, "uuid": "0bdd74e3-2d97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.65.231:57937/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775026448, "uuid": "949f69a5-2d97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://silk-route.industtarant.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775026811, "uuid": "6d5e554b-2d98-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://small-frame.cameoinfusion.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775027109, "uuid": "1ef2f77c-2d99-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://art-portal.cameoinfusion.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775027240, "uuid": "6cb6f6f3-2d99-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.37.232:58298/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775027299, "uuid": "9048c3eb-2d99-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.77.19:59294/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775027412, "uuid": "d388afba-2d99-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://style-sync.cameoinfusion.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775027557, "uuid": "2a17fad6-2d9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.130.102.43:57905/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775027590, "uuid": "3d70ba46-2d9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.65.231:57937/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775027719, "uuid": "8a914089-2d9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.159.67:44100/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775027768, "uuid": "a7d49be2-2d9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://color-mix.cameoinfusion.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775027830, "uuid": "cc4cc8f2-2d9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.106.58.28:4563/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775027956, "uuid": "17aed328-2d9b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.146.227:48954/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775028129, "uuid": "7ebb8639-2d9b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://blend-master.cameoinfusion.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775028730, "uuid": "e4ee2a2b-2d9c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://video-drop.cameoinfusion.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775028821, "uuid": "1b3f97f2-2d9d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.130.102.43:57905/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775028851, "uuid": "2d0b7afd-2d9d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://action-log.fighttrapper.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775029028, "uuid": "96bb2d45-2d9d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.169.34:56291/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775029097, "uuid": "bfb4a88d-2d9d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.35.251:36567/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775029148, "uuid": "de40281c-2d9d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cage-match.fighttrapper.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775029329, "uuid": "49b6f71a-2d9e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.247.189:54682/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775029331, "uuid": "4b71e7b3-2d9e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.26.29:48815/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775029401, "uuid": "7538bf71-2d9e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.61.38.75:36056/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775029511, "uuid": "b694576b-2d9e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://catch-node.fighttrapper.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775029812, "uuid": "69cf2a17-2d9f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://secure-hit.fighttrapper.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775029928, "uuid": "aee086b1-2d9f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.247.189:54682/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775030170, "uuid": "3f7ce108-2da0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://target-api.fighttrapper.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775030532, "uuid": "16ec9bbe-2da1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://def-system.fighttrapper.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775030532, "uuid": "16f7007a-2da1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.208.67.180:33161/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775030594, "uuid": "3bf3fec9-2da1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.208.67.180:33161/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775030769, "uuid": "a457420a-2da1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sound-check.lohsmacknon.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775030777, "uuid": "a8f9798e-2da1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.26.29:48815/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775030902, "uuid": "f3713a81-2da1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.108.163:51375/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775030958, "uuid": "14c2d994-2da2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.169:50896/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775031048, "uuid": "4aca76ef-2da2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.61.38.75:36056/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775031131, "uuid": "7be8d756-2da2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bass-boost.lohsmacknon.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775031489, "uuid": "513ba7fe-2da3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://echo-relay.lohsmacknon.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775031729, "uuid": "e0a2d3f2-2da3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.97.119:46929/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775031860, "uuid": "2e79727b-2da4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://noise-gate.lohsmacknon.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775032151, "uuid": "dc0ffc42-2da4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://audio-path.lohsmacknon.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775032404, "uuid": "72ed5e2f-2da5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.24.63.78:47588/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775032513, "uuid": "b3c49daa-2da5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wave-form.lohsmacknon.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775032643, "uuid": "01589452-2da6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.169:50896/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775032813, "uuid": "66b50cc1-2da6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.42.91.119:44019/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775032870, "uuid": "88ba95ba-2da6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bio-record.maknothplacenta.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775032881, "uuid": "8f4e39fb-2da6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.124.243:60222/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775032940, "uuid": "b22e046d-2da6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.83.117:59085/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775033171, "uuid": "3bcd46f9-2da7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://life-cycle.maknothplacenta.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775033530, "uuid": "122dee65-2da8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cell-logic.maknothplacenta.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775033949, "uuid": "0bf9b186-2da9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://organ-sync.maknothplacenta.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775034071, "uuid": "548d0975-2da9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.81.240:37090/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775034190, "uuid": "9b30dc13-2da9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://health-node.maknothplacenta.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775034258, "uuid": "c4162f4d-2da9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.146.227:48954/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775034370, "uuid": "06925c9f-2daa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.142.44:57750/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775034492, "uuid": "4f344b7b-2daa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://root-source.maknothplacenta.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775034727, "uuid": "db54e5ab-2daa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.21.30:51230/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775034730, "uuid": "dd039dd3-2daa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.83.117:59085/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775034860, "uuid": "2b074f2e-2dab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.124.243:60222/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775034913, "uuid": "4a67a031-2dab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://farm-logic.combinekabisia.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035086, "uuid": "b141ac52-2dab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://my-xarid.com/api/v5/NSM.lic", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035088, "uuid": "b26f54c1-2dab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://my-xarid.com/api/v5/client32.ini", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035088, "uuid": "b2705c0c-2dab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.79.79.21:8899/dl/updater", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035090, "uuid": "b3dc9433-2dab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.23.183.167/hiddenbin/boatnet.arc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035090, "uuid": "b3de65d3-2dab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.23.183.167/hiddenbin/boatnet.arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035090, "uuid": "b3df088c-2dab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.23.183.167/hiddenbin/boatnet.arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035090, "uuid": "b3f56d93-2dab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.23.183.167/hiddenbin/boatnet.spc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035090, "uuid": "b3f74cf3-2dab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.23.183.167/hiddenbin/boatnet.m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035090, "uuid": "b3fc0a63-2dab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.175.223.249/data.arm4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035090, "uuid": "b3fe85f2-2dab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.175.223.249/data.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035090, "uuid": "b3fed589-2dab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.23.183.167/hiddenbin/boatnet.x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035090, "uuid": "b3ffa172-2dab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.23.183.167/hiddenbin/boatnet.mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035090, "uuid": "b3fffd94-2dab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.175.223.249/data.arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035090, "uuid": "b40682e1-2dab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.175.223.249/data.arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035090, "uuid": "b4076bf6-2dab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.175.223.249/data.aarch64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035091, "uuid": "b4b12794-2dab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://winston1.rf.gd/img_143439.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035092, "uuid": "b4c5b603-2dab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://winston1.rf.gd/img_215835.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035096, "uuid": "b74bd3ed-2dab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.23.183.167/hiddenbin/boatnet.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035096, "uuid": "b74bdba9-2dab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.23.183.167/hiddenbin/boatnet.i468", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035098, "uuid": "b8c61b7a-2dab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.42.132:55074/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035100, "uuid": "b9c9be5a-2dab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.23.183.167/hiddenbin/boatnet.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035989, "uuid": "cb8c743a-2dad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.23.183.167/hiddenbin/boatnet.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035989, "uuid": "cba1a666-2dad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.23.183.167/hiddenbin/boatnet.arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035989, "uuid": "cbbb144b-2dad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.23.183.167/hiddenbin/boatnet.sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035989, "uuid": "cbc8d718-2dad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.175.223.249/data.arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035989, "uuid": "cbd8dac8-2dad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.169.34:56291/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035989, "uuid": "cbd9020e-2dad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.175.223.249/data.powerpc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035989, "uuid": "cbdc334b-2dad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.175.223.249/data.mipsel-uclibc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035989, "uuid": "cbe1392f-2dad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.175.223.249/data.mipsel", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035989, "uuid": "cbe44795-2dad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.23.183.167/hiddenbin/boatnet.arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035989, "uuid": "cbe9c720-2dad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://winston1.rf.gd/img_201258.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035989, "uuid": "cbf20c5d-2dad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.23.183.167/hiddenbin/boatnet.ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035989, "uuid": "cbf534a7-2dad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.175.223.249/data.mips-uclibc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035990, "uuid": "cbfba103-2dad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.23.183.167/ohshit.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035990, "uuid": "cc233404-2dad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.175.223.249/data.x86_64", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035990, "uuid": "cc57e9a8-2dad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.175.223.249/data.x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035990, "uuid": "cc67acd7-2dad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.253.120.149:81/bins.mipsle", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035992, "uuid": "cd8f78d6-2dad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mybiggestjoy.bond/api/index.php?a=dl&token=fcdd5b796fbf5cb5614da7aaa4773fb404771c4821e4b8d30305ed8df58a2188&src=trindade.pe.gov.br&mode=cloudflare", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775035994, "uuid": "cee5ae79-2dad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.24.63.78:47588/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775036000, "uuid": "d2842c42-2dad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://grain-store.combinekabisia.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775036001, "uuid": "d29ebbd7-2dad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://harvest-api.combinekabisia.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775036001, "uuid": "d2fc201e-2dad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://field-scan.combinekabisia.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775036113, "uuid": "156ac6af-2dae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.142.44:57750/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775036113, "uuid": "15d96ce7-2dae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.252.55:46814/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775036231, "uuid": "5bc9b8e5-2dae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://crop-trace.combinekabisia.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775036409, "uuid": "c5ebfe62-2dae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.2.210:47240/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775036531, "uuid": "0e9776c7-2daf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://yield-hub.combinekabisia.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775036727, "uuid": "835001d3-2daf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.79.227:45272/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775036892, "uuid": "e5b05b6c-2daf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://high-note.brillwhistleb.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775037312, "uuid": "e074ce9a-2db0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tune-api.brillwhistleb.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775037727, "uuid": "d7dc44df-2db1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.21.30:51230/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775037730, "uuid": "d927f5a5-2db1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://signal-box.brillwhistleb.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775037738, "uuid": "ddfecc45-2db1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.252.55:46814/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775038108, "uuid": "baafd82c-2db2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://alert-svc.brillwhistleb.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775038452, "uuid": "8806c6e7-2db3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wind-flow.brillwhistleb.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775038573, "uuid": "cfc7cac0-2db3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://emacra.com/GoogleChrome_1.1.1_new.