{ "Event": { "published": true, "date": "2026-03-20", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-03-20", "timestamp": 1774052120, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "6e665f22-0a62-4cb5-a236-19911cca21bf", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c2646f1a-23ef-11f1-ba1a-82aee05be84a", "comment": "Malware payload (SmartLoader)", "timestamp": 1773964809, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773964809, "uuid": "4fc6d6f7-8058-4954-9027-f004ecc7c7ec", "comment": "Malware payload (SmartLoader)", "value": "7ffe2598f8a30fccfd6d44857e1add2f", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773964809, "uuid": "5ce52451-ca79-4f3e-b8f0-1d4370eb736d", "comment": "Malware payload (SmartLoader)", "value": "0066151c3189b57ea22e80522fa514a2d6d3e4873d0ef4fd0d380c8da1998bdc", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773964809, "uuid": "46c4a183-02fc-4d17-b75e-ddaa10aae4fb", "value": "T180C4239603289624787407B197BF9F8DC6028E5329921BFD9FC8BF0CA1356589D5FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773964809, "uuid": "fcec0f88-7852-4ff0-bb6f-b50de9e7f006", "value": "12288:wOCBcIqB4liubzqtYBpfsz4TKPozt4CTo4Pl/2Ar5n:wZ+/ubzqyB9sz4TKPE1l/Zr5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773964809, "uuid": "52d9819c-831c-4093-b796-8b971918a8f8", "value": 546982, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773964809, "uuid": "675f074d-0b4d-4b14-b4dc-b8e3b7fd6b0d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c26cc636-23ef-11f1-ba1a-82aee05be84a", "comment": "Malware payload (SmartLoader)", "timestamp": 1773964809, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773964809, "uuid": "b6f4a4bf-5a0f-4598-bcaa-befc38812ce7", "comment": "Malware payload (SmartLoader)", "value": "246df3b95fcb5562e6470dd705dba80c", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773964809, "uuid": "9c06bc76-2ea8-4337-8bb3-708c4d8fc775", "comment": "Malware payload (SmartLoader)", "value": "9080a81295b61fd3483947881b97961979d7d87c3a551d1ff77db1345a62a7b2", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773964809, "uuid": "ef6b9744-bd82-44e0-abaf-f4845ba7e2a1", "value": "T10FC4239603689664787407B197BF9F8DC6028E1329921BFD9FC8BF0CA1356489D5FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773964809, "uuid": "115d1870-9f00-49e4-bad7-b3f0e7d411ed", "value": "12288:EOCBcIqByliubzqtYBpfsz4TKPozt4CTo4Pl/2Ar5V:EZ+hubzqyB9sz4TKPE1l/Zrz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773964809, "uuid": "46974654-977d-4eef-8458-6077b47dc0ab", "value": 546982, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773964809, "uuid": "4d7b3ae2-aa2f-47de-8a74-2e62b4599f18", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3ed2737-23ef-11f1-ba1a-82aee05be84a", "comment": "Malware payload (SmartLoader)", "timestamp": 1773964811, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773964811, "uuid": "5fc80302-8018-4048-a661-178564424379", "comment": "Malware payload (SmartLoader)", "value": "72ca927f42539ad3eab9a8eacb9a9c85", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773964811, "uuid": "15f3da41-668e-4bfa-a442-893bd8285281", "comment": "Malware payload (SmartLoader)", "value": "0cb95865025d78cfd81b430b58b72871ea74e8e5831d7b32727da0969565d303", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773964811, "uuid": "d20d470e-e0ab-42a9-acc6-875771abb95d", "value": "T1EDC4239603689624787407B197BF9F8DC6128E1329921BFD9FC8BF0CA1356489D5FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773964811, "uuid": "4bd61e63-3749-4406-9e02-a0796d94ba10", "value": "12288:YOCBcIqBMliubzqtYBpfsz4TKPozt4CTo4Pl/2Ar5X:YZ+zubzqyB9sz4TKPE1l/Zrh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773964811, "uuid": "735afd09-fc62-4e1b-8021-ff69cdfe729b", "value": 546982, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773964811, "uuid": "41c3d654-014d-4d1a-b2bb-b540618f9062", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4eef131-23ef-11f1-ba1a-82aee05be84a", "comment": "Malware payload (SmartLoader)", "timestamp": 1773964813, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773964813, "uuid": "47049d0a-2ad4-4a71-8fa8-9ac701ac4d7c", "comment": "Malware payload (SmartLoader)", "value": "a9ac2a0996e36d2018205675c68e29e8", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773964813, "uuid": "bf10b74e-f6a3-4af1-b835-1bbef552fc3c", "comment": "Malware payload (SmartLoader)", "value": "eb4a305f186a9e97209b977fb3ae4ec44b7dd4d2be0dbf81292c0780de511d26", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773964813, "uuid": "9ed71499-2127-4311-9a10-eaa5be38bca5", "value": "T1DCC4239603689664787407B197BF9F8DC6028E1329921BFD9FC8BF0CA1356489D5FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773964813, "uuid": "861f7961-42f0-4a20-888e-55845ebe29ff", "value": "12288:EOCBcIqB+liubzqtYBpfsz4TKPozt4CTo4Pl/2Ar5x:EZ+9ubzqyB9sz4TKPE1l/Zr3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773964813, "uuid": "6d7dbc92-b5a2-4d4c-a01c-8935d04afecc", "value": 546982, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773964813, "uuid": "ebfa8acf-90ce-4577-895c-d28287a9432a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1773965780, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773965780, "uuid": "78cd6735-8b13-4fbc-8bd1-13aa67c579bb", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773965780, "uuid": "4dd22c49-a378-4e69-b87f-27f40edd7598", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773965780, "uuid": "d817e114-cc40-41c5-a5ff-99b6261d7098", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773965780, "uuid": "673d9944-bf76-4064-86ba-ea42a117f23d", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773965780, "uuid": "b0830ffe-8644-4a5c-a59b-7f6161077409", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40fd5fde-23f3-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773966309, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773966309, "uuid": "9b93f760-44c6-48c4-a561-066cfb34190e", "comment": "Malware payload", "value": "4bc2b0e1b417eb86957087652638a720", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773966309, "uuid": "14b70bf3-4db4-43ec-82d3-973d34fb8e64", "comment": "Malware payload", "value": "4a778353c3b7a8bc65b456c2c0c02515fcb6971d58a3703134c4320f98600c59", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773966309, "uuid": "3369835f-dc68-4911-9b9f-28cf17c83b1d", "value": "T10FC4239603289624787407B197BF9F8DD6028E5329921BFD9FC8BF0CA1356489D5FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773966309, "uuid": "083683e1-2f20-477c-ab5d-e07aeb2518c7", "value": "12288:EOCBcIqBuliubzqtYBpfsz4TKPozt4CTo4Pl/2Ar5F:EZ+NubzqyB9sz4TKPE1l/ZrL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773966309, "uuid": "420c93ab-f996-4b72-a8c8-9bbea57a5111", "value": 546982, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773966309, "uuid": "5c7f2db8-203d-4509-ab15-6287efe37b5c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7bb3975d-23f5-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773967267, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773967267, "uuid": "b0fb3724-0960-4d02-91fd-645384973e73", "comment": "Malware payload", "value": "4b5feb4d08008ab5447cf3370168e33b", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773967267, "uuid": "506975b6-6d16-4737-8f11-406e91836d0f", "comment": "Malware payload", "value": "773cf167bb44ae4d420075ce8f167292c275c2b93d6c1e54e5412501fd6d31db", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773967267, "uuid": "a5312c80-bffb-405a-9706-d517fada1bef", "value": "T1CBB4237B0A7F70D00C6A43BA8B464611A43D9D611628AFBD47DCE6CC8D0E51EBF14E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773967267, "uuid": "2685a508-3c9f-49a4-8da7-fb3c3e324e68", "value": "12288:F4lhhLoVDI2FLmMJK4eqO3g/ALyYG0ZaDajTCXMO8xzDOeDBM:SxopIAmMJ4A/f0Za6TCXKBxFM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773967267, "uuid": "c6e1973a-abed-4ff2-ab6e-a9f361b77b7a", "value": 541353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773967267, "uuid": "15ba1b74-f649-4df4-98b3-3fcb4a7666e1", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7bc65cc6-23f5-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773967267, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773967267, "uuid": "73462120-6f72-4e0c-bc8c-2a62ed02d9b4", "comment": "Malware payload", "value": "3c88c4d89c9a6f0766f73215768243f2", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773967267, "uuid": "c019dd9b-53a0-4104-bf6f-ac6f30054db0", "comment": "Malware payload", "value": "11aed6ef482e226af246210736e6163ba16bbd3f7623eb0483ca99252c888a3a", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773967267, "uuid": "bc1cefff-7899-45b9-858e-918d8a431451", "value": "T1E0B4237B0A7F70D00C6A43BA8B468611A43D9D621628AFBD47DCE6CC8D0E51EBF14E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773967267, "uuid": "b0dca2f3-61fb-44b2-8317-1b0aa1268676", "value": "12288:J4lhhLoVDI2FLmMJKPeqO3g/ALyYG0ZaDajTCXMO8xzDOeDBZ:WxopIAmMJ3A/f0Za6TCXKBxFZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773967267, "uuid": "fb225618-9e9f-44b3-8b88-23afec0ffd1a", "value": 541353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773967267, "uuid": "0a11f432-9610-4952-873c-93ab6140d890", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7bd06da8-23f5-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773967267, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773967267, "uuid": "1987ed50-800b-49b2-8e92-627db0471f0c", "comment": "Malware payload", "value": "dc5a3fd29e6e8f575d6a8f858ecdb22e", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773967267, "uuid": "54519d36-2ab6-4e32-a1f8-17406a77034b", "comment": "Malware payload", "value": "cc4345cf55360a633ad35cdc66d04a54b3df8ee52a3ada76d480155f1a37b276", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773967267, "uuid": "51457c19-e2d8-437a-a936-10904f519295", "value": "T1D1B4237B0A7F70D00C6A43BA8B468611A43D9D621628AFBD47DCE6CC8D0E51EBF14E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773967267, "uuid": "ab2ac2ad-b4cd-4742-8afc-e6ed9c9dec82", "value": "12288:Px4lhhLoVDI2FLmMJK4eqO3g/ALyYG0ZaDajTCXMO8xzDOeDBkb:mxopIAmMJ0A/f0Za6TCXKBxFM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773967267, "uuid": "71e7a984-d8c1-4080-b867-26d5dbd8783a", "value": 541353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773967267, "uuid": "d1e7ab04-a85d-4623-9db6-2989fcc3528f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7bd0acce-23f5-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773967267, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773967267, "uuid": "1faf935d-9c8b-4807-9fd2-441fd52594db", "comment": "Malware payload", "value": "5d7ae0c73b789837e8bf37ad1e871b4d", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773967267, "uuid": "e8b8e7fa-3818-4c9f-9600-260bd8abedb8", "comment": "Malware payload", "value": "64ab630c0e9351287a39a59ec6263293d8330ff930af56a892afbb3622f45faa", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773967267, "uuid": "77ee0a0b-5813-4e0a-8bae-645b6a5cea91", "value": "T1C6B4237B0A7F70D00C6A43BA8B468611A43D9D621628AFBD47DCE6CC8D0E51EBF14E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773967267, "uuid": "bb126038-409b-4ebe-925c-9f6ebb2d6ca4", "value": "12288:h4lhhLoVDI2FLmMJK2eqO3g/ALyYG0ZaDajTCXMO8xzDOeDBi:exopIAmMJyA/f0Za6TCXKBxFi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773967267, "uuid": "2d221227-c58c-40d5-ae39-fc8a056a9188", "value": 541353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773967267, "uuid": "3263c050-0d7f-4449-b7a1-081373458812", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c051e76-23f5-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773967267, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773967267, "uuid": "b0486ef3-4992-479e-a4b4-7415cfbf34fa", "comment": "Malware payload", "value": "de19c275f03c4c82b2b9f2280791356a", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773967267, "uuid": "e24c9ce4-59e3-4c10-a1be-e71ae2652f8b", "comment": "Malware payload", "value": "ca9635053984a660bfb3581f64ee1ccdf181ac4dddfee601f462715187aa5668", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773967267, "uuid": "267095cf-6cac-4769-a40c-876d88f6fb33", "value": "T13BB4237B0A7F70D00C6A43BA8B464611A43D9D621628AFBD47DCE6CC8D0E51EBF14E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773967267, "uuid": "7958203b-e9e6-469f-9614-f587348b6273", "value": "12288:d4lhhLoVDI2FLmMJKFeqO3g/ALyYG0ZaDajTCXMO8xzDOeDBX:axopIAmMJFA/f0Za6TCXKBxFX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773967267, "uuid": "0fd99b3d-a39a-45c3-8f2e-b474732de511", "value": 541353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773967267, "uuid": "a99fc1ce-57d5-4587-bd91-8f7b41c97835", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c198262-23f5-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773967268, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773967268, "uuid": "38176ec4-98b8-4611-8395-a568ae222635", "comment": "Malware payload", "value": "e9d57d7b79dd770c491d26ad31398a57", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773967268, "uuid": "01157495-603c-4f52-968c-1a29b2cd1831", "comment": "Malware payload", "value": "84d2277d18a54d8cccd766e25198ac55224b768ab674d06d33e8bbf77201da0d", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773967268, "uuid": "20229e60-9b5e-4c6b-a468-a323f8d4b08b", "value": "T1B2B4237B0A7F70D00C6A43BA8B468611A43D9D621628AFBD47DCE6CC8D0E51EBF14E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773967268, "uuid": "0e5d1fe0-cea2-4d9e-8f9b-7047c74c565f", "value": "12288:p4lhhLoVDI2FLmMJKyeqO3g/ALyYG0ZaDajTCXMO8xzDOeDBu:2xopIAmMJOA/f0Za6TCXKBxFu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773967268, "uuid": "08adf249-ab24-42d2-a509-30319cb785fd", "value": 