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775038628, "uuid": "f0824851-2db3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.208.44:35961/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775038813, "uuid": "5eb9c501-2db4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://loud-cloud.brillwhistleb.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775039234, "uuid": "59eaa7ed-2db5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://soft-glob.driveaway.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775039653, "uuid": "53709ae4-2db6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wzovragk.driveaway.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775040074, "uuid": "4e7e2079-2db7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nppw50at.driveaway.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775040203, "uuid": "9b861f87-2db7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.68.78:60783/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775040431, "uuid": "2369d50a-2db8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://compilpow.driveaway.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775040802, "uuid": "0099f0fc-2db9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.79.16:55160/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775040918, "uuid": "45e33f69-2db9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.106.148:50795/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775040929, "uuid": "4c0a908f-2db9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://choru5-hinge.driveaway.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775041212, "uuid": "f4b3c527-2db9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kxep42pp.driveaway.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775041400, "uuid": "64fc7b3f-2dba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.52.60:45020/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775041631, "uuid": "ee508360-2dba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wild-mount.vivatwoman.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775041638, "uuid": "f2bb3ef2-2dba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.233.226:41288/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775041698, "uuid": "169274e1-2dbb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.94.184:38216/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775041998, "uuid": "c9998058-2dbb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.68.78:60783/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775042052, "uuid": "e9c2f863-2dbb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://solcresten2.vivatwoman.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775042418, "uuid": "c3dc34e8-2dbc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.106.148:50795/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775042472, "uuid": "e41a5912-2dbc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://6jamieya.vivatwoman.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775042894, "uuid": "df402fd7-2dbd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lumnexen7.vivatwoman.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775043021, "uuid": "2b013e15-2dbe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.52.60:45020/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775043195, "uuid": "92939219-2dbe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://norvenix2.vivatwoman.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775043321, "uuid": "dda62ceb-2dbe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.23.161:46171/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775043376, "uuid": "fee098e2-2dbe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.69.76:57519/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775043671, "uuid": "ae763606-2dbf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://neo-d3v.vivatwoman.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775043726, "uuid": "cf7b65ed-2dbf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.244.189:48732/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775043845, "uuid": "1680ec17-2dc0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/8301037712/kjhNIxP.bat", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775044031, "uuid": "84e413ab-2dc0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://qobavx3.barondecont.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775044341, "uuid": "3ded739f-2dc1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.227.212:58225/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775044392, "uuid": "5c7bc854-2dc1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://calmion.barondecont.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775044626, "uuid": "e7f9641f-2dc1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.94.184:38216/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775044630, "uuid": "ea127933-2dc1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.79.227:45272/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775044814, "uuid": "577ea818-2dc2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://crirn4-point.barondecont.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775045232, "uuid": "50e3e188-2dc3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://h4rb-loop.barondecont.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775045298, "uuid": "7889f123-2dc3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.79.16:55160/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775045479, "uuid": "e46758a5-2dc3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.183.25.133:49085/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775045590, "uuid": "2674222f-2dc4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sprucethorn.barondecont.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775045948, "uuid": "fba3f0f1-2dc4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lejrmakei.com/WORDPRESS%202026.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775045950, "uuid": "fd21bc36-2dc4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://marcuswelbyclinic.click/final-payload/ligolo_172.28.16.169.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775045950, "uuid": "fd2b9aa1-2dc4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://keilo-jermailer.org/WORDPRESS%202026.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775045950, "uuid": "fd2f93d7-2dc4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://marcuswelbyclinic.click/ligolo_172.28.16.169.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775045951, "uuid": "fd4ee6fd-2dc4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://jem-mialwe.org/WORDPRESS%202026.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775045951, "uuid": "fd6d2a76-2dc4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dz7shop.com/TriggerFinder_DZ7.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775045951, "uuid": "fdc7cfdc-2dc4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-563376bbe356408a8c67e226123a6095.r2.dev/ScreenConnect.ClientSetup.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775045957, "uuid": "0109eac0-2dc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://telecomsa.xyz/taptapsend.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775045958, "uuid": "01b139bf-2dc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.33.139:53835/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775045980, "uuid": "0eaa2bc6-2dc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://m.hy-union.com/file/ueditor/php/upload/file/20250114/x1/REF-CLI%20v1.0.3.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775045982, "uuid": "0fb09a99-2dc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.telecomsa.xyz/taptapsend.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775045993, "uuid": "16501f18-2dc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ossapp.suning.com/pcoss/dl/PPTV(pplive)_forap_1084_9993.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775046014, "uuid": "23485b9b-2dc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lo98.barondecont.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775046137, "uuid": "6c7b8a54-2dc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.227.212:58225/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775046436, "uuid": "1e5bcf22-2dc6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dynfluxal.demolishtunis.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775046803, "uuid": "f919dde9-2dc6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.135.131.61:53077/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775046851, "uuid": "160a03f5-2dc7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://talforgeal2.demolishtunis.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775047221, "uuid": "f2a845bd-2dc7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://binaryassay.demolishtunis.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775047581, "uuid": "c8ccc108-2dc8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.33.139:53835/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775047632, "uuid": "e75ca5b4-2dc8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://m15t7-sync.demolishtunis.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775047697, "uuid": "0ded72b2-2dc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.183.25.133:49085/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775047754, "uuid": "301ff7dd-2dc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.69.149:59539/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775047927, "uuid": "97271a2f-2dc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.69.149:59539/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775048051, "uuid": "e1464c38-2dc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://jjczes4.demolishtunis.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775048120, "uuid": "0a473c70-2dca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.235.62.104:47453/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775048410, "uuid": "b71b6bb5-2dca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://9sis.demolishtunis.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775048468, "uuid": "d99fa247-2dca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.76.249:56770/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775048600, "uuid": "283bddff-2dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.135.131.61:53077/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775048600, "uuid": "289517ee-2dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.4.253:33343/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775048654, "uuid": "48627022-2dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.225.230:34570/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775049068, "uuid": "3f6f6a0c-2dcc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://relay-chain.movementsheptun.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775049312, "uuid": "d084b852-2dcc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fvbtyoj.movementsheptun.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775049427, "uuid": "151fdc7b-2dcd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.15.254:45309/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775049427, "uuid": "153c2a8b-2dcd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.39.212:34127/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775049552, "uuid": "5fe12242-2dcd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://arn3i.movementsheptun.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775049619, "uuid": "87f71e96-2dcd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.24.142.170:47976/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775049728, "uuid": "c87bd173-2dcd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.76.249:56770/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775049797, "uuid": "f1d7fc31-2dcd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.206.207.23:42009/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775049972, "uuid": "5a382ab0-2dce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sp4rk3-trace.movementsheptun.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775050273, "uuid": "0dda47e5-2dcf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.146.50:51990/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775050278, "uuid": "10d5cea0-2dcf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.75.239:54836/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775050396, "uuid": "56fc3c71-2dcf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.75.239:54836/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775050449, "uuid": "76842a60-2dcf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hfx03k.movementsheptun.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775050694, "uuid": "0844ba70-2dd0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.32.179:50227/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775050810, "uuid": "4df1f544-2dd0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://d3pl-lab.movementsheptun.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775050926, "uuid": "9305fce5-2dd0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.15.254:45309/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775051168, "uuid": "235bf8fe-2dd1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lumline0al.sewdarken.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775051227, "uuid": "46002e55-2dd1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.73.213:44855/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775051527, "uuid": "f8e6b39f-2dd1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.39.212:34127/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775051527, "uuid": "f914d4eb-2dd1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.212.118:42550/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775051528, "uuid": "f9bb8983-2dd1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://ampgg.bossjy.cc.cd/bot_ampgg.sh", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775051539, "uuid": "00648f37-2dd2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.112.120:43043/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775051649, "uuid": "418fa2a3-2dd2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalvault.sewdarken.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775051794, "uuid": "9865190a-2dd2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.52.56.85:42783/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775051891, "uuid": "d1f90bee-2dd2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.211.199:60049/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775051891, "uuid": "d21af500-2dd2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.119.254:40006/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775051948, "uuid": "f3cd541f-2dd2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nbjc.sewdarken.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775052084, "uuid": "4553cec5-2dd3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.100.165:51639/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775052317, "uuid": "cfa23454-2dd3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.104.161:35216/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775052317, "uuid": "cfab6351-2dd3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.251.105:36644/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775052381, "uuid": "f5e259ad-2dd3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.146.50:51990/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775052429, "uuid": "1279887b-2dd4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.73.213:44855/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775052429, "uuid": "1290d978-2dd4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://geo-d4ta.sewdarken.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775052439, "uuid": "18975dc5-2dd4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.157.70.143:33377/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775052439, "uuid": "18d29777-2dd4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.188.45:48319/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775052498, "uuid": "3bb65e63-2dd4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.100.165:51639/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775052667, "uuid": "a0553fc6-2dd4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.40/x86", "Tag": [ { "name": "176-65-139-40", "colour": "#eec414", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775052730, "uuid": "c5d31015-2dd4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.40/x86_64", "Tag": [ { "name": "176-65-139-40", "colour": "#eec414", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775052790, "uuid": "e9dbdf6c-2dd4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://9lftebnr.sewdarken.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775052836, "uuid": "054aa204-2dd5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.214.149.164:36772/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053097, "uuid": "a0ccf72d-2dd5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.68.28.108:39252/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053160, "uuid": "c62bf0b4-2dd5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.99.231:35610/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053211, "uuid": "e4c66b20-2dd5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://5hsg8.sewdarken.