541353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773967268, "uuid": "80ee34c8-9977-41cd-8301-11222bb3f959", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7cd57386-23f5-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773967269, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773967269, "uuid": "32ae4065-4439-46f3-a8b3-051dd5ca8f74", "comment": "Malware payload", "value": "087d8a6d4c12787c022ccc4c610bdaf7", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773967269, "uuid": "8b2e3eeb-f8c4-4e74-8403-bc7b8d0c6470", "comment": "Malware payload", "value": "14517887f4fcae8f6fc332c62dd15c1a7cc4ad2e75c7668a139481f42072d928", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773967269, "uuid": "c42cb9e8-25a4-4938-a0a1-26a3714a81a7", "value": "T1DEB4237B0A7F70D00C6A43BA8B464611A43D9D611628AFBD47DCE6CC8D0E51EBF14E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773967269, "uuid": "8385d06c-51d9-4c8a-8b5d-f0c2daf7a5db", "value": "12288:p4lhhLoVDI2FLmMJKieqO3g/ALyYG0ZaDajTCXMO8xzDOeDB2:2xopIAmMJSA/f0Za6TCXKBxF2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773967269, "uuid": "810557dc-78d3-490f-a212-e98a9d504a5a", "value": 541353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773967269, "uuid": "4ff486fe-8aae-4ea1-996f-51e3b9c22ff4", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6183e94d-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1773968175, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773968175, "uuid": "cc935fdc-3d72-42e0-adc3-54b8632b08d0", "comment": "Malware payload", "value": "dbc520ea1518748fec9fcfcf29755c30", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773968175, "uuid": "9c524bed-710c-4cbd-92d0-cd358faea620", "comment": "Malware payload", "value": "c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773968175, "uuid": "1127e907-e326-4e41-b6db-1b2d43eabe2b", "value": "D2D3128AA536ED54F11B9AF11B3B99907DF5659E82F4D4A4A2CF634312CC343FA4070B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773968175, "uuid": "1d7adc13-1fb7-4417-a4a4-95a11c40a640", "value": "3072:Nc4i0agsmw3Py5CP5HM8EVLUuYtgB5H6oz:Nc/0aNPy54EVAhOae", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773968175, "uuid": "3af47e87-babb-4400-9509-be2f11a79290", "value": 132860, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1773968352, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773968352, "uuid": "7d5a8948-853c-4c6a-9a6f-cc0c70b31ab5", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773968352, "uuid": "b628d408-656f-4d04-8c75-5bfb9c8262ab", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773968352, "uuid": "35f370f0-bad7-42a0-937e-db9ca74193ee", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773968352, "uuid": "fdcddcc6-c355-4d98-8d53-080dffaf77d1", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773968352, "uuid": "d51306c3-ee39-407c-ada4-7e2fe6037cd8", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1773970027, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773970027, "uuid": "6cf6934e-4a15-4667-9953-d748eca7794e", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773970027, "uuid": "fdb5c432-ff5f-4ac9-981b-e356e860d809", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773970027, "uuid": "67f2a997-3925-43c2-bbaa-c3c2c4c023b3", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773970027, "uuid": "fdc2e656-ea72-4c1c-b315-a7fcc6e85827", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773970027, "uuid": "9ebb5523-1037-4559-81e5-2dca7379c8e4", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1773971541, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773971541, "uuid": "6b429a04-47ec-4bc1-93c7-83bf57189857", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773971541, "uuid": "4beb21d2-bd1c-40df-919f-64cd3f729b9a", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773971541, "uuid": "5e19c9c3-10a5-4c74-8bf4-fe356004769d", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773971541, "uuid": "1122533f-4a22-48f8-8c93-c5d6c8204631", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773971541, "uuid": "2dc9fa6a-4d95-431c-8b35-6a0a3769c05b", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91bfd9a8-2401-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773972458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773972458, "uuid": "f8ef8765-0443-4a0c-875c-aca2c1ad0499", "comment": "Malware payload", "value": "2afc9a197b0e23e835f1f69cba3a73bf", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773972458, "uuid": "dca8b423-8c95-448e-9767-8407f0827f63", "comment": "Malware payload", "value": "21de8925706f58b89e4803739c40ca0b5772688b336dcc90e429992ff56108bd", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773972458, "uuid": "aa2426c3-2cbf-448b-8df3-acd1c1fc97a1", "value": "T1AA8309327488582A210B428FD267336C70AFDCE2D611E5B6F6F632344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773972458, "uuid": "30210888-dba4-4141-a4db-e47b97fa432e", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbn5WaqVN/:XEKltp9txAX/yr2pb5WrVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773972458, "uuid": "237f67f8-dafa-4b96-ad11-1f51e2ca1a00", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773972458, "uuid": "0650c3f2-59c3-4c95-ba24-7536be09206c", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "12ec92c4-2406-11f1-ba1a-82aee05be84a", "comment": "Malware payload (CaminhoLoader)", "timestamp": 1773974393, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773974393, "uuid": "138e95b4-349c-424d-b9fd-b41e8ee1af78", "comment": "Malware payload (CaminhoLoader)", "value": "4f524088ca2f7394145a358f45a8efe5", "object_relation": "md5", "Tag": [ { "name": "CaminhoLoader", "colour": "#0a1beb", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "prt", "colour": "#9086b3", "exportable": true, "hide_tag": false }, { "name": "ua-ps", "colour": "#32D6F6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773974393, "uuid": "55b46636-400c-4afe-a9d9-f7fda5ab3000", "comment": "Malware payload (CaminhoLoader)", "value": "ffb3a2239bfdd3373db080f2b89dc5064084c0962353054b3e92e53eff33373c", "object_relation": "sha256", "Tag": [ { "name": "CaminhoLoader", "colour": "#0a1beb", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "prt", "colour": "#9086b3", "exportable": true, "hide_tag": false }, { "name": "ua-ps", "colour": "#32D6F6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773974393, "uuid": "25270832-ce33-4d1a-be4a-78ff7c9607ae", "value": "T18BB50297F971464F4DC85FA2786C6580DC112ECE1426C24AFA7BD8F72284B8CD1C69", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773974393, "uuid": "93ea3d65-1c0d-4350-aa24-390098ff5932", "value": "96:4WJYUNL51NRzyKA3dBRjoLjSgetW10Pi/V9uzVK+wZjT59DjGtfQ3BveEIzOSehQ:3AP54e6AHhMk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773974393, "uuid": "17ca916a-2a9c-42c9-8ae7-e52fab7264b8", "value": 2358973, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773974393, "uuid": "8bb7241e-dadd-476e-a193-6f090d903563", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77523479-e19f-11f0-9c99-82aee05be84a", "comment": "Malware payload", "timestamp": 1773976020, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773976020, "uuid": "e3436d9d-28b3-4127-94cd-d4e368d55fa1", "comment": "Malware payload", "value": "ebbcfb749a959fb53e9fc8b6dc915838", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ArkanixStealer", "colour": "#e0ae21", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "msi-stego", "colour": "#9a67cc", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PXRECVOWEIWOEI", "colour": "#46EDF1", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "stego", "colour": "#38259d", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773976020, "uuid": "ed2beca5-ff49-4f7e-9971-bc403a39b985", "comment": "Malware payload", "value": "3f4c3c16f63fb90d1fd64b031d8a9803035f3cb18332e198850896881fb42fe5", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ArkanixStealer", "colour": "#e0ae21", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "msi-stego", "colour": "#9a67cc", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PXRECVOWEIWOEI", "colour": "#46EDF1", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "stego", "colour": "#38259d", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773976020, "uuid": "6811321d-c6ba-4301-9f6e-ae22ec19fb9b", "value": "T17D9501321243BD9FEBAB0FBCD28236980C393D572BD155D8B6CC469215D5AD8CEAD4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773976020, "uuid": "71d30a40-98c1-49c6-9ddd-d008af057dc2", "value": "24576:8+EhkjixLXR+bG/f29mFusqa+n0tkR5JoZh73VVPYDlJ0K3x0cGC4yczQDBoi0Ft:8UixbItdTrJoFVPMvXGni0v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773976020, "uuid": "1e3814ac-576c-41e2-a706-0d717cdff775", "value": 1969672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773976020, "uuid": "762f0674-85be-4027-99a3-983f5c3cae11", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f484330-240b-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773976588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773976588, "uuid": "87499c09-f90b-4457-9c1e-1130ab9e38f3", "comment": "Malware payload", "value": "75fc282f667b70e61af582c926f0fb03", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773976588, "uuid": "36bb65bc-4cd2-4470-bc98-4fe6afd3969e", "comment": "Malware payload", "value": "6e4026affd522138e53dd2fd4a9a6741b00d5183c315cd75df5bde9f6259db3c", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773976588, "uuid": "a1a6e1f5-d2a6-448b-a67b-0584a526e362", "value": "T141F098DE71193828F804BE4634D28B942210F2971E5F4F49148D2961FC566783037F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773976588, "uuid": "bfd6127a-fee9-439f-be26-d173548a41e3", "value": "6:SVX5UCuyU4IUrUgcVX5Uh0yU1BFIURcUGVX5U4LyU4IIU4QyU4hLVX5UeGLyUeGx:oDIsSHFI1nIK0edIIeQpJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773976588, "uuid": "ac9f345f-7ee0-436d-9033-4ef42f0b60a0", "value": 468, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773976588, "uuid": "817f6951-9482-4a50-9e0a-5aa4664a43ea", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d653497-240b-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773976611, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773976611, "uuid": "77d11593-fba2-462c-bad6-e43ca477ae63", "comment": "Malware payload", "value": "348831f47758414b0ff96c9593184e7b", "object_relation": "md5", "Tag": [ { "name": "pw-9937", "colour": "#aaa114", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773976611, "uuid": "b0a6d434-b865-4e18-8580-620e5dc288cd", "comment": "Malware payload", "value": "cd6f90333172cff71a9b1d681e9e9613363df28bdca077f60e66f54948651eb8", "object_relation": "sha256", "Tag": [ { "name": "pw-9937", "colour": "#aaa114", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773976611, "uuid": "e740207f-c1e0-4b67-83c9-a58dd68ab144", "value": "T10FA73348B29D97248BFDB3D6CC5A4F91FB928BBCDC199D67E85023DAF075066CE00A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773976611, "uuid": "4784a85d-2124-4113-acf5-6cbef8273d23", "value": "786432:SUFk3A8zjD5bJJ2AwFxTCSrTo9zKeBjyQ/P4peDaANnZAvs8:SUyHzH56ACBjheBGW4eakZAh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773976611, "uuid": "29b03145-a2e6-4f62-b31d-1be19f83d9da", "value": 46635806, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773976611, "uuid": "c547cdc0-1c54-4ef1-8523-83edac4d78f1", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5cd87a7f-240c-11f1-ba1a-82aee05be84a", "comment": "Malware payload (OffLoader)", "timestamp": 1773977094, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773977094, "uuid": "4458399e-3b13-4672-9186-1ec48baae351", "comment": "Malware payload (OffLoader)", "value": "36261e00d3ea1607aa556e63af5b8bd9", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773977094, "uuid": "23ce0bc1-ab24-4d1e-8efb-3fb7abe4b493", "comment": "Malware payload (OffLoader)", "value": "ab5a5aa399949370a99cfc953d9e93a11c7a5c16623f9ce3b94da126e3c9bd49", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773977094, "uuid": "82dada57-37ad-4c9c-9214-d33507c42086", "value": "T1A9960133B28A633EE46E5A3B49B6D1645D3F7A21A40E8C06A6E44C4CDF2E0601D7F7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773977094, "uuid": "d9639f68-232c-421a-b8a5-c6a3ac9ded78", "value": "ac4ded70f85ef621e5f8917b250855be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773977094, "uuid": "35ef3dcb-be31-4598-97a1-3b20e133baf0", "value": "49152:GN61T1mZkWVsMx3BFFE6fy/+nhY9GS9CjOCs/BBhH5aOVIJnkqkJcUZ:GN66RVsM/JqM2GUC6Cs/BB6zkcU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773977094, "uuid": "a76bc871-0722-4171-b9bb-a12bac416111", "value": 8766026, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773977094, "uuid": "6733f72b-806e-497f-ba85-3d27ae46d9ce", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "75d52011-240e-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773977995, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773977995, "uuid": "cec95db1-f6c6-463e-941d-59ace006992c", "comment": "Malware payload", "value": "e59df4ef3d21dfbc09cda7b5a0cc0ef1", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773977995, "uuid": "ab8c6d37-f550-43be-bad3-933cf4bbc213", "comment": "Malware payload", "value": "248734c12a332af9f62988e17ffe9f83da258c9d2d2f4b8a50bc8b9eb3b451f7", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773977995, "uuid": "8bf6377b-add2-442c-b8db-a11965b6126c", "value": "T1B67733378662E051F3299718E0BDF7810BF0B0B43A634CBF6AA45E171C5DB4626F1A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773977995, "uuid": "49df2e93-8982-4327-9194-e56f74faed11", "value": "786432:bAhD/xxmM1BWiFewHyJZ0SH2tb/mT1xXFxJNS+O9EiVgJ:wz1BWiFewSJytu1x1xnkEiVC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773977995, "uuid": "702f94f0-64a8-45c9-9cab-174d9dad850f", "value": 33821212, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773977995, "uuid": "97d1f511-b49b-4a63-9d0b-bff3c50eaa8a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f7602d0f-240e-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1773978212, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773978212, "uuid": "5c673692-8a7e-413c-ab23-ca944eb68b84", "comment": "Malware