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053397, "uuid": "53bc38e9-2dd6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.211.199:60049/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053398, "uuid": "545cc102-2dd6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.195.161:50875/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053458, "uuid": "77e131a0-2dd6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.251.105:36644/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053515, "uuid": "99e1f013-2dd6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.40/ppc", "Tag": [ { "name": "176-65-139-40", "colour": "#eec414", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053515, "uuid": "99eaf13f-2dd6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.40/mpsl", "Tag": [ { "name": "176-65-139-40", "colour": "#eec414", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053515, "uuid": "99fa3d8a-2dd6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.40/spc", "Tag": [ { "name": "176-65-139-40", "colour": "#eec414", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053515, "uuid": "99fa3f73-2dd6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.40/m68k", "Tag": [ { "name": "176-65-139-40", "colour": "#eec414", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053515, "uuid": "99fe66aa-2dd6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.40/i686", "Tag": [ { "name": "176-65-139-40", "colour": "#eec414", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053515, "uuid": "9a004637-2dd6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.40/i486", "Tag": [ { "name": "176-65-139-40", "colour": "#eec414", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053515, "uuid": "9a0cd2e8-2dd6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.40/arm4", "Tag": [ { "name": "176-65-139-40", "colour": "#eec414", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053568, "uuid": "b9e100f0-2dd6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dr1v5-frame.dropaway.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053582, "uuid": "c1af40b6-2dd6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.40/sh4", "Tag": [ { "name": "176-65-139-40", "colour": "#eec414", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053582, "uuid": "c1b19012-2dd6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.40/mips", "Tag": [ { "name": "176-65-139-40", "colour": "#eec414", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053582, "uuid": "c1ca8d22-2dd6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.40/arc", "Tag": [ { "name": "176-65-139-40", "colour": "#eec414", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053641, "uuid": "e52e87c3-2dd6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.231.159.254:2071/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053694, "uuid": "046ee5c4-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxnx86_64xnxn", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053694, "uuid": "048dedd9-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxnpowerpcxnxn", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053694, "uuid": "048dfb0f-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.41/run.sh", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053694, "uuid": "04996961-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxnmipsxnxn", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053694, "uuid": "04a115e9-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxnsh4xnxn", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053694, "uuid": "04a137b7-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxnriscv64xnxn", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053694, "uuid": "04a3049e-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxnmicroblazexnxn", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053694, "uuid": "04a324a4-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxni386xnxn", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053694, "uuid": "04a4c991-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxnloongarch64xnxn", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053694, "uuid": "04a6f7ba-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxnm68kxnxn", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053694, "uuid": "04aaf729-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxnsh2xnxn", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053694, "uuid": "04ae02e2-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxnriscv32xnxn", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053694, "uuid": "04b1c056-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxnaarch64xnxn", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053759, "uuid": "2b79bb37-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.41/bins/xnxnxnxnxnxnxnxnor1kxnxn", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053760, "uuid": "2c2fdd03-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.188.45:48319/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053807, "uuid": "47d2e8d3-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.80/yarn", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053808, "uuid": "487fc648-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.80/jaws", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053809, "uuid": "49705178-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.80/thinkphp", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053809, "uuid": "49705578-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.80/aws", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053809, "uuid": "49705999-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.80/zyxel", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053809, "uuid": "4970fee3-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.80/realtek", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053809, "uuid": "4973dcc4-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.80/hnap", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053809, "uuid": "49779b3c-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.80/pulse", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053810, "uuid": "498da153-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.80/goahead", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053810, "uuid": "49a58ed1-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.80/gpon443", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053810, "uuid": "49aed686-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.80/huawei", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053815, "uuid": "4ce4317d-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.80/lg", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775053816, "uuid": "4d4a41fc-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.80/zte", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775054045, "uuid": "d62eda65-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/mr/random.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775054108, "uuid": "fb386a80-2dd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/7453936223/KAQ8PQ5.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775054232, "uuid": "453d9ca6-2dd8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://threaopti.dropaway.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775054291, "uuid": "68cbbbff-2dd8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.157.70.143:33377/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775054410, "uuid": "af38fcf2-2dd8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vrr80sq.dropaway.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775054773, "uuid": "880d6d50-2dd9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://qnde.dropaway.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775054827, "uuid": "a7c3d516-2dd9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.137.68:45226/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775054887, "uuid": "cbd8e018-2dd9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.226.161.94:57183/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775055008, "uuid": "1410a880-2dda-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.209.73.41:54726/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775055129, "uuid": "5bba2712-2dda-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ijnjw.dropaway.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775055198, "uuid": "84f40bde-2dda-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.71.48:59574/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775055252, "uuid": "a59933f0-2dda-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.99.231:35610/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775055614, "uuid": "7cfc785a-2ddb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://datarea.dropaway.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775055908, "uuid": "2c24c93a-2ddc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.52.148/dvr.sh", "Tag": [ { "name": "178-16-52-148", "colour": "#7b8a72", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775055908, "uuid": "2c64eb7f-2ddc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.52.148/rebirth.mpsl", "Tag": [ { "name": "178-16-52-148", "colour": "#7b8a72", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775055967, "uuid": "4f97adbf-2ddc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.52.148/sex.sh", "Tag": [ { "name": "178-16-52-148", "colour": "#7b8a72", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775055970, "uuid": "5154e30c-2ddc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://7kutx52w.glassterrible.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775056154, "uuid": "beecb350-2ddc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.209.73.41:54726/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775056327, "uuid": "264cd237-2ddd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.137.68:45226/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775056329, "uuid": "270c9833-2ddd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.227.128.157/QXYNmYj10.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775056329, "uuid": "276d32cf-2ddd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://proto-voy4.glassterrible.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775056338, "uuid": "2ccb554e-2ddd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.226.161.94:57183/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775056457, "uuid": "736472e2-2ddd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://stajestetice.top/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest&c=2Billi&c=&c=&c=&c=&c=&c=&c=%27", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775056751, "uuid": "23104cb5-2dde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://matri-insp.glassterrible.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057415, "uuid": "aed30cdd-2ddf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://secure-spool.glassterrible.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057480, "uuid": "d55ed3b7-2ddf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.180.146:60634/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057653, "uuid": "3c5aac4b-2de0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zwjk9ew.glassterrible.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057711, "uuid": "5f09a7e6-2de0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.177.148/DcEmQhbbvLwCQXIuYCQl69.bin", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057711, "uuid": "5f0a7188-2de0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.177.148/NjpYuxiFcb214.bin", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057711, "uuid": "5f185a24-2de0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.177.148/Blun.mso", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057711, "uuid": "5f196e2e-2de0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.177.148/seetUHhnqufcf34.bin", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057711, "uuid": "5f1f4f34-2de0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.177.148/Tegeticula.xsn", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057711, "uuid": "5f300529-2de0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.177.148/nailalaa.rar", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057711, "uuid": "5f37838d-2de0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.177.148/Alodificat.pcz", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057827, "uuid": "a44ef218-2de0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://teslasuit.to/img_174605yufreshstart.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057828, "uuid": "a4cd0bd9-2de0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.203.210.102:43856/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057829, "uuid": "a555a6b1-2de0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://teslasuit.to/img_051917takooo.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057830, "uuid": "a5d15e7e-2de0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://teslasuit.to/img_150816yunewrdp.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057831, "uuid": "a68be6ea-2de0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://teslasuit.to/optimized_MSIrump24th.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057896, "uuid": "cd2240ff-2de0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.101.252:58986/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057897, "uuid": "cdb2de44-2de0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.190.229:50687/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057947, "uuid": "ebabf0a2-2de0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://storagefreig.glassterrible.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775057960, "uuid": "f33dceeb-2de0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.159.32.180:54863/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775058065, "uuid": "31d1fad0-2de1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/d8b1d84ec23f2ecff0163a3ca8cdf98ef6ebb47003b3693e2c7acf0e0edefb1f_x86_64", "Tag": [ { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "SWZ", "colour": "#EF7D13", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775058065, "uuid": "31d761c4-2de1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/d8b1d84ec23f2ecff0163a3ca8cdf98ef6ebb47003b3693e2c7acf0e0edefb1f_arm", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775058065, "uuid": "31de4c4b-2de1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/d8b1d84ec23f2ecff0163a3ca8cdf98ef6ebb47003b3693e2c7acf0e0edefb1f_x86", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775058065, "uuid": "31e119c8-2de1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/d8b1d84ec23f2ecff0163a3ca8cdf98ef6ebb47003b3693e2c7acf0e0edefb1f_ppc", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775058065, "uuid": "31f728da-2de1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/d8b1d84ec23f2ecff0163a3ca8cdf98ef6ebb47003b3693e2c7acf0e0edefb1f_arm6", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775058065, "uuid": "31f75e22-2de1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/d8b1d84ec23f2ecff0163a3ca8cdf98ef6ebb47003b3693e2c7acf0e0edefb1f_m68k", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775058065, "uuid": "31f8842f-2de1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/d8b1d84ec23f2ecff0163a3ca8cdf98ef6ebb47003b3693e2c7acf0e0edefb1f_arm7", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775058065, "uuid": "31fabc5a-2de1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/d8b1d84ec23f2ecff0163a3ca8cdf98ef6ebb47003b3693e2c7acf0e0edefb1f_mips", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775058065, "uuid": "32014b01-2de1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/d8b1d84ec23f2ecff0163a3ca8cdf98ef6ebb47003b3693e2c7acf0e0edefb1f_mpsl", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775058065, "uuid": "3201d544-2de1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/d8b1d84ec23f2ecff0163a3ca8cdf98ef6ebb47003b3693e2c7acf0e0edefb1f_arm5", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775058065, "uuid": "3211419c-2de1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/d8b1d84ec23f2ecff0163a3ca8cdf98ef6ebb47003b3693e2c7acf0e0edefb1f_sh4", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775058252, "uuid": "a16845ff-2de1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://allsydevs.com/wp-admin/images/image5656.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775058317, "uuid": "c84d0b89-2de1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1k2pTDVgZuxdMP-8arWNLnzy77kt_2KvM", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775058318, "uuid": "c8981ba7-2de1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1Zr0j_pcT-7bFSQhXpnCOAPZcHVC8JH2A", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775058318, "uuid": "c8e9264a-2de1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://foredeliv.coddlcaught.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775058339, "uuid": "d53e8841-2de1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.86.177:48081/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775058498, "uuid": "342d428d-2de2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.86.177:48081/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775058734, "uuid": "c0780773-2de2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://24zog.coddlcaught.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775059153, "uuid": "bac03030-2de3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://shie1d-leaf.coddlcaught.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775059160, "uuid": "bef15afd-2de3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.64.81.186:44201/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775059287, "uuid": "0a4f8e7e-2de4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.180.146:60634/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775059514, "uuid": "91e5fa7f-2de4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mode14-node.coddlcaught.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775059758, "uuid": "23331eb4-2de5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.26.59:58637/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775059767, "uuid": "2896db34-2de5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.159.32.180:54863/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775059869, "uuid": "65684de5-2de5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://snapshotgeyser.coddlcaught.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775059986, "uuid": "aac6fa8a-2de5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/1333144962/IxvWeHF.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775060000, "uuid": "b33dd41e-2de5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.71.48:59574/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775060234, "uuid": "3ec911d6-2de6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cast-spar.coddlcaught.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775060306, "uuid": "69f1549f-2de6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.190.229:50687/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775060465, "uuid": "c871af0b-2de6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/1781548144/td5Qn5I.