payload (Vidar)", "value": "d7eca6f7dae96e831db464ddb33d9567", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773978212, "uuid": "b17cbea8-0cfb-4e4b-8e9a-706b61dab5e3", "comment": "Malware payload (Vidar)", "value": "7d773d49b8577a2dd61fb89e1e773f018594e7cf5619e073cc6549ab2eb614e9", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773978212, "uuid": "9c236e14-403e-4ae7-96b3-c27abf23ab0f", "value": "T1D7856C07BCD154BAC06AA736C9B6A1A2BB34BC184B3227D32F51A7783F767D059797", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773978212, "uuid": "2326e34c-8b47-4cd4-97cc-54a49bb286b5", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773978212, "uuid": "e56ed518-4644-491b-b405-686ab283945f", "value": "24576:fDbZwEwBW/Fa1dcnOWgGWdiTdwOMqGiWPKqL/q:fDdwEwoa1dcnOH+5Mlq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773978212, "uuid": "71d5fb9e-8ad1-4089-a6bb-779a5ef711dc", "value": 1819272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773978212, "uuid": "21dd9430-51d3-486f-91f1-a8c653e31214", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1773982337, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773982337, "uuid": "8b263c6f-889a-4496-b981-8a6791a43127", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773982337, "uuid": "361d2915-8df9-47e7-af0e-693c4f8ee901", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773982337, "uuid": "81d76dcc-cf65-4e95-8201-a91f48ec8823", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773982337, "uuid": "b4814867-2896-4ecb-bfa1-0dabc2c28738", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773982337, "uuid": "f2e67daf-59fc-460d-b022-07e4561ad6b9", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89eaf28b-2424-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773987477, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773987477, "uuid": "3bb8fb7e-0ac6-4dd9-bd8f-18c0e0beaab4", "comment": "Malware payload", "value": "90e94077cabf20b5983b1288b5eae9a0", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773987477, "uuid": "ddd9f9ca-426c-4b6a-93cf-128f3f37f6f2", "comment": "Malware payload", "value": "c3b8370aa9b4c10139df97fa7fcc0c405d3c59fa6a4f21cf44edd72bd18de451", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773987477, "uuid": "c30775f4-4096-4624-b0e5-c7975c54f7ec", "value": "T10EF02E0FA047F03AD04019E4EB61FB55AC30B86B5273CE4C78407A10FFD743478622", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773987477, "uuid": "68bc79db-68ba-43eb-b51c-be66d5323e39", "value": "6:hLgjJ5Ja/+YcLN7+Y3JMF/+Ye0IdyJ44LIXLoO4eGLw+v+YdF/vNnQz2JMIykwFJ:lSjkOLZpqjW3bo/8pqF82Q/NiTZLQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773987477, "uuid": "a9e4e2e7-22ab-4f8b-9aa0-32289de9d15b", "value": 520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773987477, "uuid": "39279846-7401-4eff-b53f-e0b13376966a", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "421b69d2-2425-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773987786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773987786, "uuid": "9c114f74-99bd-4a6b-af4a-626da6996107", "comment": "Malware payload (Mirai)", "value": "a1aff10953e4d4afd1d1ad9c089298e2", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773987786, "uuid": "e0291ba9-2e36-4b5d-828e-aeaa8968304d", "comment": "Malware payload (Mirai)", "value": "1e3d33c6f08f8fe06eecadf7efa308fc78f978f5efbe19aa5927153bd350f22b", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773987786, "uuid": "89fc1efd-9ea5-4dd3-a30a-351ab1caf839", "value": "T18613F1BF5FC32482C8ABD1F1665EB986F8E1C05C7BAB43174CC019811CDD790E22CA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773987786, "uuid": "a8eae3b7-a497-4c27-95ad-cbd9833164d4", "value": "768:PJZkyxKkzCWKJx6Hr2OkMFF+m91vMyA/NoNG0OdZFZCe7h+cWYCT7Bcw:PJZkyxKeKx0r2IfY5/NyyFBN+hfBcw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773987786, "uuid": "268d11b7-fdfe-4c5d-aefb-e9e2c0132300", "value": 43152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773987786, "uuid": "f0f983b6-5b41-48ab-bdfe-8dcc18a7888e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4227dc32-2425-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773987786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773987786, "uuid": "42de9c08-cf78-41ef-b6ed-824de4dc1222", "comment": "Malware payload (Mirai)", "value": "91e42ffd877e35670b9a66d860e32444", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773987786, "uuid": "8062e3cc-79a8-431f-9d57-90551dc4b801", "comment": "Malware payload (Mirai)", "value": "8312e003c5507e87176ec819f9e08bba43bce3647ce19f21e842d744f5643e1f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773987786, "uuid": "ce99725a-cbb5-4d81-9497-4c09ab5bf244", "value": "T1B063027415C14940E807FF3A0F0DD6D6283C7A6EDA1A135204E62AE32BFC156FF588", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773987786, "uuid": "aa27c8c5-dad9-4fba-9ef2-367a47e301ef", "value": "1536:ZfQlGKrby9b1ow9pH2y2A42Twj8aJfpbGgBcEuob8LU0mSWGh4q1QYITza20:el/Zw52A42ToJx6gBcZ9pmXGh1QYISz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773987786, "uuid": "4e478088-f56c-4fcf-9719-84e1b8801b77", "value": 69592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773987786, "uuid": "794f2bae-d958-4245-9bb5-aaedb3d32b2d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16734bfe-c902-11ee-b9d1-82aee05be84a", "comment": "Malware payload", "timestamp": 1773987966, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773987966, "uuid": "d7fd1bf5-6c1d-4f47-9573-ef82e0540ae0", "comment": "Malware payload", "value": "3a9349af006440c7e0da677724551239", "object_relation": "md5", "Tag": [ { "name": "94.156.67.161", "colour": "#685f85", "exportable": true, "hide_tag": false }, { "name": "AV.lnk", "colour": "#072ce5", "exportable": true, "hide_tag": false }, { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "ink", "colour": "#552ab6", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.lnk", "colour": "#d92883", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.lnk", "colour": "#d1c6ca", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773987966, "uuid": "a0e8b908-0e5a-4ba9-be96-a706a5e3c1d0", "comment": "Malware payload", "value": "00401651af3194ede5157004b6dbe1edf836a94ca182221f2c034201fe55e4dc", "object_relation": "sha256", "Tag": [ { "name": "94.156.67.161", "colour": "#685f85", "exportable": true, "hide_tag": false }, { "name": "AV.lnk", "colour": "#072ce5", "exportable": true, "hide_tag": false }, { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "ink", "colour": "#552ab6", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.lnk", "colour": "#d92883", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.lnk", "colour": "#d1c6ca", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773987966, "uuid": "f8c964f1-b492-4fe2-9070-591e4e23effa", "value": "T13C41E2019FE70B3ED7264234AC76A251533B7555F8965F8D9040478404B3401916CF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773987966, "uuid": "17dfa997-793c-45e7-a6df-49f18133716e", "value": "24:8NqDOlC82vUKJU1+IMJ941y2bY6HoIab/C8fn1vURXTUmu3+IMmmt:8aVnvZJUdMs1yE3HVabhlUymu3fMm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773987966, "uuid": "12c7651d-e98d-411e-b941-b35098bc9332", "value": 1952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773987966, "uuid": "e02204bb-68bb-42a5-8de6-bb95c2696fff", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1056c856-2426-11f1-ba1a-82aee05be84a", "comment": "Malware payload (CountLoader)", "timestamp": 1773988132, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773988132, "uuid": "36c5faa4-63ba-4aff-b55f-222a9ecf1c04", "comment": "Malware payload (CountLoader)", "value": "dc4db6032f5415716a2595afab524c06", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773988132, "uuid": "c5081e57-02e6-483c-bfb2-dc9defbc1344", "comment": "Malware payload (CountLoader)", "value": "e58a25972a89bec6d9789dc504dfccd1a525476ba91acf57ba0a5c98bbe6bb05", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773988132, "uuid": "2447736b-47ca-4143-8708-e871cfd8082d", "value": "T1E2C31D0E06DFD0C60A632479DD2681C3DC9A472EB006C679361DAF26FF0A46C65ED7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773988132, "uuid": "9cdc6146-d4d0-44dc-8059-e9a98451e938", "value": "768:XnkMoPY6femBRkRm3kwDoy/omidv+rVXznPLb4CnQnPY7DimXvL1y5m3RQbtYivH:4NkBllUe66MHJJJK87Re3sw2cIg802OP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773988132, "uuid": "7ac94458-ce58-41e1-827c-5d2625a30765", "value": 121095, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773988132, "uuid": "27bbce04-ca8b-4de7-861b-93c83c28e303", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f3ff04c0-2426-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773988514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773988514, "uuid": "8bae9191-15dd-47b5-b6b0-4f8bf462c60d", "comment": "Malware payload", "value": "1b2d333a7aeaf579b30c5132e2d344f6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773988514, "uuid": "5c0b7acf-22b0-4f99-b5eb-cede93ccb871", "comment": "Malware payload", "value": "9ddb3ce1d5a6b94de8e55c093b20ff289872814d4d2f849407e08e87b6159650", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773988514, "uuid": "f993da22-534a-474f-9db8-2fbd0bcd7725", "value": "T1418533E45A065FE5938BB99ED67610C412F1D04327BDB0089FA74744F2BAAE7B01E4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773988514, "uuid": "0827b077-f60f-4765-8887-794d7aa59431", "value": "24576:Vdw7WEgzzothv2GBHvpK+UdYviu0hhav+lw30Q4KiQgDbISGT1W4ITOjTyuFKpmB:V6GKZzUdGkheN3hA81WlOHyWRU1vu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773988514, "uuid": "d48b2ba7-8508-4189-8f4d-99b78437680f", "value": 1751696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773988514, "uuid": "b19af823-536e-4b5f-b4c6-d9e6ee58c395", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4241989a-2427-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773988645, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773988645, "uuid": "c548562a-8f31-407c-8f22-9af40b9f6578", "comment": "Malware payload", "value": "3c5e6a1defd68a8915602001ac0a33cf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773988645, "uuid": "e0c72649-f951-4c1b-9c8d-9d823e9229b5", "comment": "Malware payload", "value": "8a18e3f3a41b64fa23d231fdc33a941b7b5f5252374c6180a3c63b4f6a99d68d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773988645, "uuid": "5dc8a83c-84ef-4ea1-9824-74207e95df98", "value": "T1387533CDFC6E86219D2D6634861D2781B80D74DC887B2336B1B1E48B2DB5F24E6D25", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773988645, "uuid": "c17341b2-4618-47b2-8bbf-08905de63ad4", "value": "24576:xy/siaNzk4iNJeA1mCiQMiFv+nAN2+2rNItcdMTXXHBXy3zHOeFad8Qv6oY5lZrB:xYZ80iWFTN2AwaHHBCDu9d8YLYF3x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773988645, "uuid": "7b155022-316f-419c-b6e9-befb91fc68a6", "value": 1654332, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773988645, "uuid": "6fa11b14-3ff1-4d71-b141-e8f3ab43396a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "047c8394-2428-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773988971, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773988971, "uuid": "350aaa50-bc64-4fe1-b70c-0868501cb93c", "comment": "Malware payload", "value": "ae9cebde92665fd58cddd4121843110d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773988971, "uuid": "2c988566-7831-49c6-9bda-7ff2f5f879c8", "comment": "Malware payload", "value": "19d22973789738ba9081ebaee823230512489ecfc680d51144cb3d9bcd4cc833", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773988971, "uuid": "f9c73e00-b839-4fd0-8d3b-0fa043df4bb8", "value": "T1DC85330A5B22B92A95F514513E108FE31239F2EBD1A0515C1DCA09DA46702F9FBF8F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773988971, "uuid": "f747cb72-ac9e-4540-85b4-31e0b4c9173d", "value": "49152:vGNuaO0rOAMc8aE596rof2clqPy3jgXn+KkTrRGC:v+uKOAMp7POO8WrR7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773988971, "uuid": "9df99de7-94a6-4ea4-a35c-9373a3ff4da3", "value": 1717472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773988971, "uuid": "e5ff3444-2a24-4da0-b4a3-ae337048fc48", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b46535c-2428-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773989063, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773989063, "uuid": "f4627508-4a7a-4eca-85f3-b1b449162cf0", "comment": "Malware payload", "value": "a79244da9544d5a040d7d030573d3c47", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773989063, "uuid": "70a5938f-55f6-4b88-b2b2-1448b1431af6", "comment": "Malware payload", "value": "c69e69dc3ae7633b9476072001c4eaaeb8dd8c85700b97484dfdda3d86fe6fec", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773989063, "uuid": "d22f3680-70da-4a3e-add1-565058ff43fc", "value": "T18B75330974911E420EA64064F37D4FDCC400F6EC663B316A03AE1E9EE77B352AE79B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773989063, "uuid": "990bcbd8-c6c9-4752-9865-3ab89757dcbf", "value": "24576:KxPLF/0kL+oHC6hGw/bLdJfyipF+CGBZwWMJobF+Nl9qAdgCnvBcCIfRsNio9zkb:OgbwDLDqipJJWMoB+hZddy5oBk/j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773989063, "uuid": "b0ce1526-edb2-4c50-a5cf-13d436606212", "value": 1702544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773989063, "uuid": "1258e7c6-c827-4f08-bd71-f304cea253bf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d9b5354c-2428-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773989329, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773989329, "uuid": "b0d498dc-d6bb-4d80-9c50-65f12d2059ae", "comment": "Malware payload", "value": "9690c731f827a245e9d7773bca8a49ae", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773989329, "uuid": "492df7d9-1243-4299-9e4d-8479346988cf", "comment": "Malware