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775060595, "uuid": "163be3a8-2de7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dqkgif.granulatetouch.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775060891, "uuid": "c6aab6bd-2de7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hyper-14b.granulatetouch.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775061251, "uuid": "9ced6875-2de8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rnonito-watch.granulatetouch.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775061388, "uuid": "ee99d898-2de8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.26.59:58637/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775061426, "uuid": "058e12d0-2de9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.51.196:58528/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775061553, "uuid": "512b7a61-2de9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wildcircuit.granulatetouch.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775061921, "uuid": "2c1af071-2dea-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.86.229.12:53418/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775061921, "uuid": "2c495791-2dea-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.119.138:57761/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775062154, "uuid": "b70d8827-2dea-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://daem-gate.granulatetouch.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775062332, "uuid": "2194c35a-2deb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dlnhov4.granulatetouch.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775062572, "uuid": "b0700f74-2deb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://info-point.infovector.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775062933, "uuid": "87ce3c3e-2dec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://path-finder.infovector.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775063232, "uuid": "39baafd7-2ded-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://data-relay.infovector.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775063238, "uuid": "3d7f790b-2ded-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.119.138:57761/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775063238, "uuid": "3d9b6a3a-2ded-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.86.229.12:53418/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775063238, "uuid": "3da12a91-2ded-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.98.231:43200/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775063242, "uuid": "3f9c94ec-2ded-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.12.20:53213/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775063592, "uuid": "108c4401-2dee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://route-api.infovector.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775063658, "uuid": "377f2f53-2dee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.53.247:54896/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775063724, "uuid": "5ec30979-2dee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.206.11.117:48723/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775063724, "uuid": "5ef231cb-2dee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.254.76:44360/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775063841, "uuid": "a486ddcd-2dee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.53.247:54896/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775063948, "uuid": "e4b7b5db-2dee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://trace-sync.infovector.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775063967, "uuid": "ef9d4a47-2dee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.243.227.24:49621/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775064250, "uuid": "98adc419-2def-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vector-node.infovector.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775064567, "uuid": "55b4b092-2df0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.206.81.60:51577/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775064616, "uuid": "727f02fb-2df0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://flow-drop.datacascade.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775064734, "uuid": "b9547cda-2df0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.45/main_arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775064734, "uuid": "b9548cc9-2df0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.45/main_m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775064734, "uuid": "b954900b-2df0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.45/main_arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775064734, "uuid": "b954a9f8-2df0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.45/main_ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775064734, "uuid": "b95557c0-2df0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.45/main_arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775064912, "uuid": "231d6b3b-2df1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://stream-view.datacascade.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775064924, "uuid": "2a7f959e-2df1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.98.231:43200/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775065267, "uuid": "f6bc8560-2df1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bulk-logic.datacascade.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775065523, "uuid": "8f29dd8c-2df2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.12.20:53213/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775065633, "uuid": "d0a46067-2df2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tier-access.datacascade.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775065878, "uuid": "62e52718-2df3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.254.76:44360/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775065932, "uuid": "831c8201-2df3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://level-check.datacascade.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775066288, "uuid": "572c7b21-2df4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pool-manager.datacascade.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775066599, "uuid": "10b721a0-2df5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.162.40.39:53373/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775066649, "uuid": "2ead0baa-2df5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mesh-gate.cyberlattice.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775066888, "uuid": "bccbe1e9-2df5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.92.149:38332/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775066953, "uuid": "e3d1a62a-2df5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://grid-secure.cyberlattice.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775067070, "uuid": "29976c3a-2df6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.206.81.60:51577/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775067248, "uuid": "9340410d-2df6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://shield-base.cyberlattice.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775067669, "uuid": "8e59568a-2df7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://net-fiber.cyberlattice.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775067970, "uuid": "41f25078-2df8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://link-vault.cyberlattice.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775068026, "uuid": "637de183-2df8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.103.213:38750/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775068031, "uuid": "665251be-2df8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.162.40.39:53373/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775068327, "uuid": "16a55d3c-2df9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zone-portal.cyberlattice.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775068630, "uuid": "cb62fc9d-2df9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://micro-bit.nanostream.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775068640, "uuid": "d16be15f-2df9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.92.149:38332/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775068818, "uuid": "3b78eaa0-2dfa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.62.32:36321/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775068992, "uuid": "a2e4ab68-2dfa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rapid-io.nanostream.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775069228, "uuid": "2f8043d8-2dfb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.227.216:35637/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775069287, "uuid": "52dab418-2dfb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.227.216:35637/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775069288, "uuid": "53ad7c00-2dfb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://small-packet.nanostream.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775069648, "uuid": "2a0c4b1a-2dfc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-track.nanostream.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775070013, "uuid": "0374a4c4-2dfd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pulse-svc.nanostream.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775070137, "uuid": "4d63a846-2dfd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://24.54.85.143:47633/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775070309, "uuid": "b3c41a17-2dfd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.206.207.23:42009/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775070310, "uuid": "b473d841-2dfd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.191.217:53218/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775070318, "uuid": "b93ec01b-2dfd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://drift-core.nanostream.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775070785, "uuid": "cfae3b03-2dfe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/7942715918/md78wA4.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775071032, "uuid": "6338d99b-2dff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://image-proc.pixelengine.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775071391, "uuid": "39071b65-2e00-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://color-map.pixelengine.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775071445, "uuid": "595890fe-2e00-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/6728144278/MjTrgLJ.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775071575, "uuid": "a68a7ffc-2e00-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://24.54.85.143:47633/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775071629, "uuid": "c6f3ded7-2e00-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://frame-buffer.pixelengine.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775071987, "uuid": "9c1806f7-2e01-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://draw-logic.pixelengine.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775072164, "uuid": "05e1431b-2e02-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/8408827406/a6uEO3h.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775072348, "uuid": "733e743a-2e02-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raster-api.pixelengine.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775072411, "uuid": "98d94a45-2e02-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.191.217:53218/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775072718, "uuid": "4f9b2ff4-2e03-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://beam-target.signalvector.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775072961, "uuid": "e0e1e853-2e03-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.243.26:37634/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775073008, "uuid": "fcdc8633-2e03-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://radio-freq.signalvector.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775073369, "uuid": "d3e5c76e-2e04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tower-sync.signalvector.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775073669, "uuid": "86f2598f-2e05-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wave-form.signalvector.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775073727, "uuid": "a9239004-2e05-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.47.122:48909/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775073917, "uuid": "1ab344bd-2e06-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.78.255:46500/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775074149, "uuid": "a4dde845-2e06-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.59.83.63:39318/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775074274, "uuid": "ef654ab5-2e06-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ping-gate.signalvector.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775074448, "uuid": "5733838d-2e07-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://range-extend.signalvector.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775074688, "uuid": "e5e6ec98-2e07-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://force-field.infodynamics.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775074869, "uuid": "51bf3544-2e08-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ui2rn7ei.apexharvestor.digital/?=check&&actmn=ZrCPkQWOaDvCNtFB", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775075296, "uuid": "506153d0-2e09-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.144.161:47991/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775075416, "uuid": "9811fc5d-2e09-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.78.255:46500/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775075526, "uuid": "d95b5235-2e09-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.47.122:48909/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775076252, "uuid": "8a4b3f69-2e0b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.255.251.91:43511/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775076618, "uuid": "64782919-2e0c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.59.83.63:39318/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775076970, "uuid": "362c92c6-2e0d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.144.161:47991/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775077277, "uuid": "ed63c20f-2e0d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.146.238:57073/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775077871, "uuid": "4f013812-2e0f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.255.251.91:43511/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775078225, "uuid": "22329d56-2e10-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/6334661508/tXzJQ0t.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775078528, "uuid": "d6e69ab7-2e10-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.146.238:57073/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775079679, "uuid": "84f97827-2e13-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.225.114:41876/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775079850, "uuid": "eadca821-2e13-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.87.176:33041/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775080033, "uuid": "57f03b4a-2e14-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.209/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775080033, "uuid": "57f33a00-2e14-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.209/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775080090, "uuid": "7a0b9f86-2e14-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.45/debug.dbg", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775080101, "uuid": "807529c4-2e14-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.45/main_mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775080101, "uuid": "80757956-2e14-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.45/main_arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775080101, "uuid": "808c7ac1-2e14-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.45/main_sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775080101, "uuid": "808f0e97-2e14-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.45/main_x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775080101, "uuid": "8093ee3c-2e14-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.209/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775080101, "uuid": "8093fda9-2e14-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.209/i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775080101, "uuid": "8097b513-2e14-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.209/aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775080101, "uuid": "80994109-2e14-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.209/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775080101, "uuid": "809a31eb-2e14-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.209/powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775080101, "uuid": "809a3d02-2e14-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.209/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775080101, "uuid": "80c2d7bd-2e14-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.209/armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775080102, "uuid": "8131a89e-2e14-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.45/main_mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775080105, "uuid": "82962807-2e14-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.45/main_spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775080105, "uuid": "82a1645a-2e14-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.45/main_x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775080928, "uuid": "6d31dde4-2e16-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.150.44:53425/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775080941, "uuid": "7514c61b-2e16-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.87.176:33041/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775081826, "uuid": "84919549-2e18-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.150.44:53425/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775082133, "uuid": "3bbe1913-2e19-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/masschens/FiveM-Spoofer/refs/heads/main/CFXBypass.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775082137, "uuid": "3e266584-2e19-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/masschens/FiveM-Spoofer/raw/refs/heads/main/CFXBypass.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775082611, "uuid": "586c1199-2e1a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.159.136:57856/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775082794, "uuid": "c559ffd1-2e1a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/khannely/derrxt/-/raw/main/259UZDS8POXH.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775082970, "uuid": "2e9000cc-2e1b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://q55at0cm.apexharvestor.digital/?=check&&actmn=dOMbUQDvOGwKjdmP", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775083037, "uuid": "5647017e-2e1b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.225.114:41876/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775083270, "uuid": "e131a06b-2e1b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastebin.com/raw/QKQwYyHd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775083519, "uuid": "75cabbfe-2e1c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.101.37:55029/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775083870, "uuid": "4715ee11-2e1d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/khannely/derrxt/-/raw/main/U7Q7R23U7669.exe", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775083990, "uuid": "8e5b7384-2e1d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.27.98:38433/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775084167, "uuid": "f7b89e68-2e1d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Gomerpromiscuous139/YimMenu/raw/refs/heads/main/Tarumari/Menu-Yim-1.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775084232, "uuid": "1e7eb52c-2e1e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Gomerpromiscuous139/YimMenu/refs/heads/main/Tarumari/Menu-Yim-1.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775084347, "uuid": "6312526c-2e1e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/deka214/instapy-quickstart/refs/heads/master/installation/Linux/instapy-quickstart-v2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775084347, "uuid": "63215924-2e1e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/deka214/BanGKlotski/refs/heads/main/images/G-Klotski-Ban-2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775084347, "uuid": "634a8a0c-2e1e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/deka214/instapy-quickstart/raw/refs/heads/master/installation/Linux/instapy-quickstart-v2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775084348, "uuid": "641b3222-2e1e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/deka214/BanGKlotski/raw/refs/heads/main/images/G-Klotski-Ban-2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775084537, "uuid": "d4631b99-2e1e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.159.136:57856/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775084588, "uuid": "f32e9d33-2e1e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/danilofelipe32/cursorball/refs/heads/main/Codiales/Software_v1.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775084589, "uuid": "f35102fe-2e1e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/danilofelipe32/cursorball/raw/refs/heads/main/Codiales/Software_v1.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775084589, "uuid": "f35da58c-2e1e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/danilofelipe32/cursorball/raw/refs/heads/main/Codiales/Software-3.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775084589, "uuid": "f36bbef5-2e1e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Christ893/wholesaleshop_system/raw/refs/heads/main/assets/wholesaleshop_system_v2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775084589, "uuid": "f36bcbd2-2e1e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Christ893/utkeeper99/raw/refs/heads/main/utkeeper/libs/utkeeper-v2.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775084589, "uuid": "f36fe7c8-2e1e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/danilofelipe32/cursorball/refs/heads/main/Codiales/Software-3.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775084589, "uuid": "f3768ee8-2e1e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Christ893/wholesaleshop_system/refs/heads/main/assets/wholesaleshop_system_v2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775084589, "uuid": "f383097e-2e1e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Christ893/utkeeper99/refs/heads/main/utkeeper/libs/utkeeper-v2.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775084589, "uuid": "f3833881-2e1e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/danilofelipe32/cursorball/refs/heads/main/Codiales/Software-3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775084589, "uuid": "f39260e5-2e1e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/reagan567/kinoite-bluebuild/raw/refs/heads/main/files/system/usr/lib/kinoite_bluebuild_v3.9-alpha.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775084589, "uuid": "f3927d80-2e1e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/danilofelipe32/cursorball/raw/refs/heads/main/Codiales/Software-3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775084589, "uuid": "f3bda021-2e1e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/danilofelipe32/desafio-sudoku/raw/refs/heads/main/components/desafio-sudoku-v3.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775084648, "uuid": "16dc505f-2e1f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/reagan567/kinoite-bluebuild/refs/heads/main/files/system/usr/lib/kinoite_bluebuild_v3.9-alpha.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775085076, "uuid": "158f5954-2e20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.27.98:38433/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775085489, "uuid": "0c3dc97a-2e21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Hulett77/VALORANT-EFI-DRIVER-Cheat-Hack/refs/heads/main/Driver/Driver/VALORAN_EF_DRIVE_Cheat_Hack_3.6-beta.5.zip", "Tag": [ { "name": "SnartLoader", "colour": "#1769a2", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775085491, "uuid": "0d199cdb-2e21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hulett77/VALORANT-EFI-DRIVER-Cheat-Hack/raw/refs/heads/main/Driver/Driver/VALORAN_EF_DRIVE_Cheat_Hack_3.6-beta.5.zip", "Tag": [ { "name": "SnartLoader", "colour": "#1769a2", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775085730, "uuid": "9b94ae0e-2e21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/donsdons1983/nextgen-potato-gaming/refs/heads/main/adelphophagy/gaming_potato_nextgen_3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775085730, "uuid": "9ba4fb63-2e21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/petersonnjuguna/petersonnjuguna.github.io/raw/refs/heads/main/tinware/github_petersonnjuguna_io_2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775085730, "uuid": "9ba94da3-2e21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/070789-juanitutus/AmazeGaming/refs/heads/main/colpeurysis/Gaming_Amaze_1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775085730, "uuid": "9bacefcb-2e21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/070789-juanitutus/AmazeGaming/raw/refs/heads/main/colpeurysis/Gaming_Amaze_1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775085730, "uuid": "9bb3cc1e-2e21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/donsdons1983/nextgen-potato-gaming/raw/refs/heads/main/adelphophagy/gaming_potato_nextgen_3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775085730, "uuid": "9bc29686-2e21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/petersonnjuguna/Controller-for-disabled/raw/refs/heads/main/honda/Controller-disabled-for-v2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775085730, "uuid": "9bc29e28-2e21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/petersonnjuguna/petersonnjuguna.github.io/refs/heads/main/tinware/github-io-petersonnjuguna-v3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775085730, "uuid": "9bc2eb5c-2e21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/petersonnjuguna/petersonnjuguna.github.io/refs/heads/main/tinware/github_petersonnjuguna_io_2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775085730, "uuid": "9bc2ed1a-2e21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/petersonnjuguna/Controller-for-disabled/refs/heads/main/honda/Controller-disabled-for-v2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775085730, "uuid": "9bd85693-2e21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/070789-juanitutus/AmazeGaming/refs/heads/main/colpeurysis/Amaze-Gaming-v1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775085730, "uuid": "9bd85848-2e21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/petersonnjuguna/Controller-for-disabled/raw/refs/heads/main/honda/for_disabled_Controller_2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775085731, "uuid": "9bf418a4-2e21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/petersonnjuguna/Controller-for-disabled/refs/heads/main/honda/for_disabled_Controller_2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775085731, "uuid": "9bf52dbc-2e21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/petersonnjuguna/petersonnjuguna.github.io/raw/refs/heads/main/tinware/github-io-petersonnjuguna-v3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775085731, "uuid": "9c1aa187-2e21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.218.81:39441/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775085733, "uuid": "9d5bc1ae-2e21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/070789-juanitutus/AmazeGaming/raw/refs/heads/main/colpeurysis/Amaze-Gaming-v1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775085965, "uuid": "279b32de-2e22-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/kiuf345/mobi/refs/heads/main/deco/63.txt", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775085969, "uuid": "2a49b36a-2e22-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/kiuf345/mobi/raw/refs/heads/main/deco/63.txt", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775086328, "uuid": "fff6d921-2e22-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Gabor996/LeeSin/refs/heads/main/_includes/Sin-Lee-2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775086328, "uuid": "fff6ef40-2e22-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/CrackOrCode/minecode-mcp/refs/heads/main/example/crystal_dimension/data/crystal/worldgen/minecode_mcp_2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775086328, "uuid": "002db532-2e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/CrackOrCode/minecode-mcp/raw/refs/heads/main/example/crystal_dimension/data/crystal/worldgen/minecode_mcp_2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775086329, "uuid": "005e7393-2e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/devwarly/c64commander/refs/heads/main/tenorist/c_commander_v1.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775086329, "uuid": "008a79a1-2e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/zedkali/SFB---Survival-FPS-Booster/raw/refs/heads/main/orthopinacoid/Booster-SF-FP-Survival-3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775086329, "uuid": "008a827c-2e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Dev-bit-cyber/FGCtool/raw/refs/heads/master/synchrone/FG-Ctool-psalmy.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775086329, "uuid": "00929ffb-2e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.148.90:38702/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775086329, "uuid": "00b5560b-2e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/AviRedDevil/vibestrym-assets/refs/heads/main/frontend/public/assets_vibestrym_v1.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775086329, "uuid": "00bcb7c1-2e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Gabor996/LeeSin/raw/refs/heads/main/_includes/Sin-Lee-2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775086330, "uuid": "0108b490-2e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Josiasgq/fps-advanced/refs/heads/main/shader/advanced_fps_v1.0-beta.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775086330, "uuid": "011593b6-2e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Ginola5/syronss-lol-auto-assistant/raw/refs/heads/main/src/assistant-auto-syronss-lol-v1.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775086330, "uuid": "012c83ca-2e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/devwarly/c64commander/raw/refs/heads/main/tenorist/c_commander_v1.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775086330, "uuid": "016c0093-2e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/AviRedDevil/vibestrym-assets/raw/refs/heads/main/frontend/public/assets_vibestrym_v1.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775086330, "uuid": "016e68df-2e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Dev-bit-cyber/FGCtool/refs/heads/master/synchrone/FG-Ctool-psalmy.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775086331, "uuid": "01fe36e3-2e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/SoufianAyad/eight_puzzle_app/raw/refs/heads/main/ios/Runner.xcodeproj/project.xcworkspace/xcshareddata/puzzle-app-eight-draughtswoman.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775086332, "uuid": "0235c855-2e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/SoufianAyad/eight_puzzle_app/refs/heads/main/ios/Runner.xcodeproj/project.xcworkspace/xcshareddata/puzzle-app-eight-draughtswoman.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775086332, "uuid": "023d850a-2e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Josiasgq/fps-advanced/raw/refs/heads/main/shader/advanced_fps_v1.0-beta.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775086332, "uuid": "024cd440-2e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Ginola5/syronss-lol-auto-assistant/refs/heads/main/src/assistant-auto-syronss-lol-v1.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775086332, "uuid": "02748e6e-2e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/devwarly/c64commander/refs/heads/main/tenorist/commander-c-v2.7-beta.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775086333, "uuid": "02f3fdea-2e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/zedkali/SFB---Survival-FPS-Booster/refs/heads/main/orthopinacoid/Booster-SF-FP-Survival-3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775087228, "uuid": "18b9ba9b-2e25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Chinnaganesh/level-xp-system/raw/refs/heads/master/docs/level-xp-system-v1.9-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775087229, "uuid": "18f2b953-2e25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Chinnaganesh/level-xp-system/refs/heads/master/docs/level-xp-system-v1.9-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775087229, "uuid": "18f8be68-2e25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/EngAbdallahD/wildflover/refs/heads/main/src/i18n/Software_1.4-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775087229, "uuid": "18f8bfe7-2e25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Alpaymh/ExitLag/refs/heads/master/AracServis/Exit_Lag_iliococcygeal.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775087229, "uuid": "18fcfe08-2e25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Alpaymh/ExitLag/raw/refs/heads/master/AracServis/Exit_Lag_iliococcygeal.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775087229, "uuid": "19013e46-2e25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/arcanpp88/kick-tg-rewards/raw/refs/heads/main/backend-python/rem/Lib/site-packages/pip/_vendor/urllib3/packages/rewards_kick_tg_wanderingness.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775087229, "uuid": "195d07bf-2e25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Nahoom1/HUAYU-RM-D1078-LIRC-config-and-Kodi-keymaps/raw/refs/heads/main/Byzantian/HUAY-Kodi-keymaps-LIR-and-R-config-v2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775087230, "uuid": "196d409d-2e25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/EngAbdallahD/wildflover/raw/refs/heads/main/src/i18n/Software_1.4-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775087230, "uuid": "19a2d2fc-2e25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Nahoom1/HUAYU-RM-D1078-LIRC-config-and-Kodi-keymaps/refs/heads/main/Byzantian/HUAY-Kodi-keymaps-LIR-and-R-config-v2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775087231, "uuid": "1a1204fa-2e25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Ahmedhesham712/Session-Dualsense-Mod/refs/heads/main/lib/ViGEmClient/include/Session_Dualsense_Mod_2.7-beta.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775087231, "uuid": "1a1208d7-2e25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Alpaymh/Python-Sorting-Algorithms-Visualizer/refs/heads/master/dist/Python-Sorting-Algorithms-Visualizer/PyQt5/Qt5/plugins/generic/Sorting_Visualizer_Python_Algorithms_2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775087231, "uuid": "1a120e14-2e25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/arcanpp88/kick-tg-rewards/refs/heads/main/backend-python/rem/Lib/site-packages/pip/_vendor/urllib3/packages/rewards_kick_tg_wanderingness.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775087231, "uuid": "1a17f4ad-2e25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/lenin-huaylla/Snaptivity/raw/refs/heads/main/Assets/Software_Scirophoria.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775087231, "uuid": "1a2583f8-2e25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Kemin500/igaming-platform/refs/heads/main/services/wallet/platform_igaming_v2.2-alpha.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775087232, "uuid": "1adb22ec-2e25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/devwarly/c64commander/raw/refs/heads/main/tenorist/commander-c-v2.7-beta.