payload", "value": "4ddefa7635a60e03ff39678587427cc09f810a65b1c33e1d065174fbf98042ef", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773989329, "uuid": "7174aa4c-724a-43a3-9cfb-a41d131966bf", "value": "T14D8533C926D1D8710C105B05B34EF7EC8E89A02FF1B0B56954CB53AD913F63BA6A99", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773989329, "uuid": "09c92f07-3f67-4dd6-88db-cb6deb1d361c", "value": "49152:ITF6X8DXTpS5GJGPjqJ7G6cVbzaUm0BNmbJS9KXrH0jEO:ITFi8jkoJIeWbWUvy+KXrUjEO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773989329, "uuid": "432f025e-d521-498c-8300-7b7b6ec002b9", "value": 1743360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773989329, "uuid": "f6387951-c59a-46ad-9e5b-a405a5647e5a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f7f74ed-2429-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773989446, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773989446, "uuid": "fedba7af-c84d-4a65-8735-384e1abae225", "comment": "Malware payload", "value": "2ca4fce71ab235536d6047a1eff8a6ab", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773989446, "uuid": "19b25dd7-94ec-49dd-b99b-c62144f56820", "comment": "Malware payload", "value": "4a665feddc2f1e4ed7665f49c2dfae1d05b11d6fe921e2e4f7ae1798fee0c89a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773989446, "uuid": "f5260138-0073-4aaf-8fbe-e0ea4b8756d4", "value": "T1548533CDB9A1BF5E5CAA4A6B19111B244F35C4A0C8B1213BBE210EDE997FB3270547", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773989446, "uuid": "ad5b9d6e-4391-442f-9d29-b05b3836892d", "value": "49152:pMs8ZepcxFYANCFZ93KCozhrAc/rJA8zOc:pxp6l49dozhrrJHzOc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773989446, "uuid": "b5d0f499-038a-48e3-8bed-64613492da9c", "value": 1707176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773989446, "uuid": "f838558f-3867-4fb8-a325-7d82ebdae4db", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a790c1ad-242a-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773990104, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773990104, "uuid": "db289029-a3fc-41f1-ba47-a477e86b7726", "comment": "Malware payload", "value": "8ffc747cbec50d099efc3e76a7944127", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773990104, "uuid": "481ddae2-b889-4e61-9d11-cbc627946a3f", "comment": "Malware payload", "value": "ad70845892f5115877371e98bfb51492add9182a6cf4cf5f8001138af5b509da", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773990104, "uuid": "be56049e-8da2-4cb5-9c44-28b2601a719e", "value": "T1AD7533F74DC49D1246A6923B0B145B1F32E28F63ADAA2D09E264BD91D0AD7CC52F09", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773990104, "uuid": "515e71cd-5a81-4d76-b38c-ef29c9e7afb5", "value": "24576:PR2No0P3Mk6w15VUpaSPXsUzETC1VsUFIpoiPsmDxcPX4b8y+GQBVw4aUEfUzXI:PP0Mk6M3GaE9hIuqvxcfu4ofUz4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773990104, "uuid": "6e937e35-9dcc-4328-a961-d8b001fa5817", "value": 1700360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773990104, "uuid": "d5e85290-3ed5-4827-82b6-dea636a29f75", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "61e9529c-242c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773990846, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773990846, "uuid": "d9e0e8af-8edc-4b5e-abb2-5b2019cf1af5", "comment": "Malware payload", "value": "e9909a7e16b2a87f182687d4449c0d91", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773990846, "uuid": "4962069b-cc6b-451f-bb22-f2bcda97196f", "comment": "Malware payload", "value": "471ad160762a5c3f541d4e76ee086ee351da2e280daf11d6d009f89366395d83", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773990846, "uuid": "061a0085-486c-45ee-b0f5-7300de257f25", "value": "T19B7533F62480FE2B47AB635986AD2444A9E053BD7E83DE1DC2D35FE041A3456E3264", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773990846, "uuid": "8dd421ec-b6c4-46aa-9320-4851292296b3", "value": "24576:PBAkZU/g2bB6GXkXYF6EUSnIjiB29NSN6UIruCVFQcyYBOarpvfXZc5j+RAU2Gae:P21QGeJEUMTXjKyGEo3X25jm2FIyHz2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773990846, "uuid": "09668c06-1c57-4049-a9ed-f78717ac4c35", "value": 1695124, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773990846, "uuid": "1eb2a1ad-4745-4d88-abcd-fef739c939e3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e7c3b99-242d-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773991323, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773991323, "uuid": "a8538e45-0136-49c3-9eb8-1bf2426a3fe7", "comment": "Malware payload", "value": "ac31366e73452db51ad3ae296ac12add", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773991323, "uuid": "d02b8571-c074-438e-84e9-8dfe4263dbb2", "comment": "Malware payload", "value": "dcf5df996a112e892bae324b5e3c0664ad4d4f9f473494bcaad1cac3adedb512", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773991323, "uuid": "c2394462-fccb-44f2-be2b-5c1157145f62", "value": "T1119533A6BD460DB0F44D188F5D7DC94611F32592DAA0B3641EA3CFEAB0B8ADB83741", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773991323, "uuid": "f6ab084a-05af-4409-9c59-19b0e559f3e5", "value": "49152:GmroGOaGwi/EpVep0RDT0MF7uuwC0XGJiYr7r2YN:GmDhGwiA0MFVwJwiYrf2YN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773991323, "uuid": "09adc8ff-99fe-4a87-90f9-58eaf419a958", "value": 1987020, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773991323, "uuid": "4aec3451-6e65-4bef-b36a-d97e7c41094c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff7d0b92-242d-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773991540, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773991540, "uuid": "8c491859-f121-48d2-99f8-1b4e19de58f6", "comment": "Malware payload", "value": "7f60703d03a4738a5e738f73217e6b5f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773991540, "uuid": "5687c606-cfc3-414c-a37f-e8039a098829", "comment": "Malware payload", "value": "87bcfcd7e978dc58619b9ec918d47cc6ef8af704baa89fcd9eb0d3e49db86305", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773991540, "uuid": "8e81612f-1aa3-4381-93a4-1cf4dd13628c", "value": "T1958533319772E397A6F87B512F740D62C04892AF1E5CB4C9D25F9C6DCAB8AB66300F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773991540, "uuid": "580634dc-6af7-4c47-a82d-461b6638b35a", "value": "49152:HhGMZUz6NbEAKRJ3/A1fGynkrqskD54v3a:ZUWVDKRJ3I1fYBkDCvq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773991540, "uuid": "78ffb8a3-71a2-442f-b56d-1b82d275374c", "value": 1725180, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773991540, "uuid": "711a9847-20b8-40b1-94ce-7c175884d8ab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2715dfef-242e-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773991606, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773991606, "uuid": "b0a4a6da-f61b-421f-b9bf-a7b84f04559c", "comment": "Malware payload", "value": "ea5a1a545902881a43a79f6b66b8ea4e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773991606, "uuid": "0a5b75e7-9ca0-4706-a1ed-5ecc5df6377e", "comment": "Malware payload", "value": "4da6fee6f0e483d6543027b3e879062a42193be7a014b01af4d4e943af00de4f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773991606, "uuid": "28c23e36-ecab-46a5-a369-6abddbf4fc0c", "value": "T11C931A31786F052A166F836E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773991606, "uuid": "c0629297-f8dd-4ecd-98ec-cfc4143d1b71", "value": "1536:9myp1tF/uwMmAIa14oXusIcepeV7tb73WjxCrCitkb5fv2v05x9krfibEsCZK36x:9fQI7GGitkbFv2v05x9kr6EsCZQ6Yy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773991606, "uuid": "b0f684d3-576c-477c-86de-65e6b2553634", "value": 94527, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773991606, "uuid": "3a22c199-2747-44d3-b115-61fa8d5428fb", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6aa336d7-242e-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773991720, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773991720, "uuid": "fad19221-425f-4baf-ba8f-e38c4a3d4daa", "comment": "Malware payload", "value": "019d52257a440a7b6bd06beb2e04fa4e", "object_relation": "md5", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773991720, "uuid": "58d8d1de-f709-40b8-b265-1ea9d4c2fc29", "comment": "Malware payload", "value": "2704b1e8099cb470b57a73c710a14721f64e5d20da794a6924168d6c24a5495b", "object_relation": "sha256", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773991720, "uuid": "a4ccbe80-48f5-4fca-b5e0-712e16fb2b92", "value": "T1DEB6335176528876F0F7603442B9EBFD1C7FA091C36A94FEB0AE53F12C63AD0A1761", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773991720, "uuid": "38eaaa6d-3f2c-43ac-9b8e-6b2b3cd0cce2", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773991720, "uuid": "208a029b-5a27-42b4-96e1-1b2174060abe", "value": "196608:f+qlnVnApL5+ws4GBiiegPjPSzNS0XBNyygg+NcsCOnUK2lmp+iuKcw3B:7JApVC4T+PkNS0XBeLNcsCOnUKwmZaQB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773991720, "uuid": "086537ad-71a9-4c19-b6ca-e4ef493dfca9", "value": 11398144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773991720, "uuid": "b1ce1275-d745-47a5-834a-afac23a9dfc8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "921ff587-242f-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773992215, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773992215, "uuid": "bdad5d05-39fb-45c1-8a5f-8b584c91cb40", "comment": "Malware payload", "value": "2bf9ff8b9bc1a03b6597805a26249e80", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773992215, "uuid": "58d1eabc-4193-4ef7-945f-160088efd61a", "comment": "Malware payload", "value": "d58724360b47456e9f5162b1ff011a2ae8b797be15a37ed80d01d96fb7faac5f", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773992215, "uuid": "0e555b74-7443-429f-9d60-f98e0e0daed5", "value": "T1298533B559A1930BEDBBB92E8CDC008F51E522B3780AFD1E17A71AD47C1A18707FE0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773992215, "uuid": "0617ca10-9bcf-48c3-b8ee-0d0cfe4506a5", "value": "49152:OdNxWqMBh8lErt5z5Mdtl2BJF9d8XbGAYAJS:kNIqMBuc5zkkzrAbJS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773992215, "uuid": "6ce9d0b2-415b-4b55-9cd4-467a89c02e79", "value": 1708880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773992215, "uuid": "87e7c384-bd41-4407-b00c-39a7f896a8dd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44dfccca-2431-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773992945, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773992945, "uuid": "dcb81cc9-eab0-4314-889d-b22417276e3f", "comment": "Malware payload", "value": "ab33b8ea2c220c81033dda7fd3d80ea9", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773992945, "uuid": "5a3fed70-6646-409d-9ef4-7042488a3090", "comment": "Malware payload", "value": "a61c74d12b3e33d976eac340cb3039a7ef455b7bc362f4b956083e45de566a2c", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773992945, "uuid": "556672b2-fb55-476d-a76c-fcf33a34108c", "value": "T11A8533F3350098961480D22CFF6DAA99CDDE882749DC65B05AC3CDD198B27E7F9A0D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773992945, "uuid": "ac91d310-e7c3-40cc-8050-310f13f78273", "value": "24576:4rOW0Jm2KTkxenjcEUe+ppATqpVVV4iHW+K4fpf0N4kriEOVx1rLacC0htOD3Z:WAJm2zxeVUe+pyTqLM4xC/DQs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773992945, "uuid": "f53708ad-d80d-49eb-9d4a-557dd1ed44cb", "value": 1718332, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773992945, "uuid": "0904c74b-6192-41e3-8519-307f59567f85", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aafe6493-2432-11f1-ba1a-82aee05be84a", "comment": "Malware payload (MassLogger)", "timestamp": 1773993546, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773993546, "uuid": "f43ab4af-b8ef-4915-a5a9-7115f764f4de", "comment": "Malware payload (MassLogger)", "value": "e736c7a139cde5dc69ca4d8e2c9df78a", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773993546, "uuid": "47cb4d0b-37a2-4919-bd44-d306118947df", "comment": "Malware payload (MassLogger)", "value": "c47d92db7ed3cc5fdbb3296f3f4ab328cd8b66ac079f5bf658d4f2fa5f8a6af7", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773993546, "uuid": "71137947-a253-4c50-bbfc-a0c810c5779b", "value": "T15E1387D83EC5F079861160B36E27E026EA5E8C8477488451FBE768DCB92C334D57AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773993546, "uuid": "7512d5dd-c7b9-46ab-af74-0bfb0ccc108c", "value": "768:6n9PjN7vsNeeKb0S47+GmhuqQxdIAzJFe/JEsLM:6Zxv34KPhuVxdflFAEcM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773993546, "uuid": "7a7e5d39-9e96-4378-8bbf-534f8e65f513", "value": 41442, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773993546, "uuid": "10dddda8-061e-4158-87ce-e88de61005e3", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab8ab3a2-2432-11f1-ba1a-82aee05be84a", "comment": "Malware payload (ACRStealer)", "timestamp": 1773994931, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773994931, "uuid": "e1e315c8-2bd1-46a3-93f9-7e4adce4c0b5", "comment": "Malware payload (ACRStealer)", "value": "20196f258acee0e91be1f4ddcc9dbdf3", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773994931, "uuid": "68d2b9ea-b33a-48a7-a813-4955634135bc", "comment": "Malware payload (ACRStealer)", "value": "b6f56be41d055aabf359c8368e90a5f9b086588c00734d3074134dceec04aeb7", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773994931, "uuid": "c5e86ff0-ef65-462c-b98e-d54bbe5e6b67", "value": "T10B650B46809258E7F3B206BFE54BB6073E37488845A9CD2F41EB46DD2097A5E63DF1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773994931, "uuid": "6242b614-655c-4c12-8114-4a00b4f887ee", "value": "1795dcbc9b46c10bca1f21f3d76a0160", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773994931, "uuid": "ed3aba70-b257-421a-8dca-b1aacf48e3a4", "value": "12288:TiC6UPeApnQMYfio0XjL9mkS7IKP/o08Lj7q7ps7PvyX8Iyg:Thhp3XAkS7/8Bvu8Iy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773994931, "uuid": "ab6c371c-9ca8-4eec-b399-3ddcb7590a9e", "value": 