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775087232, "uuid": "1af80b88-2e25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Alpaymh/Python-Sorting-Algorithms-Visualizer/raw/refs/heads/master/dist/Python-Sorting-Algorithms-Visualizer/PyQt5/Qt5/plugins/generic/Sorting_Visualizer_Python_Algorithms_2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775087233, "uuid": "1b3d2075-2e25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.95.252:53025/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775087233, "uuid": "1b6d87b7-2e25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/lenin-huaylla/Snaptivity/refs/heads/main/Assets/Software_Scirophoria.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775087233, "uuid": "1b6fa4b3-2e25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Kemin500/igaming-platform/raw/refs/heads/main/services/wallet/platform_igaming_v2.2-alpha.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775087233, "uuid": "1b7908e9-2e25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.185.93.188:40398/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775087233, "uuid": "1b7c5dd6-2e25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Ahmedhesham712/Session-Dualsense-Mod/raw/refs/heads/main/lib/ViGEmClient/include/Session_Dualsense_Mod_2.7-beta.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775087356, "uuid": "64bc5c22-2e25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.218.81:39441/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775087718, "uuid": "3ccafd95-2e26-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.232.40:40757/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775087948, "uuid": "c594be92-2e26-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.185.93.188:40398/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053086, "uuid": "9a014f99-2dd5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.68.28.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035085, "uuid": "b0ab63c5-2dab-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.79.79.21", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775029025, "uuid": "94ebe633-2d9d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.184.169.34", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775031726, "uuid": "de84dec7-2da3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.184.97.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775029325, "uuid": "47e717b9-2d9e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.26.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775027285, "uuid": "87d875fd-2d99-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.77.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775068806, "uuid": "33da0c5d-2dfa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.62.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775063708, "uuid": "557d3427-2dee-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.206.11.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775059744, "uuid": "1b0ff70b-2de5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.26.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775036706, "uuid": "774b1aa9-2daf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.79.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775050685, "uuid": "03265452-2dd0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.32.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775055185, "uuid": "7d50dc85-2dda-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.71.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775045944, "uuid": "f96a95de-2dc4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.51.33.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775022965, "uuid": "7885c1f3-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.54.104.8", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775052307, "uuid": "c9ce9254-2dd3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.251.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775007426, "uuid": "4a846099-2d6b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.254.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035085, "uuid": "b0ab1792-2dab-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.42.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775010664, "uuid": "d4e36b55-2d72-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.14.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775050264, "uuid": "087009da-2dcf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.146.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775063644, "uuid": "2f6c83c8-2dee-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.53.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775023926, "uuid": "b576557c-2d91-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.140.24.61", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775063227, "uuid": "36939ceb-2ded-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.12.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775049607, "uuid": "80b553aa-2dcd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.24.142.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775017986, "uuid": "e0ee5a5c-2d83-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.62.38", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775023085, "uuid": "c03cc706-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.180.80.59", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775045465, "uuid": "dbde79d7-2dc3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.183.25.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775022965, "uuid": "788729c3-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.4.9.144", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775023025, "uuid": "9c4862ba-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.99.87.112", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053385, "uuid": "4c9eface-2dd6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.28.195.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775025666, "uuid": "c2dbfd36-2d95-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.159.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775012825, "uuid": "dcde1d56-2d77-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.244.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775052426, "uuid": "10a9940f-2dd4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.157.70.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775040186, "uuid": "910a42cf-2db7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.68.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775073907, "uuid": "148201c6-2e06-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.78.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775023025, "uuid": "9c47394c-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.236.218", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775027524, "uuid": "164f576a-2d9a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.130.102.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775085725, "uuid": "98c773ef-2e21-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.218.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775022485, "uuid": "5a834117-2d8e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.188.208.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775051525, "uuid": "f79a568a-2dd1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.112.120", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775048585, "uuid": "1f78a230-2dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.4.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775046787, "uuid": "effce686-2dc6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.135.131.61", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775001844, "uuid": "4b8016e4-2d5e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.113.153.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775017206, "uuid": "1006410a-2d82-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.120.250.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775022965, "uuid": "7886a994-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.50.241", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775015885, "uuid": "fcba2385-2d7e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.0.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775001723, "uuid": "03d7a5e2-2d5e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.105.78", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775036107, "uuid": "11e3f6dd-2dae-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.252.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775073724, "uuid": "a7c055a6-2e05-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.47.122", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035985, "uuid": "c90f8b7d-2dad-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "159.253.120.149", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775022965, "uuid": "7887df12-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.146.158.112", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775040786, "uuid": "f6ab6753-2db8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.150.79.16", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775034365, "uuid": "03f08f13-2daa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.173.142.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775020866, "uuid": "95da72a3-2d8a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.173.155.12", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775052664, "uuid": "9e83a929-2dd4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.40", "Tag": [ { "name": "176-65-139-40", "colour": "#eec414", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053686, "uuid": "ffd61c5f-2dd6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.41", "Tag": [ { "name": "176-65-139-41", "colour": "#307ad9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775061906, "uuid": "237fa63b-2dea-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "177.86.229.12", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775022965, "uuid": "7887aa5c-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.157.55.73", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775017925, "uuid": "bcbac445-2d83-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.195.45", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775014505, "uuid": "c66a8d29-2d7b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.51.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775021945, "uuid": "18c43da4-2d8d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.51.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775014806, "uuid": "79892a17-2d7c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.28.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775007785, "uuid": "20965943-2d6c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.30.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775008085, "uuid": "d3507cbd-2d6c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.154.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775022965, "uuid": "78871e6e-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.122.236.22", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775009645, "uuid": "75563cc4-2d70-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.211.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775052307, "uuid": "c9cdf702-2dd3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.104.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775032865, "uuid": "8585232c-2da6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.124.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057885, "uuid": "c6c365ab-2de0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.190.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775056325, "uuid": "2523a580-2ddd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.227.128.157", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057707, "uuid": "5ca2fb8f-2de0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.3.177.148", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775022965, "uuid": "78873f61-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "195.46.162.175", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775022366, "uuid": "13b5e4cd-2d8e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "1k8v3k3.online" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775058308, "uuid": "c28d510e-2de1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "216.126.86.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775032385, "uuid": "67939e07-2da5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.24.63.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775051885, "uuid": "ce2ac0ad-2dd2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.211.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775032926, "uuid": "a9e0e896-2da6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.83.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775043307, "uuid": "d548fc3d-2dbe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.23.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775015466, "uuid": "02d8d119-2d7e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.190.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775020445, "uuid": "9ac2067a-2d89-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.136.143.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775051885, "uuid": "ce2acf7d-2dd2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.119.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775086324, "uuid": "fde2bd0c-2e22-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.148.90", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775026086, "uuid": "bcd8c3a5-2d96-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.91.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775023926, "uuid": "b5764731-2d91-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.132.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775063708, "uuid": "557d45a8-2dee-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.254.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775058731, "uuid": "bebb1be6-2de2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "24zog.coddlcaught.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775064544, "uuid": "47eebbfa-2df0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.206.81.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775022965, "uuid": "78857cef-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.52.223", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775079845, "uuid": "e7c518d4-2e13-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.87.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775034066, "uuid": "5148f4f9-2da9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.81.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775008025, "uuid": "aff3df93-2d6c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.6.243.195", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775030526, "uuid": "133662a7-2da1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.208.67.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053145, "uuid": "bd29cf16-2dd5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.70.99.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775059145, "uuid": "b5ad6624-2de3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.64.81.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775006586, "uuid": "563b8f26-2d69-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.74.35.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775049424, "uuid": "13bb1629-2dcd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.74.39.212", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775052068, "uuid": "3b8ac0c8-2dd3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.100.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775022965, "uuid": "78866e5d-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.35.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775070306, "uuid": "b1fcf230-2dfd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.191.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775044325, "uuid": "34545144-2dc1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.227.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775069225, "uuid": "2e12459c-2dfb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.227.216", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775079666, "uuid": "7ceb437c-2e13-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.225.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775023025, "uuid": "9c4f413f-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.59.232.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035085, "uuid": "b0aff852-2dab-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.175.223.249", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775072944, "uuid": "d6c5e023-2e03-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.243.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775029325, "uuid": "47e718b8-2d9e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.247.189", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775032806, "uuid": "6263a216-2da6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.42.91.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775051767, "uuid": "881a92cb-2dd2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.52.56.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775077265, "uuid": "e6181e2c-2e0d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.146.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057469, "uuid": "ce8a9cfe-2ddf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.92.180.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775052426, "uuid": "10aaa685-2dd4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.188.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053208, "uuid": "e2d1d416-2dd5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5hsg8.sewdarken.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775066585, "uuid": "080adeb2-2df5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.162.40.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775003585, "uuid": "593d7cf4-2d62-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.210.216.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775063944, "uuid": "e248a5e7-2dee-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.243.227.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775013124, "uuid": "8f5102e0-2d78-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.28.154", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775061906, "uuid": "237eb7a7-2dea-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.119.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775082606, "uuid": "55591b2f-2e1a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.159.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775050264, "uuid": "086fe5c8-2dcf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.75.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775042466, "uuid": "e03bd60a-2dbc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "6jamieya.vivatwoman.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775055006, "uuid": "12951083-2dda-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.209.73.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775055966, "uuid": "4ef852a1-2ddc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "7kutx52w.glassterrible.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035085, "uuid": "b0aad723-2dab-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "82.23.183.167", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775080025, "uuid": "5330a5c0-2e14-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.92.243.209", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775027825, "uuid": "c9b9623d-2d9a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "95.106.58.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057944, "uuid": "ea121fb8-2de0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "95.159.32.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775052786, "uuid": "e73b508d-2dd4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "9lftebnr.sewdarken.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775048406, "uuid": "b4f53796-2dca-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "9sis.demolishtunis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775028846, "uuid": "2a1f0d93-2d9d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "action-log.fighttrapper.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775014984, "uuid": "e3f0c26c-2d7c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "air-traffic.aerovector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775038087, "uuid": "ae7b2294-2db2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "alert-svc.brillwhistleb.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775016006, "uuid": "44c2d400-2d7f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "alt-logic.aerovector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775051527, "uuid": "f9283299-2dd1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ampgg.bossjy.cc.cd" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775003885, "uuid": "0bff13f4-2d63-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "anon-auth.cryptovault.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775019125, "uuid": "87d9a534-2d86-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "area-scanner.fetterland.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775049546, "uuid": "5c16abc5-2dcd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "arn3i.movementsheptun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775027106, "uuid": "1ce26a72-2d99-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "art-portal.cameoinfusion.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775032145, "uuid": "d84ec92b-2da4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "audio-path.lohsmacknon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775017684, "uuid": "2d066401-2d83-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "auto-build.mechaforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775031126, "uuid": "78f1fad7-2da2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bass-boost.lohsmacknon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775072714, "uuid": "4d9699ff-2e03-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "beam-target.signalvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775047211, "uuid": "ecada8fe-2dc7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "binaryassay.demolishtunis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775032865, "uuid": "8596a3ad-2da6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bio-record.maknothplacenta.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775010612, "uuid": "b58c8423-2d72-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bit-stream.quantacircuit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775028126, "uuid": "7cb5d7fe-2d9b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "blend-master.cameoinfusion.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775002146, "uuid": "ff6dd459-2d5e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "board-mgr.infocircuit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775018945, "uuid": "1cefc2ac-2d86-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "border-gate.fetterland.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775006346, "uuid": "c719ce84-2d68-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "brain-base.logicmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775009946, "uuid": "28c0aa08-2d71-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "brain-scan.neurovector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775065265, "uuid": "f5804359-2df1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bulk-logic.datacascade.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775029144, "uuid": "dbcc59c5-2d9d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cage-match.fighttrapper.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775044386, "uuid": "5891571d-2dc1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "calmion.barondecont.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775060232, "uuid": "3d580bb9-2de6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cast-spar.coddlcaught.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775029506, "uuid": "b34ff784-2d9e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "catch-node.fighttrapper.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775033525, "uuid": "0ee144d5-2da8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cell-logic.maknothplacenta.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775002325, "uuid": "6a866481-2d5f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "chip-set.infocircuit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775040907, "uuid": "3f4ea5ab-2db9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "choru5-hinge.driveaway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775013006, "uuid": "48ce50b1-2d78-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cloud-ring.digisphere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775071389, "uuid": "37b4c506-2e00-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "color-map.pixelengine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775027765, "uuid": "a5eb5ff9-2d9a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "color-mix.cameoinfusion.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775040425, "uuid": "1fae7d19-2db8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "compilpow.driveaway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775023745, "uuid": "49b37bc2-2d91-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "core-wrap.dervishpeel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775044807, "uuid": "53d3ce98-2dc2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "crirn4-point.barondecont.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775036225, "uuid": "58a3277a-2dae-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "crop-trace.combinekabisia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775050807, "uuid": "4bab8e52-2dd0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "d3pl-lab.movementsheptun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775062151, "uuid": "b557f79d-2dea-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "daem-gate.granulatetouch.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775012585, "uuid": "4dd7c479-2d77-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "data-field.digisphere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775063227, "uuid": "36a51a26-2ded-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "data-relay.infovector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775055609, "uuid": "79dfd11b-2ddb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "datarea.dropaway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775005925, "uuid": "cc10776f-2d67-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "decision-svc.logicmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775030526, "uuid": "135138c4-2da1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "def-system.fighttrapper.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775019725, "uuid": "edabbd13-2d87-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dfopetroleum.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775062326, "uuid": "1df1e1ee-2deb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dlnhov4.granulatetouch.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775060591, "uuid": "1399b4d2-2de7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dqkgif.granulatetouch.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775053566, "uuid": "b862ac8e-2dd6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dr1v5-frame.dropaway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775071984, "uuid": "9a921872-2e01-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "draw-logic.pixelengine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775070312, "uuid": "b5ae959c-2dfd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "drift-core.nanostream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775046427, "uuid": "193a1103-2dc6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dynfluxal.demolishtunis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775045944, "uuid": "f97fad7e-2dc4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dz7shop.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775031484, "uuid": "4e92d773-2da3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "echo-relay.lohsmacknon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775007245, "uuid": "df31df4b-2d6a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "eco-monitor.technosphere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775038565, "uuid": "caf54563-2db3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "emacra.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775004187, "uuid": "c06a1cd1-2d63-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "enc-tunnel.cryptovault.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775025428, "uuid": "3509adfa-2d95-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "factory-io.industtarant.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775034907, "uuid": "46a4f0ec-2dab-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "farm-logic.combinekabisia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775069645, "uuid": "284525b3-2dfc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-track.nanostream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775011987, "uuid": "e931432d-2d75-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-track.quantacircuit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775020085, "uuid": "c3e63f9b-2d88-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fence-logic.fetterland.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035985, "uuid": "c93cfde9-2dad-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "field-scan.combinekabisia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775051646, "uuid": "4006e6eb-2dd2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "finalvault.sewdarken.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775014626, "uuid": "0e2db834-2d7c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "flight-path.aerovector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775064607, "uuid": "6d118104-2df0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "flow-drop.datacascade.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775074685, "uuid": "e424ec6e-2e07-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "force-field.infodynamics.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775058313, "uuid": "c5d7019f-2de1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "foredeliv.coddlcaught.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775071627, "uuid": "c5b21a21-2e00-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "frame-buffer.pixelengine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775049308, "uuid": "ce636196-2dcc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fvbtyoj.movementsheptun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775052426, "uuid": "10b8d3c6-2dd4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "geo-d4ta.sewdarken.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775006586, "uuid": "56551cc1-2d69-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "global-net.technosphere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035985, "uuid": "c959d305-2dad-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "grain-store.combinekabisia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775066947, "uuid": "e0369a8b-2df5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "grid-secure.cyberlattice.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775045226, "uuid": "4d80989e-2dc3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "h4rb-loop.barondecont.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035985, "uuid": "c93e9822-2dad-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "harvest-api.combinekabisia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775004007, "uuid": "54f2ce64-2d63-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hash-store.cryptovault.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775034185, "uuid": "98a678af-2da9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "health-node.maknothplacenta.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775016728, "uuid": "f2f28736-2d80-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "heavy-duty.mechaforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775025785, "uuid": "0984c062-2d96-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "heavy-link.industtarant.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775050444, "uuid": "73ad01e3-2dcf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hfx03k.movementsheptun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775036885, "uuid": "e1e75d3d-2daf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "high-note.brillwhistleb.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775022066, "uuid": "61116a13-2d8d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hydro-svc.needwatka.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775060887, "uuid": "c42f28cd-2de7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hyper-14b.granulatetouch.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775055125, "uuid": "5967ed0d-2dda-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ijnjw.dropaway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775071025, "uuid": "5ea82a49-2dff-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "image-proc.pixelengine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775009285, "uuid": "9ee15beb-2d6f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "impulse-api.neurovector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775013366, "uuid": "1f4f9be3-2d79-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "info-orbit.digisphere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775062564, "uuid": "abe29a13-2deb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "info-point.infovector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775017085, "uuid": "c7bd4083-2d81-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "iron-works.mechaforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775045945, "uuid": "fa26a5f5-2dc4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "jem-mialwe.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775048047, "uuid": "def81481-2dc9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "jjczes4.demolishtunis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775045945, "uuid": "fa267d54-2dc4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "keilo-jermailer.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775041206, "uuid": "f14d9e80-2db9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kxep42pp.driveaway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775019366, "uuid": "1778853b-2d87-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "land-mark.fetterland.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775023085, "uuid": "c05a6a25-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "layer-check.dervishpeel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775045945, "uuid": "f9abdab0-2dc4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lejrmakei.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775065925, "uuid": "7eed0ce6-2df3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "level-check.datacascade.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775033166, "uuid": "391e6f41-2da7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "life-cycle.maknothplacenta.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775012284, "uuid": "9aab7c47-2d76-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "light-logic.quantacircuit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775067967, "uuid": "402e9eae-2df8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "link-vault.cyberlattice.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775021048, "uuid": "01fa2df0-2d8b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "liquid-api.needwatka.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775046008, "uuid": "1f5bcadb-2dc5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lo98.barondecont.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775002866, "uuid": "acec8272-2d60-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lock-box.cryptovault.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775038807, "uuid": "5b9c48e8-2db4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "loud-cloud.brillwhistleb.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775051166, "uuid": "21ea63f2-2dd1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lumline0al.sewdarken.