1461248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773994931, "uuid": "a77de3ee-1dc7-4719-8ff9-9baab8c833dd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6232b9b2-2438-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773996000, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773996000, "uuid": "ed6bde7e-ed99-42e9-9e14-e9fca6c4a417", "comment": "Malware payload", "value": "dfd89698f6c8be5733fad956645c109c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773996000, "uuid": "c5c4a5ad-4bb9-42d3-85dd-279f2efaf534", "comment": "Malware payload", "value": "6f2ea16cdfb7018ea79b5469f0bf54653237dcbde9aac443df6470cb58aec316", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773996000, "uuid": "f086520a-5162-4e74-a6e9-8a251024dbb0", "value": "T1297394B13D8B2C2A210F029FA057321CA4D6CEE0E513A5E8F1FF912867F5DD176976", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773996000, "uuid": "6048b097-9762-432b-ac5e-da02555b6d8b", "value": "1536:SdNKuu59f5spVEc9lGzvEQYM1tAZa/dP+3mT6j:M09f5sptkzvEQYM1tAZa/dPCU6j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773996000, "uuid": "54d38cd1-db88-4ce7-8c94-d702c54e4d09", "value": 77345, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773996000, "uuid": "51bce44f-dad7-414f-8516-8bd345c3a61f", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1becb3ed-243a-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773996742, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773996742, "uuid": "be28cbe4-6fef-4ef0-ab6e-faf3de052fa4", "comment": "Malware payload", "value": "ce432ee72e5c50028f4a324e1244057e", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773996742, "uuid": "5d0b3b89-933e-4564-889a-b512b2f24fc3", "comment": "Malware payload", "value": "e9e5e477023f804da9104ad0cd5c92f4c2d4971b6917a6fd65144634d1889976", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773996742, "uuid": "91734e20-d8be-4261-951a-decd152e1c0b", "value": "T1ECB3018D59DA84758F4F30B8492E4E0BC6BD9627035CD8A07BDE9E487F12AB8B07D5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773996742, "uuid": "c87023c6-fda5-4c0e-9fc9-9d3d814ead28", "value": "1536:+J3rpaarZKsjWLmWotDdAfcuR1SHNyza0hWmptW1nssXIiy:Ix6R1SHvmpF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773996742, "uuid": "4657d249-f305-492e-8ad5-e0b70b40484b", "value": 118054, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773996742, "uuid": "b8a4b638-6133-41a6-a54a-62f2172fed4c", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "168b15e8-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1773997312, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773997312, "uuid": "7e70ca8f-1cf8-43fa-bad6-7bb5b2ef0144", "comment": "Malware payload", "value": "c73634570e4a70d7040fabcad0ea2773", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773997312, "uuid": "c17b65df-76d8-4e53-a517-ab3ed32de82a", "comment": "Malware payload", "value": "a7576c44f6f25dc87fcc803b0e463e385c13a048169536a7c7a5de804b0891ef", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773997312, "uuid": "cb9936ce-b148-4fbf-ad95-9a5901d42a9a", "value": "FA43124623662AB6857149F0A3FCFF8EE24A3E58CFF55C197C107A28A93136D2CC481C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773997312, "uuid": "e4523c2f-23a8-4c99-b760-c1bfd44f54d2", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyqe:yYI0ARqw1qAEv7UIFM8oJorFquyje", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773997312, "uuid": "9b04641d-85ef-416f-9ac4-f074bd7c4b0a", "value": 57920, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ca67db7-243c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773997709, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773997709, "uuid": "c9bedc82-b891-4e2c-b6dd-c1d85aef462a", "comment": "Malware payload", "value": "fcfc45a646b2607078e9893ad01431fc", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773997709, "uuid": "1fa15fc7-d29a-4f14-a9bd-7a5ecac6c82e", "comment": "Malware payload", "value": "9ba1df9be5de30c0cbad22c51d7fc57e2f043429d40620c229916674027e77a1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773997709, "uuid": "f8ec9e9b-52a7-4678-a5e7-dbc3e4f63c9c", "value": "T16734CE4EA945EBC3432D191A9333592B6DBC899ECD4B0D42D2467FB4C9F484ECEAB4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773997709, "uuid": "48154ade-4cd5-4e41-9e30-7939ac788d83", "value": "3072:VaBYRNE9fOc7r2nThutGjVTQbGH04u+AahvO4gY1swxE4ZM3+0Vf3bs3OB3ZgBRz:3EVOcoMGjz04fByGpr0nk81rVdS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773997709, "uuid": "8e41d712-da94-4158-bace-d0911e824ff2", "value": 239687, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773997709, "uuid": "3c557630-2b71-4aef-8914-9f71a34890b1", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ceafb45-243c-11f1-ba1a-82aee05be84a", "comment": "Malware payload (njrat)", "timestamp": 1773997790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773997790, "uuid": "22d38357-1400-4b83-b781-432702753cc7", "comment": "Malware payload (njrat)", "value": "367eec46a7558348de3f6dbd779f9c16", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773997790, "uuid": "793da869-3d38-43da-bd25-d0468a12da2f", "comment": "Malware payload (njrat)", "value": "47fe7c0696700c15908c042d9e1b94dc892855d04e3682a9abb09c7312140d0f", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773997790, "uuid": "00cd4411-427f-4ff5-aa51-19dd43f90d13", "value": "T191F4125FB5A874E1E076927BC4210511E37BB872C7A1ABDF12A853445E233E19E3EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773997790, "uuid": "be1cde25-7d8b-4c0f-9d56-5d8262850ce9", "value": "469e59bd592f93ae01ff61cd0d813e4e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773997790, "uuid": "0e90baf7-1005-4b89-af15-8dc920eac1b5", "value": "24576:28VUCIiqPqYzhCOqNctS5v+AuE6dNfBi5:2BCIiqiYzbqNf+FEENk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773997790, "uuid": "3d5c8f2a-7c5f-434c-995c-e9a55dabf7ea", "value": 794110, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773997790, "uuid": "18e12c73-e77b-49ed-ba9e-3b5488a924ab", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78659ae2-2442-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774000333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774000333, "uuid": "031bcdd4-76b6-4c43-b290-584ae6da1560", "comment": "Malware payload (Mirai)", "value": "110f88f56468b8787a41b19fa58d8969", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774000333, "uuid": "b1be5698-333f-40ef-8727-e41e28d612d6", "comment": "Malware payload (Mirai)", "value": "6a86cc8a48f3466f55bb73533ad3c44f555575505a7fb9b4142dd6df3a336404", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774000333, "uuid": "26de5582-f513-4996-8509-a81b4dfcd27e", "value": "T11E733A89F343D1F1D94706B0109BFB3E5B349AA11210ED2FEBA4FA76AC725526027E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774000333, "uuid": "96dfab77-1e97-4df4-b92e-3683ada99a47", "value": "1536:IF/+ykrzYfExxD1XlnJq87Pu4rcauUc31gGHgRRuQ2OrqXqQr:IFWBAmlJLPYKGerqXqo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774000333, "uuid": "9f11b962-1695-480f-8d0c-4cd63098a76b", "value": 74856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774000333, "uuid": "f52a5157-1df8-4e78-9801-55853fb8b09e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f2d181e-2442-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774000344, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774000344, "uuid": "c8286e5c-4db6-4f94-b7f3-76e38a6454de", "comment": "Malware payload", "value": "1eed03f16019d7f1b4adc16c1bc4276a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774000344, "uuid": "7f63231d-1281-4d23-aa66-c043a16ce77a", "comment": "Malware payload", "value": "7257e6c62b97a4903ddb86f0bd4acbda04c9dfbb7e00c7f8ccc165ee6ac6cbbe", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774000344, "uuid": "7a2f74be-d950-412b-a719-7736bf66d0c9", "value": "T111A37C34774F7C86E3CBD378DF1A4E61302B39E6C666D1657D12232DC5C2EA68AE09", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774000344, "uuid": "470859d8-125d-41ee-9b1f-3d3d517f69f1", "value": "1536:xbL7HuR8BlCGEnNi98Qjmw6NzQPfGIngsMoLv2F5E4PiBT5jHyH:xbL7HueljEnqjmw6nGSnfST5j8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774000344, "uuid": "dd31bce8-a15d-4e9c-93ef-ca51dbd71c4e", "value": 106943, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774000344, "uuid": "d61ee233-9c33-4a9f-b8bd-222d5acd9c20", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f51fdc1-2442-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774000344, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774000344, "uuid": "09af9efb-cdee-4099-af94-87ba6659692b", "comment": "Malware payload", "value": "8460c097aa1f391ce96cb9381e2b1299", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774000344, "uuid": "74036274-b104-4de8-b246-21a7e6d897ff", "comment": "Malware payload", "value": "fd30ffe9c1179292644f5d8bf8b5fbc95651f97569dcf55cd24a1132caf00571", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774000344, "uuid": "29ef9fcf-1fea-4814-a225-665e99ad8821", "value": "T1A9A3F845BC919B1746D562BBFB5E428D3B1A1768E2EF3203CD256F20378A85B0E7B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774000344, "uuid": "d84eb7e3-a199-40f1-b746-6af2141dc849", "value": "1536:vh3XRomWbR7hcOydxKAMvus4VFIzNTsAhaJsm8VephwMdnlsOwywJsDvitcCoTI0:Z3+bphFWxKDh4EzNQAhaO8ft28t5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774000344, "uuid": "0a5fb91b-840b-414d-b17b-05431588f774", "value": 106943, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774000344, "uuid": "de031da1-d157-4678-afc6-a0c2e0823af4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f531e4e-2442-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774000344, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774000344, "uuid": "59f30305-066b-4319-ba84-2d04f9945b4b", "comment": "Malware payload", "value": "534c93463737af3e9b1c9608c0d4d7b7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774000344, "uuid": "3551b682-6f49-4536-b47b-c8a81e830091", "comment": "Malware payload", "value": "8b9bab8ee7f102c24f82999027b4e0ae2e49c4bb3ee7b7cb620668e55c316feb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774000344, "uuid": "be3d46b1-4b7a-40e3-a216-9875ba1f92cb", "value": "T128A395096FA10FBBDCABDD3702A9070139CC651B22A43B7A7674D528F54F61B49E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774000344, "uuid": "0105dfe9-9b1f-40f8-8362-ba39d97c4d9e", "value": "1536:hR3ynCmOtuIjSdAR+B+1L6JePXxc20gw+nz+K5NbPHSxGZli/j:6CmOtuIjgBqLrVNToG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774000344, "uuid": "2ae8cc52-0c07-4966-9cb1-290ee88d9f05", "value": 106943, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774000344, "uuid": "df14957d-2fd3-43df-93c4-56e6faa4209f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f615267-2442-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774000344, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774000344, "uuid": "40e519fa-bb4e-4217-aa8a-b3f52d3ffc3a", "comment": "Malware payload (Mirai)", "value": "785afd1b9e40b0a5488c217452aa8f3a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774000344, "uuid": "26211f3d-f857-4e00-988b-f8f24af5ff12", "comment": "Malware payload (Mirai)", "value": "9ff2f4873bbe69d63f49571a747c6d928ebd872c317b01486d94a845f9c0d0af", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774000344, "uuid": "b427f8dc-b5ab-4554-914f-69a79ba4b27a", "value": "T1D5731988F70791F1DD0B0D30519BFB3F5A31AA908120EE6ADB94BE51EE33912551BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774000344, "uuid": "24817705-698a-4703-b4af-4f0b9140fcbf", "value": "1536:6Z//8rySd8DNw3fv40Fh1cUq31gGYyXBRQ2tUjr:vxENwPNmKG7Qn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774000344, "uuid": "7345c331-f9e6-41c6-9cc7-235d2f788c44", "value": 78952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774000344, "uuid": "bab54070-459a-4336-9893-55856d50c6cd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7fbfe4ea-2442-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774000345, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774000345, "uuid": "6d391acd-2f6b-41f1-920b-64ad03a8624b", "comment": "Malware payload (Mirai)", "value": "3900c585514c363314b83f33c6e0106d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774000345, "uuid": "605f1c69-c625-490a-a52e-b1fa3b557f43", "comment": "Malware payload (Mirai)", "value": "27777a449104d410d1d076bfc449945a0b9369206efc2b12bb9e830d7689d470", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774000345, "uuid": "a5ebb170-344b-480d-83be-1f689239174d", "value": "T1D2A36CC5F643D0F1E84304B16077BB365B32E1B9202ADD43E7B9AA32EC91951D61BB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774000345, "uuid": "2ff24ef8-36ed-47f3-9c37-27eb7d68d571", "value": "1536:85E/ZVt5rcLcCaRg1lo6Qwo2xlh2uvNlobSpzSjQ2tSP:85EBVt5ogCaG1lYGx7v021P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774000345, "uuid": "7d866b32-c024-4a65-a545-602148adf6ee", "value": 102984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774000345, "uuid": "d0a4b97c-3a06-48b1-a8f0-09261b933256", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "808230ea-2442-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1774000346, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774000346, "uuid": "7000639c-de99-4ae4-8a09-a37de6d12dd6", "comment": "Malware payload (Gafgyt)", "value": "f71d6c3f18c8642852e59c2faab902d3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774000346, "uuid": "4a821dbd-45f5-4b81-9a16-0b7a2aaa64b6", "comment": "Malware payload (Gafgyt)", "value": "e3f2d119f6739f2a32f04d3e4b2f6a63f0e6394e227901b169a3dadb316a6bae", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774000346, "uuid": "23962108-1e1d-4362-8c6e-b9680fa188de", "value": "T1C4B31A45F8914B27C6C122BBFB5E428D3B2A17A8D3EF7203D9215F25378A85B0D375", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774000346, "uuid": "2f7a745c-d95b-4da0-8f42-2dbe124d0534", "value": "3072:7dfWtsuHLbKW4sBRS4M0LOo0wcBcrNbA4:7d+tfrx7DS4MgOoFcoNbA4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774000346, "uuid": "144a1807-1e07-4719-a4dc-2613e3333a2c", "value": 109839, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774000346, "uuid": "f2b95ff3-daea-49cd-b991-bcfaddabd2c5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c515f1a-16e5-11f1-87c8-82aee05be84a", "comment": "Malware payload (Ligolo)", "timestamp": 1774003447, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774003447, "uuid": "7bc8ddee-0b76-4dae-b374-6eb08dde60c4", "comment": "Malware payload (Ligolo)", "value": "ff0a0d47229a92d95139f1d6bd8ac691", "object_relation": "md5", "Tag": [ { "name": "141-11-107-134", "colour": "#56A84C", "exportable": true, "hide_tag": false }, { "name": "Ligolo", "colour": "#BDEABC", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774003447, "uuid": "2e7e55ff-c60b-4e96-b698-66578dd5d30f", "comment": "Malware payload (Ligolo)", "value": "4b41f36f82db6da8767a0a1c2997c8242d80b2d10a8f1d28c252a9306ec152b5", "object_relation": "sha256", "Tag": [ { "name": "141-11-107-134", "colour": "#56A84C", "exportable": true, "hide_tag": false }, { "name": "Ligolo", "colour": "#BDEABC", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774003447, "uuid": "dbbd1859-efd2-40d7-b897-c8fd09dac991", "value": "T15C765B03ECA145E9C1AAD6358532D253BA717C495B3163EB2B50F7782FB3BD0AA797", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774003447, "uuid": "9671ca16-258e-4606-a8de-8a0f8c93baec", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774003447, "uuid": "2d5729a0-52f6-4fdf-b594-e81e50da7931", "value": "49152:EfbIHj1mf8NrKYHRkZz7F2LAOuSPD+6PGKHTyF+Zojp9ZetnZSCapXaVC252uwKr:EsbGcLAOfTKZ+ZSCaCBVGjE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774003447, "uuid": "a8e72e04-e10f-418d-a1db-32beedc5b993", "value": 7302656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774003447, "uuid": "40ba7c12-f2ec-405b-8404-0655146a3b5f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "85cfc249-2452-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774007227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007227, "uuid": "3467b5e6-618c-45f6-8d66-7ad6118dde76", "comment": "Malware payload", "value": "9312a3ad142b58c9ff872553bdd38fdd", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007227, "uuid": "f8e1bbec-bbfa-423f-973e-edc1f1f7811f", "comment": "Malware payload", "value": "8ef23c98d9243e983f12356151e7ecd63eaaee83adc5e0ea9eba8f2f939e4091", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774007227, "uuid": "01fa0a99-dda7-449d-a03a-a1c8638d3939", "value": "T1CFB4237B0A7F70D00C6A43BA8B468611A43D9D621628AFBD47DCE6CC8D0E51EBF14E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774007227, "uuid": "1a9790c5-2302-4ec0-92ea-75edbcfcbfa7", "value": "12288:V4lhhLoVDI2FLmMJKxeqO3g/ALyYG0ZaDajTCXMO8xzDOeDBD:CxopIAmMJBA/f0Za6TCXKBxFD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774007227, "uuid": "1c7873c5-0b4a-4955-b649-73fde296597e", "value": 541353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774007227, "uuid": "c2190154-79a9-4492-be4c-3a0f55aec324", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "85d04274-2452-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774007227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007227, "uuid": "5626217a-c85b-48b3-94b6-22a9f29dfa90", "comment": "Malware payload", "value": "af1965289236af96f76edf64d08e40df", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007227, "uuid": "f3306434-3b6c-42b0-9cd8-9299edffcb30", "comment": "Malware payload", "value": "c17fa162b1fed0a9b6d2aa6976a8cf8f414c4f8c79981f2df8d0416f593141a8", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774007227, "uuid": "897f70ac-7067-453b-a8c8-abda35cbfc2d", "value": "T18CB4237B0A7F70D00C6A43BA8B468611A43D9D621628AFBD47DCE6CC8D0E51EBF14E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774007227, "uuid": "c1e1dec3-50ab-494b-8712-6332c7d537a5", "value": "12288:J4lhhLoVDI2FLmMJKJeqO3g/ALyYG0ZaDajTCXMO8xzDOeDBb:WxopIAmMJ9A/f0Za6TCXKBxFb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774007227, "uuid": "06b53252-ecc6-4cd9-8675-3efb6a9b3859", "value": 541353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774007227, "uuid": "cdfdebc6-5401-4978-bba3-864ae184a7e4", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "85ec2d4b-2452-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774007227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007227, "uuid": "59d19a18-9f6a-4b99-ad45-ea1b757bdb91", "comment": "Malware payload", "value": "cf064b57e23a3393c2659081753a9228", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007227, "uuid": "e14cb6f9-0381-42fa-b7c3-d39b9e20aa15", "comment": "Malware payload", "value": "ad5dca63bc0689901b82a0acc831d20460c6d8aa54bfe4104540d5829056b367", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774007227, "uuid": "d60c48ec-a055-430d-b3e8-2d2c038d5ff7", "value": "T195B4237B0A7F70D00C6A43BA8B468611A43D9D621628AFBD47DCE6CC8D0E51EBF14E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774007227, "uuid": "01514b3c-92ab-4f7b-82d3-2881cf3d6509", "value": "12288:x4lhhLoVDI2FLmMJK1eqO3g/ALyYG0ZaDajTCXMO8xzDOeDBP:OxopIAmMJ5A/f0Za6TCXKBxFP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774007227, "uuid": "de67b3f4-a939-46d2-8e8e-39880d641cf7", "value": 541353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774007227, "uuid": "dd646de3-ab77-4da0-997d-89cbfd2c273c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8607c15e-2452-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774007227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007227, "uuid": "9c2274e2-5833-4e15-883b-6c3577d17775", "comment": "Malware payload", "value": "49de29c7a3e5a9deaeb999021b888f08", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007227, "uuid": "e898d6f0-4a83-4658-8aed-a9492df66cfc", "comment": "Malware payload", "value": "bedb52b5f6a1ee305865f62df0292a2469db47b447ffd1b1065b6f37018e9f98", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774007227, "uuid": "cfffb3e0-33b6-45ef-8c76-d1bb95e67a50", "value": "T1AAB4237B0A7F70D00C6A43BA8B468611A43D9D621628AFBD47DCE6CC8D0E51EBF14E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774007227, "uuid": "9d12d379-ea15-42ed-b848-706ba2cfeacf", "value": "12288:h4lhhLoVDI2FLmMJKmeqO3g/ALyYG0ZaDajTCXMO8xzDOeDBW:exopIAmMJCA/f0Za6TCXKBxFW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774007227, "uuid": "d21b0eae-7941-46a5-878e-18c58ec35f2a", "value": 541353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774007227, "uuid": "e8036fd6-dfc4-415c-9625-f539b22c9d4a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "864e1663-2452-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774007228, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007228, "uuid": "53dcc328-a0ce-45ef-9845-3a4cea44c322", "comment": "Malware payload", "value": "c2a58f37e72934b29561e75afd7cc388", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007228, "uuid": "38dd83b4-2101-43b5-a43c-60b637266acd", "comment": "Malware payload", "value": "9bd90979352d58188e25e8678b553d31b8d99be931e90bbf6cdf798978634c9d", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774007228, "uuid": "7b33b6dd-fd5c-4abc-9949-355fd8631365", "value": "T132B4237B0A7F70D00C6A43BA8B468611A43D9D621628AFBD47DCE6CC8D0E51EBF14E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774007228, "uuid": "ca3b3b0e-68eb-4f88-a7af-7a5345391cb1", "value": "12288:N4lhhLoVDI2FLmMJK0eqO3g/ALyYG0ZaDajTCXMO8xzDOeDBo:qxopIAmMJoA/f0Za6TCXKBxFo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774007228, "uuid": "5bd20644-d9eb-42b8-ac53-7b938ffddcb2", "value": 541353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774007228, "uuid": "059c7d54-c967-4795-8f12-e5604c80a7f9", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86af8120-2452-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774007229, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007229, "uuid": "696bacd9-710e-47ee-acbc-be9557a50d4f", "comment": "Malware payload", "value": "46892b4caeb11d0f9729bff21a63abf8", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007229, "uuid": "16e1a023-a7b1-42cd-97bc-0bfd372e6d3b", "comment": "Malware payload", "value": "eb050ff111bbcbaa46fabc29ce9f61f2571e6b00942413d044ac1a8292795cda", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774007229, "uuid": "4087e33f-13dd-4937-8551-0e470a3b6611", "value": "T10CB4237B0A7F70D00C6A43BA8B468611A43D9D621628AFBD47DCE6CC8D0E51EBF14E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774007229, "uuid": "f143d31c-2272-4ee6-afeb-623d76627c78", "value": "12288:54lhhLoVDI2FLmMJK5eqO3g/ALyYG0ZaDajTCXMO8xzDOeDB7:mxopIAmMJtA/f0Za6TCXKBxF7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774007229, "uuid": "56245c2f-a9c6-428f-9d48-c134fc49c020", "value": 541353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774007229, "uuid": "813bcfa9-e195-4814-9dd7-2d8c03057a78", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86cbf9d1-2452-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774007229, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007229, "uuid": "9ee0ae83-568b-426f-9c8f-ec9b5d9bef35", "comment": "Malware payload", "value": "5d79a7c47cfaf33f0c819c07dff9c8fe", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007229, "uuid": "5baee9c4-5ba1-4fd6-8e4b-9531ba55893d", "comment": "Malware payload", "value": "35cd199d3b67bb9a00b4d0e92a25bbfd024e614d21a4c861f9616496b2bd72e8", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774007229, "uuid": "49202a87-8881-4275-aabb-1ae298bc1d01", "value": "T1ADB4237B0A7FB0D00C6A43BA8B464611A43D9D611628AFBD47DCE6CC8D0E51EBF14E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774007229, "uuid": "2544364f-5494-40dc-b71d-b34c20054012", "value": "12288:J4lhhLoVDI2FLmMJKZeqO3g/ALyYG0ZaDajTCXMO8xzDOeDBX:WxopIAmMJNA/f0Za6TCXKBxFX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774007229, "uuid": "4d1fa51e-c8aa-4713-b1f0-cfe52256e447", "value": 541353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774007229, "uuid": "d8c79da8-8621-41de-8401-b74790c40d53", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a4ed7b59-2453-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774007709, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007709, "uuid": "06afcaaa-4e23-4690-803b-f4b82114e392", "comment": "Malware payload", "value": "c78932dd3e70aed6852a41481e9b4dd9", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007709, "uuid": "ecfadcc3-6530-4ff0-a184-d27741317a0b", "comment": "Malware payload", "value": "37e1bac3b9ece17fbf6d14c6bcb4a8268748a132830e8885c98edbd54e169ee8", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774007709, "uuid": "2cfc8690-a72f-4d68-814c-c42746ed6328", "value": "T122B4237B0A7F70D00C6A43BA8B468611A43D9D621628AFBD47DCE6CC8D0E51EBF14E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774007709, "uuid": "549adc82-6595-4bb7-8d1d-4de3a3ac3e7e", "value": "12288:t4lhhLoVDI2FLmMJKpeqO3g/ALyYG0ZaDajTCXMO8xzDOeDBX:KxopIAmMJ5A/f0Za6TCXKBxFX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774007709, "uuid": "178be4aa-4871-49c8-9223-94a6943f2258", "value": 541353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774007709, "uuid": "01a31982-b51a-4885-869f-ed8983ed5bf0", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a519aa2b-2453-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774007709, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007709, "uuid": "bce14bdc-ea8b-430b-a59d-58cc5d3955ae", "comment": "Malware payload", "value": "ad734fd21f08f933098d4fbacedc7d51", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007709, "uuid": "d94698bf-ed7b-4891-abca-c8e0ab78c15f", "comment": "Malware payload", "value": "fdf142196bd8f7e0809ef1989b10e15263dea5d37a334da195244fc873b62fbf", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774007709, "uuid": "15004921-aede-40c6-b49f-c60f601da0b0", "value": "T1A8B4237B0A7F70D00C6A43BA8B468611A43D9D621628AFBD47DCE6CC8D0E51EBF14E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774007709, "uuid": "8f4472a6-5d7d-4dc1-b5d9-39175081f3b0", "value": "12288:N4lhhLoVDI2FLmMJK8eqO3g/ALyYG0ZaDajTCXMO8xzDOeDB4:qxopIAmMJMA/f0Za6TCXKBxF4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774007709, "uuid": "315d92be-7ff7-4467-8599-1da19c1bc837", "value": 541353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774007709, "uuid": "8272a9ae-7671-401e-b6de-5f798bf41ea5", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f717e69-2456-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774008908, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774008908, "uuid": "4c026c65-4a63-43e2-88c2-1ff18f8fabdd", "comment": "Malware payload", "value": "1476429e9979eebfa5c570c1032ed1b8", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774008908, "uuid": "a9e00f00-194c-4592-9d5c-eb37116fa6de", "comment": "Malware payload", "value": "ed6c7e60197f89fa4a708ea1ae759d7cc0e266b7443544ec9066b05d2a26ebf1", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774008908, "uuid": "cad94fec-10b2-4784-b7bc-656d9128506a", "value": "T14EB423F5A7606BCC9D20122F2F4A2BCE19274B51B403C54A1AD2875A421F6FF4E7AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774008908, "uuid": "df9859a0-6763-42a3-affb-dc994405252c", "value": "12288:QBRdpQ73iBVYWrCwvEXgbvM0a4OTHiQIIFzuK9Gd9IUo:QHUw2WG9XgbM0azTHiQIouDE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774008908, "uuid": "891cadf6-c40b-46d5-8fad-a7245b2ad9ab", "value": 542317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774008908, "uuid": "0703a860-f764-4657-a039-4fb9406f3bc5", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6fedda1a-2456-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774008908, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774008908, "uuid": "92c5a5c8-095a-4c55-ac4f-1fd3a1a1ee2f", "comment": "Malware payload", "value": "99840de52cc43a504a33af68fe3cdbef", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774008908, "uuid": "7cb27c3c-2744-4f42-a3e9-f716a4e306a3", "comment": "Malware