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775042884, "uuid": "d9b6095b-2dbd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lumnexen7.vivatwoman.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775045944, "uuid": "f9984981-2dc4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "m.hy-union.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775047626, "uuid": "e3b5483a-2dc8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "m15t7-sync.demolishtunis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775004545, "uuid": "95a6b6d6-2d64-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "main-frame.logicmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775045944, "uuid": "f980bc05-2dc4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "marcuswelbyclinic.click" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775056749, "uuid": "21cee080-2dde-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "matri-insp.glassterrible.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775066644, "uuid": "2bc59b57-2df5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mesh-gate.cyberlattice.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775007965, "uuid": "8bcf4751-2d6c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "meta-layer.technosphere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775068625, "uuid": "c8896ba8-2df9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "micro-bit.nanostream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775010247, "uuid": "dc6ebf52-2d71-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mind-node.neurovector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775059510, "uuid": "8f566c29-2de4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mode14-node.coddlcaught.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035085, "uuid": "b0b81330-2dab-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "my-xarid.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035985, "uuid": "c92b8736-2dad-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mybiggestjoy.bond" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775051945, "uuid": "f2683047-2dd2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nbjc.sewdarken.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775043665, "uuid": "ab0a270a-2dbf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "neo-d3v.vivatwoman.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775008926, "uuid": "c8a92117-2d6e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nerve-center.neurovector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775067666, "uuid": "8cbb1ded-2df7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "net-fiber.cyberlattice.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775031846, "uuid": "2664b515-2da4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "noise-gate.lohsmacknon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775043189, "uuid": "8f4cc5dd-2dbe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "norvenix2.vivatwoman.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775040065, "uuid": "494b1b56-2db7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nppw50at.driveaway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775033945, "uuid": "096ff2c3-2da9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "organ-sync.maknothplacenta.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775045947, "uuid": "fb076d81-2dc4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ossapp.suning.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775023385, "uuid": "730cacc4-2d90-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "outer-shell.dervishpeel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775008266, "uuid": "3f5897f9-2d6d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "outer-shell.technosphere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775011268, "uuid": "3c8dcc17-2d74-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "packet-flow.quantacircuit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775062931, "uuid": "8671bf85-2dec-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "path-finder.infovector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775016364, "uuid": "1a736fb5-2d80-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pilot-svc.aerovector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775074267, "uuid": "eb33556a-2e06-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ping-gate.signalvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775014267, "uuid": "3886684f-2d7b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "point-edge.digisphere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775066285, "uuid": "5580144f-2df4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pool-manager.datacascade.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775017325, "uuid": "571697ce-2d82-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "power-plant.mechaforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775005566, "uuid": "f6179576-2d66-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "process-io.logicmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775056326, "uuid": "2531ce11-2ddd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "proto-voy4.glassterrible.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775045944, "uuid": "f98af5df-2dc4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-563376bbe356408a8c67e226123a6095.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775070007, "uuid": "ffd5c9e6-2dfc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pulse-svc.nanostream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775021826, "uuid": "d19431d5-2d8c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pump-ctrl.needwatka.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775082969, "uuid": "2dbc9b10-2e1b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "q55at0cm.apexharvestor.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775054712, "uuid": "634c9f50-2dd9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "qnde.dropaway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775044025, "uuid": "8193eebb-2dc0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "qobavx3.barondecont.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775011624, "uuid": "1137095a-2d75-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "qubit-sync.quantacircuit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775073005, "uuid": "fb0a65f9-2e03-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "radio-freq.signalvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775074445, "uuid": "5527fc48-2e07-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "range-extend.signalvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775068988, "uuid": "a07f195c-2dfa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rapid-io.nanostream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775072345, "uuid": "717280e2-2e02-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "raster-api.pixelengine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775049064, "uuid": "3d15253e-2dcc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "relay-chain.movementsheptun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775061248, "uuid": "9b7162d5-2de8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rnonito-watch.granulatetouch.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775018346, "uuid": "b75ab7e3-2d84-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "robot-api.mechaforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775034486, "uuid": "4ba5f1d0-2daa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "root-source.maknothplacenta.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775024107, "uuid": "218aef88-2d92-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rotate-node.dervishpeel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775063586, "uuid": "0cab8980-2dee-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "route-api.infovector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775004909, "uuid": "6e4b6523-2d65-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rule-engine.logicmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775003225, "uuid": "82db9c21-2d61-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "secret-api.cryptovault.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775029807, "uuid": "66a4642b-2d9f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "secure-hit.fighttrapper.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775002566, "uuid": "fa31563e-2d5f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "secure-key.cryptovault.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057409, "uuid": "ab15443f-2ddf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "secure-spool.glassterrible.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775059150, "uuid": "b8eb5ff2-2de3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "shie1d-leaf.coddlcaught.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775067245, "uuid": "91a0a8c4-2df6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "shield-base.cyberlattice.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775037725, "uuid": "d649d2d2-2db1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "signal-box.brillwhistleb.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775026444, "uuid": "92b45586-2d97-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "silk-route.industtarant.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775020385, "uuid": "76ae97e9-2d89-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "site-connect.fetterland.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775024466, "uuid": "f7632c59-2d92-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "skin-proxy.dervishpeel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775015345, "uuid": "badf0c8e-2d7d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sky-route.aerovector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775026806, "uuid": "6a5ab87f-2d98-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "small-frame.cameoinfusion.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775069284, "uuid": "50c77dc7-2dfb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "small-packet.nanostream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775059866, "uuid": "6390f41f-2de5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "snapshotgeyser.coddlcaught.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775039227, "uuid": "55f50355-2db5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "soft-glob.driveaway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775019725, "uuid": "edaf2b93-2d87-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "soil-monitor.fetterland.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775042046, "uuid": "e5b2deac-2dbb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "solcresten2.vivatwoman.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775030765, "uuid": "a1f28df1-2da1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sound-check.lohsmacknon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775022366, "uuid": "13ad7c80-2d8e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "source-log.needwatka.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775049969, "uuid": "583ef8e5-2dce-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sp4rk3-trace.movementsheptun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775010966, "uuid": "88865e9a-2d73-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "speed-test.quantacircuit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775024709, "uuid": "88913d20-2d93-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "spider-net.industtarant.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775022787, "uuid": "0ec2f711-2d8f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "spin-cycle.dervishpeel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775045586, "uuid": "23a50001-2dc4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sprucethorn.barondecont.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775056445, "uuid": "6ca4f219-2ddd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "stajestetice.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775013965, "uuid": "8457c24b-2d7a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "static-cdn.digisphere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775017986, "uuid": "e0f898a0-2d83-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "steel-core.mechaforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057945, "uuid": "ea444de9-2de0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "storagefreig.glassterrible.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775064908, "uuid": "20d04d25-2df1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "stream-view.datacascade.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775027406, "uuid": "cfdb14bd-2d99-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "style-sync.cameoinfusion.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775008566, "uuid": "f2309d2e-2d6d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "synapse-log.neurovector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775046845, "uuid": "12787a95-2dc7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "talforgeal2.demolishtunis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775030165, "uuid": "3c78de29-2da0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "target-api.fighttrapper.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775045944, "uuid": "f97ce86f-2dc4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "telecomsa.xyz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775009585, "uuid": "519a3497-2d70-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "thought-hub.neurovector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775054226, "uuid": "4182deca-2dd8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "threaopti.dropaway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775065628, "uuid": "ce3134ce-2df2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tier-access.datacascade.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775073365, "uuid": "d14b1bef-2e04-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tower-sync.signalvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775063945, "uuid": "e2bc2a66-2dee-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "trace-sync.infovector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775005265, "uuid": "42fbed23-2d66-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "truth-table.logicmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775037307, "uuid": "dd1e6c4e-2db0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tune-api.brillwhistleb.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775074866, "uuid": "5040922a-2e08-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ui2rn7ei.apexharvestor.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775006945, "uuid": "2c3002db-2d6a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "urban-hub.technosphere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775064246, "uuid": "9639f54d-2def-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vector-node.infovector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775026086, "uuid": "bce6ddfd-2d96-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "venom-dev.industtarant.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775028725, "uuid": "e1c8bdcb-2d9c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "video-drop.cameoinfusion.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775054407, "uuid": "ad6107aa-2dd8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vrr80sq.dropaway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775020686, "uuid": "2a1fe7b6-2d8a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "water-flow.needwatka.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775032445, "uuid": "8b4925d2-2da5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wave-form.lohsmacknon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775073667, "uuid": "854b5538-2e05-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wave-form.signalvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775025127, "uuid": "814901c2-2d94-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "web-crawl.industtarant.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775013607, "uuid": "af003a85-2d79-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "web-portal.digisphere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775021645, "uuid": "65fd2ca3-2d8c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "well-point.needwatka.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775041625, "uuid": "ead08d90-2dba-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wild-mount.vivatwoman.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775061551, "uuid": "4fd4e787-2de9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wildcircuit.granulatetouch.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775038446, "uuid": "8461f4da-2db3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wind-flow.brillwhistleb.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775015645, "uuid": "6dc166d2-2d7e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wing-span.aerovector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775035085, "uuid": "b0ce3ae7-2dab-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "winston1.rf.gd" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775007666, "uuid": "d9bb60c9-2d6b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "world-view.technosphere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775045944, "uuid": "f97f335d-2dc4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.telecomsa.xyz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775039645, "uuid": "4f12fc37-2db6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wzovragk.driveaway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775036525, "uuid": "0b475f54-2daf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "yield-hub.combinekabisia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775068325, "uuid": "15449eaf-2df9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zone-portal.cyberlattice.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775057651, "uuid": "3af3c7bb-2de0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zwjk9ew.glassterrible.in.net" } ] } }