payload", "value": "60b64f4111a899a25c0eaa66db6752a8c1a2769372cb9c4fa27bc8ffe3a62dff", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774008908, "uuid": "8107b335-0849-4720-b19e-173db218f90c", "value": "T130B423F5A7606BCC9D20122F2F4A2BCE19274B41B403C54A1AD2875A421F6FF4E7AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774008908, "uuid": "eaf6bd08-cf50-4f9e-a984-d45c363640bb", "value": "12288:IBRdpQ73iBVYWXCwvEXgbvM0a4OTHiQIIFzuK9Gd9IUE:IHUw2WS9XgbM0azTHiQIouDo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774008908, "uuid": "b1f9c3c4-92c2-44b0-96de-686bd83e12f8", "value": 542317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774008908, "uuid": "9087ecf8-b095-4ffe-9968-1da893bfbe30", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6feeb762-2456-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774008908, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774008908, "uuid": "3354694c-f1b8-46ee-862b-825264a34981", "comment": "Malware payload", "value": "5087e4f05f34a09594fb55d6b5a0cf39", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774008908, "uuid": "263ded38-f801-4dc9-8f7e-ba492280207a", "comment": "Malware payload", "value": "f2ecd86631dea229fcc053b9877ace5ca68960c08194f4a2d074943845eea396", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774008908, "uuid": "4843926e-9a8f-4573-9823-03c8e9a4ef3a", "value": "T17FB423F5A7606BCC9D20522F2F4A2BCE19274B41B403C54A1AD2875A421F6FF4E7AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774008908, "uuid": "f91b61f1-cbc4-48fd-afd4-ffa10e3c156c", "value": "12288:GBRdpQ73iBVYWqCwvEXgbvM0a4OTHiQIIFzuK9Gd9IUd:GHUw2Wb9XgbM0azTHiQIouDR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774008908, "uuid": "48be1ba2-b7c1-4be3-8a73-4504f4807ada", "value": 542317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774008908, "uuid": "ec127406-edaa-4f82-963b-23c8d21e2c43", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7003f2a5-2456-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774008909, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774008909, "uuid": "0b1f4248-df2e-4e0a-9334-e1e57e43cf33", "comment": "Malware payload", "value": "7a5c7a8daec9a3e10714c98c60aee5e9", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774008909, "uuid": "b3ce4d87-12a2-4608-a8f0-a83dea0b6d1a", "comment": "Malware payload", "value": "65a4f627bdcb3807cdb1dd6952a09060c55a2b535d8de0da6c68a245f5606787", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774008909, "uuid": "e0ac2e20-39f1-4be7-a28b-5008eb4965ca", "value": "T158B423F5AB606BCC9D20122E2F4A27CE19274F41B403C54A1ED2875A421F6FF4E7AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774008909, "uuid": "7fe36074-35f9-471f-a452-0da7f6944ef8", "value": "12288:oBRdpQ73iBVYWBCwvEXgbvM0a4OTHiQIIFzuK9Gd9IUy:oHUw2WM9XgbM0azTHiQIouDO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774008909, "uuid": "758721b6-6ed2-457b-add7-1d373cdab046", "value": 542317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774008909, "uuid": "e0c39ee9-c6b7-4881-8239-6375ea268203", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "429de679-2469-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774016993, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774016993, "uuid": "5d770b6d-7ddb-4ba1-b351-22fc015c6fc7", "comment": "Malware payload", "value": "f6ae7c5b3dbd8ebf5da88f3e25cd9252", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774016993, "uuid": "293ab6a9-a35d-4052-8e78-cb7235a72f71", "comment": "Malware payload", "value": "8637522df732f9e1549d64bda926467b23f8ba96ad072535f8f59222eba8e4a8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774016993, "uuid": "2360fb5b-f1f1-4c73-b0f4-3326e8f93ed9", "value": "T1348309327488582A210B428FD267336C70AFDCE2D611E5B6F6F632344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774016993, "uuid": "ae3336a1-176a-46db-acfd-b01e67d41cd8", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnrWaqVN/:XEKltp9txAX/yr2pbrWLVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774016993, "uuid": "68054af1-e486-43c9-bbf3-8f6fb3c42819", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774016993, "uuid": "af4ab9dc-c7de-4d66-bfc3-7388de47dc25", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "56a1a84a-2469-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774017026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774017026, "uuid": "ad391e7e-7d03-4cf5-84d7-67801282319c", "comment": "Malware payload", "value": "39de7716b152a5cb084e243ba92c78cd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "P2Pinfect", "colour": "#D18D7D", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774017026, "uuid": "86b6061d-a5a7-40e7-8d54-f5acc0465421", "comment": "Malware payload", "value": "c7fe86aed191cb848d436b49602f3c351921030cf9e6879d9f8b438243abb63d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "P2Pinfect", "colour": "#D18D7D", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774017026, "uuid": "2ddef35d-c442-47b5-adb8-2aa756583b63", "value": "T186F533EBD8DC73A0994D9B3CAB353643750022F429ED56522E95D2730C3B0D9ABE27", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774017026, "uuid": "f5fc7ecf-84f5-4ff5-bfa8-bf66f3565c97", "value": "98304:UISe13/F/FXiEJkW97U1nR88WQjmAkcUw3QGmf:VzX9jCWQjmrw3e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774017026, "uuid": "a35a1b09-48dd-41d4-9138-1e257d556e30", "value": 3450416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774017026, "uuid": "e1f98dcd-466b-489e-ac17-3b6c8952bdf0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17080223-246a-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774017349, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774017349, "uuid": "22ffdeb9-508c-45f4-9d15-826720aed45e", "comment": "Malware payload", "value": "6b53ff6e25263f27cbe10d8256e09295", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774017349, "uuid": "9aca64b8-08ff-4134-9abd-42773f052b72", "comment": "Malware payload", "value": "7fb72d397a8e2fea6fb1bfbcfe5ac957887dc40b63d4016388b63706aae25305", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774017349, "uuid": "cf884a3a-1dc4-459f-8981-7b1887ba28c8", "value": "T17323B0D46380D40366CE4F93BF16BDE8E42AA97679C4A50792547FAC68BC507C6B0E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774017349, "uuid": "f7541941-0848-46e5-9091-3e883f2b5837", "value": "768:9IoKNPRheTi4xgdCSO0I83HWfgQcZcy+in/f/ji3T1C2RnmqkyT0bnmZjlD3FL8n:WNZhEi4xgdCSTgRkRyW29gwQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774017349, "uuid": "5922a9c1-3a41-4329-bc73-b2ed6934bb1c", "value": 47463, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774017349, "uuid": "72218f98-44aa-4c21-b746-df0d9aa1b88f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5438cec-1e51-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774017430, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774017430, "uuid": "e28379de-0155-4de0-9110-ad1deb0d7681", "comment": "Malware payload", "value": "0fbd83cab083fe0b047497f5c8d63f63", "object_relation": "md5", "Tag": [ { "name": " payload", "colour": "#df8833", "exportable": true, "hide_tag": false }, { "name": "obfuscated", "colour": "#00dd7d", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774017430, "uuid": "22557b09-91dd-446b-97ff-964983184c0f", "comment": "Malware payload", "value": "b23f06a5bf75ae2335bac792574cb3bc5fdc11755f5f4a75617eb99fd3a56104", "object_relation": "sha256", "Tag": [ { "name": " payload", "colour": "#df8833", "exportable": true, "hide_tag": false }, { "name": "obfuscated", "colour": "#00dd7d", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774017430, "uuid": "14c45d8f-f8ad-4ad6-9a23-f8abd857775d", "value": "T1AFD58CDD098562E2C3FBB360C1B56E2E26B133239C67991B73FCA1D8CB512966D43B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774017430, "uuid": "2be7c635-bec9-4dca-b887-83adc301867b", "value": "24576:8+EhkjixLXR+bG/f29mFusqa+n0tkR5JoZh73VVPYDlJ0K3x0cGMPIUn7CsgelOa:8UixbItdTrJoFVPMvXGMwJsgelriBKP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774017430, "uuid": "96cf4ff0-b6ca-4612-a96d-0073967a8442", "value": 2945189, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774017430, "uuid": "abd26662-5415-4b32-a4fb-deb302c5c309", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d88c684-246b-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774017977, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774017977, "uuid": "d63c99b2-4a56-4f24-a01e-050c6da5ccb7", "comment": "Malware payload (Mirai)", "value": "f3f2fc22dd82463f9e4b76e613d82eb1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774017977, "uuid": "da64ec0d-1c88-4cd6-a398-98b69f48c96d", "comment": "Malware payload (Mirai)", "value": "7c4970bcfa5e69e3056b3e8bb4d199a529e1591afbd45e41db3c809085a8f620", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774017977, "uuid": "a5f6a3b6-dabb-4aba-bc13-78e4ec0b0c42", "value": "T124A31905730C0947D2633EF43B3F67E193EF9A9121E4F644294FAA899271E325586E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774017977, "uuid": "866ea5ad-5224-477a-929d-db1fc4a4cf59", "value": "1536:DLRN5A4rhT4HGwuB0EUEyxbuyeP1DIVUWnLyXebpijFd2CvA0xPi6UZuuHqQegu:DLRk+J4lEyxbeDpzewjFo7KYu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774017977, "uuid": "1dea7f64-635b-427c-bd42-9ca4a39441a6", "value": 106943, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774017977, "uuid": "ed6efb4e-645d-49b5-a8c8-ce671cd85032", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e720eb6c-246c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774018557, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774018557, "uuid": "fbf03e39-20a8-4ae1-965a-652469e3a371", "comment": "Malware payload", "value": "dfa571f299472e5b0a0d464f1fcd6aab", "object_relation": "md5", "Tag": [ { "name": "pw-9959", "colour": "#2e59fc", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774018557, "uuid": "bfb7a690-d5de-4b05-980c-03c395e81b96", "comment": "Malware payload", "value": "ab66c9b8380fe0e7fe9d7e468334eb7798c3e3a6fb1016e2857b25666525ea39", "object_relation": "sha256", "Tag": [ { "name": "pw-9959", "colour": "#2e59fc", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774018557, "uuid": "8a17efc4-cdf1-4acf-891f-59802d027c52", "value": "T1BBA7335A1A59F34AC51BD9C1C88BA128FF49BA1478FE07922C2B709360FCD572712D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774018557, "uuid": "a1726009-82e6-4127-a9b1-0a2b1a7daf1a", "value": "786432:98nLLV7UiL8Otq9CenIOGJqwDeIoIjrWuKxIwW0mU9uHxrZ4lD7budbOXt:9kLLB3XmLnaqhIjyus/mUwIlDnok", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774018557, "uuid": "09e7f01a-3177-4b11-83a9-6b29acf3885f", "value": 46212190, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774018557, "uuid": "94f03f09-50a8-4a32-9d3b-67cf08935361", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09136334-246d-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774018614, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774018614, "uuid": "6d289461-38c2-47ea-a4ad-cd44f8974733", "comment": "Malware payload", "value": "a0c1465e37de37c5bc93a35e0c6098b0", "object_relation": "md5", "Tag": [ { "name": "CaminhoLoader", "colour": "#0a1beb", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "prt", "colour": "#9086b3", "exportable": true, "hide_tag": false }, { "name": "ua-ps", "colour": "#32D6F6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774018614, "uuid": "0e67659f-54b7-4227-9fbe-82b379ebcafe", "comment": "Malware payload", "value": "bedf50f9289105609e36e6a198b9a5fa6d6017f93a9e3091b9739845ef3b019e", "object_relation": "sha256", "Tag": [ { "name": "CaminhoLoader", "colour": "#0a1beb", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "prt", "colour": "#9086b3", "exportable": true, "hide_tag": false }, { "name": "ua-ps", "colour": "#32D6F6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774018614, "uuid": "96f9bd5a-3f3b-41c0-bdee-0dd307d3b7b2", "value": "T19BC5046B56D1F0E2CC686C4325751CCBD87C228D2B291EAEBF9095DF4879988C388F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774018614, "uuid": "a73112be-022b-43f5-b156-88eaa1b5a5d0", "value": "384:hM/bh8KjzyafwDTSzhI8jwqYM2MjA7CZrXMjshxlPOMjGaHrJMjz0s8q9COXpk9k:gU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774018614, "uuid": "8e12863a-9ad8-41e7-a2f3-bf403b930df7", "value": 2566096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774018614, "uuid": "0087c4f8-6ff0-4243-afb8-57837f22a51a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6d0b5db-7fda-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1774019530, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774019530, "uuid": "dc4ac812-6795-49f7-a47c-b343c42ed575", "comment": "Malware payload (Hajime)", "value": "5377e8f2ebdb280216c37a6195da9d6c", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774019530, "uuid": "942e408a-a555-49a9-85b4-d9d6f85da0cd", "comment": "Malware payload (Hajime)", "value": "020f1fa6072108c79ed6f553f4f8b08e157bf17f9c260a76353300230fed09f0", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774019530, "uuid": "b2c51f0f-7090-41ff-b8f4-f3553f61489f", "value": "21831229135414E5D62681F1D3FD1B84AE981FA9CEE2EC147C12BC89EE333AD3CD2618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774019530, "uuid": "33919d6e-c3df-42f9-9d5a-e3623a505757", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1V+uBNu:yYI0ARqw1qAEv7UIFM8oJorFquyjkRks", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774019530, "uuid": "fcc0bf6f-a7ef-4444-b617-cd9028d1d06d", "value": 85232, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80315944-2473-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774021391, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774021391, "uuid": "58b1a0be-bcb8-4a16-a952-719ef16ecd28", "comment": "Malware payload", "value": "4c7c64b3f9ff39951060b222d69438d4", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774021391, "uuid": "c0accc94-7af6-434a-a159-b1f7a933d3ca", "comment": "Malware payload", "value": "32fbafeac8724e1ce3f54067bbd0b4617f087b5aa41768f8ccfc10e1052fcfdd", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774021391, "uuid": "abae2649-75b9-4ed9-bfc0-519bd8396abb", "value": "T1D1931A31786F052A166F836E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774021391, "uuid": "394a3343-eee6-41fa-9786-6fa9c73c7c83", "value": "1536:9myp1tF/uwMmAIa14oXusIcepeV7tb73WjxCrCitkb5fv2v05x9krfifEsCZKt6x:9fQI7GGitkbFv2v05x9kraEsCZ66Yy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774021391, "uuid": "aeac204f-cec3-4117-a278-731d653a7d26", "value": 94527, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774021391, "uuid": "fde02574-f18b-4ebb-8ad7-631b0900da8e", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "14bb4d25-2475-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1774022070, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774022070, "uuid": "7adcccb9-8772-4559-b189-fe5c7e4d775f", "comment": "Malware payload (Stealc)", "value": "1f231b64292c9253b50c292471823cc1", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774022070, "uuid": "be6c3847-bd01-41d4-9e0b-d14687408f22", "comment": "Malware payload (Stealc)", "value": "764adefbf141f0d492793bc9eb509864fffce59611f20592d905e554ed67ee74", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774022070, "uuid": "61ba3aeb-6a91-48b9-8c4a-8117d12bb18d", "value": "T1BBC58D1BBCA409EAC06AA77288B659927BB5BC0E0B3363D31E81B6343F767D15C747", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774022070, "uuid": "26b79d19-c771-42ea-8a60-4856ba1055b0", "value": "ebc247a77b4d4a804b261f97a1fd075c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774022070, "uuid": "6d160a36-4b03-4479-ab71-2113ee7206d7", "value": "49152:QwCM8G/u6z9Ba90o+bnLN7Z/A+dPF3EUT0P:Qwb2AVRtEUe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774022070, "uuid": "20ba71b6-a057-4f4b-a43c-fa3c8ab356c4", "value": 2517680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774022070, "uuid": "38e03831-8085-46e7-a4ec-244d36e4cc9a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9802ae37-2475-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774022290, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774022290, "uuid": "9868365d-52d3-4ed4-bb57-78ecf71c97e8", "comment": "Malware payload", "value": "a2840074951607e0610e6e9608dbb6f2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774022290, "uuid": "1e360e3c-4140-4ca9-ab29-381c3c1273c9", "comment": "Malware payload", "value": "149182139a67e57ed056d4280ba7570b030591e87886c679b817b664d8277d3f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774022290, "uuid": "5d582179-d8bc-4535-80c8-eace86c7ce31", "value": "T1EFA3865E2E228F6EF768873447B78A259B6D33DA26E1D644D59CC1041F2028E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774022290, "uuid": "fc82754d-30bd-4e97-a10c-3053db29f25c", "value": "1536:DblBjVqrIb/P5QW6lDoN/NdFAcFy2V7kVL7Eqc5:fl+quvEVTAcFvV7kVnEt5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774022290, "uuid": "38021bfd-955c-40e3-8c87-0f2b7011cb45", "value": 106943, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774022290, "uuid": "b8053e53-cb1f-498b-bbc6-3d9462a97fde", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d0d91cf-248c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774031935, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774031935, "uuid": "116f74c3-bc7e-4802-9171-1ff0e84a93cb", "comment": "Malware payload", "value": "ace025a6785c7d97b58e0def07d4690e", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774031935, "uuid": "77b898c6-ca26-4b1b-95ad-cd4276f3aef7", "comment": "Malware payload", "value": "6c643706fb6ffa1622de6f9256be0e6676748e8b99dd1d3e31749695cfe79822", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774031935, "uuid": "898a88b3-06ed-4a83-a4c7-ba3520ea71b9", "value": "T12A2423DD6874A36DFECE02729641D292ED618C2B9FA5D0DEF098E6DD2F0382D31534", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774031935, "uuid": "3e8c3034-f8a6-4035-b044-b569cab5dafa", "value": "6ed4f5f04d62b18d96b26d6db7c18840", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774031935, "uuid": "e2b3de51-1880-4aa5-97c9-3e722356d2a6", "value": "6144:rhFSwJnW8+vITyT/myad6zVuWP1IDu9Zv9l5LrdI:ryKW8e9T1QWP1IwZFLLRI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774031935, "uuid": "ff938a39-302f-47f4-9d3e-d272b91c13c6", "value": 223232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774031935, "uuid": "7c71bb17-cd15-4ca4-8bc6-91a2086f6e43", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "26793cc5-248f-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774033266, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774033266, "uuid": "5dea25eb-8c88-49c9-8801-ae7264c8fd3f", "comment": "Malware payload", "value": "865d0cb35a5aa12ce53bafa23d784569", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774033266, "uuid": "4214e57c-802b-4666-a996-6f17b7bbdf51", "comment": "Malware payload", "value": "91822c023b9e73bfc37128f5575bc777edcf847c2e693789e2fae09ddd64d19d", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774033266, "uuid": "ad107dda-0869-4c6d-81a3-9360201e1c83", "value": "T15DC4238BA3FD845390BF1F58AA5BB48D091976F34722DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774033266, "uuid": "be1cbd7e-101d-4099-a0f0-9ac78639e751", "value": "12288:b+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byKH9I1P0QKw6FEo:b+QqldA/TSO713u7xnKH9IaQKHR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774033266, "uuid": "fe8442ee-0f7b-4ce9-b6e3-cbd777911dbf", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774033266, "uuid": "8de1492a-c545-4d2f-aaa5-a7bab19b7fe7", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ad6a28b-248f-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774033327, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774033327, "uuid": "06b95718-8ecb-42db-a21f-bfd6593efaf1", "comment": "Malware payload", "value": "1b89d897f238ba12290a2e1f58811b4d", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774033327, "uuid": "f16b8951-99e1-46ca-bed3-da75eb2090ae", "comment": "Malware payload", "value": "0c745301ca99632138058e142d417b266253b2c03b04fd1fc03c4cd288d8d9e1", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774033327, "uuid": "dc09b67c-7b82-4be8-8082-2ed2027dc45b", "value": "T1C7C4235D7018EB38E907A174F312C0F26BAE662BE0A5C39CD045053B37AFF26689D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774033327, "uuid": "83358c52-11c9-4bb2-b12e-3be2c131cd1f", "value": "12288:FMU+0xq75aS9iYIp6cP/G2Bku89tNvC28c5/VTUPkYyy:R+J71vI/GTYc5/pS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774033327, "uuid": "31509f57-9cd9-4841-aeb3-264ea5a1d4f1", "value": 587570, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774033327, "uuid": "6cb319f4-5fc3-40ae-9355-4fd6dd96f165", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4addb233-248f-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774033328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774033328, "uuid": "c81da7ec-715c-4d7a-9318-4952717611f3", "comment": "Malware payload", "value": "fbb03f405245fd25587e26d2fa7301c8", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774033328, "uuid": "c8b965f8-ee14-4cd8-bd4c-a283f941a82b", "comment": "Malware payload", "value": "90b82605c7728c3a9ed3a32771566d83d1afeeb23da69a79512cfc163ddf0fb5", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774033328, "uuid": "c28e2db8-8e5e-4a16-9496-dd1c478baa9b", "value": "T10BC4235D7018EB38E907A174F312C0F26BAE662BE0A5C39CD045053B37AFF26689D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774033328, "uuid": "3bdabc20-a8a1-4416-9e8e-2257c6e52ec4", "value": "12288:lMU+0xq75aS9iYIp6cP/G2Bku8+tNvC28c5/VTUPkYyH:x+J71vI/GkYc5/pn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774033328, "uuid": "33aee40d-6e70-4a76-a42f-8f102ff45ba3", "value": 587570, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774033328, "uuid": "a5553e0f-d2cb-4cb6-80bb-3bcfc1942d05", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4adec321-248f-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774033328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774033328, "uuid": "9b6b83c5-9a99-4bff-abab-7962a1c45c47", "comment": "Malware payload", "value": "01d93dda445a59f8a29474c6a31c73d9", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774033328, "uuid": "d6835359-acc6-4476-9912-4b483e64b464", "comment": "Malware payload", "value": "34708005f91d903a51d1734d5fc43772b9ed6164823edbc607ca571c0ececb08", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774033328, "uuid": "80952e8a-f63e-422e-80c7-a29a9aaad2f0", "value": "T1A2B423CD64BED0A87B658DDA9FDCBFD30CFC403A6D7527F2A51C1A13A1C400B64A95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774033328, "uuid": "de7e8c7a-451f-47e4-b4ec-3aa655233db3", "value": "12288:dB/e4pqNFTFbEXkHDoGbDDGIabs/7iiEVwYg2l3/2NyP:dBm4pgT1oGTabs/7iiWw0DP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774033328, "uuid": "1598b5b5-f37f-4634-b1ee-c9858db758b1", "value": 510128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774033328, "uuid": "756a92e8-c4a8-41d8-a50b-9e74827c0900", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4aeba73f-248f-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774033328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774033328, "uuid": "563650c5-e54d-4419-8ccf-45124a34cc83", "comment": "Malware payload", "value": "9eb710e893190ab0f2550fd2c5cafd5f", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774033328, "uuid": "816a9977-cd36-4739-81ad-42c2ff6a86de", "comment": "Malware payload", "value": "048616bf13e2c0c3143dc664e55b486b44a9d854f37c1359b6dd59660e00c8d1", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774033328, "uuid": "5b5b3763-c5c7-48f6-8326-a3b0237c4675", "value": "T1FFC4235D7018EB38E907A174F312C0F26BAE662BE0A5C39CD044053B37AFF26689D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774033328, "uuid": "d9321a8c-9b88-4cd7-9c0f-ec60e9b2a70b", "value": "12288:FMU+0xq75aS9iYIp6cP/G2Bku8xtNvC28c5/VTUPkYye:R+J71vI/GnYc5/p+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774033328, "uuid": "aec6f15c-b3a3-474c-ae09-568458427a95", "value": 587570, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774033328, "uuid": "dd7ed407-b596-4f06-b785-4253847124a2", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b997f52-248f-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774033329, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774033329, "uuid": "57aa9c8e-f7de-4f7e-903c-7678bf74785e", "comment": "Malware payload", "value": "9350876113fb089efefbf860481f9981", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774033329, "uuid": "ed1a3a4f-b366-4932-916e-83b206023982", "comment": "Malware payload", "value": "2fc7450578f2e2b65dbde3bd8889a88000deeae56c101a0d271e7bd23d690688", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774033329, "uuid": "102421c5-61a8-432a-972c-5630314e9c5c", "value": "T105C4235D7018EB38E907A174F312C0F26BAE662BE0A5C39CD045053B37AFF26689D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774033329, "uuid": "d613684d-c013-4c97-b43c-f1e5bec8aa99", "value": "12288:VMU+0xq75aS9iYIp6cP/G2Bku8ItNvC28c5/VTUPkYyh:h+J71vI/GqYc5/pB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774033329, "uuid": "eaa84da1-69b8-46fd-a63b-28d7834aed10", "value": 587570, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774033329, "uuid": "fe21c4f1-9635-4501-969f-a15b76344611", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62d31616-2491-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774034227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774034227, "uuid": "666d9253-1d13-4af1-87d5-7903d530defc", "comment": "Malware payload", "value": "123709229c3d68f59280dd1365936308", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774034227, "uuid": "a45be8f7-57db-41fe-ae38-4ae5b17f52f9", "comment": "Malware payload", "value": "275042a6ced7cb3e4791a5e56d4a89ef2b85058d715dd833849d568683834b7a", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774034227, "uuid": "7a8befec-cc1d-41e3-9584-ef230f19e68e", "value": "T18DC4235D7018EB38E907A134F312C0F26BAE662BE0A5C39CD044053B37AFF26689D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774034227, "uuid": "37c43618-be2c-4bb6-ae26-a9bd501f0a00", "value": "12288:VMU+0xq75aS9iYIp6cP/G2Bku8/tNvC28c5/VTUPkYy0:h+J71vI/GJYc5/pU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774034227, "uuid": "eccf44d4-1c71-40bf-9c23-fbcde38f0d9b", "value": 587570, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774034227, "uuid": "ea274811-9a92-4735-a07d-b498d3519ce8", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72887789-e514-11ee-b38b-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1774041875, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774041875, "uuid": "43cc199f-cba8-4ae6-a476-d0ab63694126", "comment": "Malware payload (CoinMiner)", "value": "cbcb58ffe45c202c11bcf2070496aed6", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "info.zip", "colour": "#160766", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774041875, "uuid": "0d8b9d82-21d8-44d9-918d-35f4599bc909", "comment": "Malware payload (CoinMiner)", "value": "7126b9932dc0cdfe751340edfa7c4a14b69262eb1afd0530e6d1fdb2e25986dd", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "info.zip", "colour": "#160766", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774041875, "uuid": "cf65b9d0-40b9-489c-a6ed-ef63ee8db7c6", "value": "T19DF53329C35BA51C444ED111B88E299A937D8D177E1E17314E43336CFE378AE3E8E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774041875, "uuid": "78b15196-a361-4b73-a7ec-b615f501e11f", "value": "98304:SyrPvG3UNpYqQLpXhHHeanDebmPL+okjWa1lu/:SyrPO3UDsdXp+z8+FWyE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774041875, "uuid": "5e0c7568-ca8d-4ad1-aba5-ff0c3eed18d8", "value": 3528005, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774041875, "uuid": "5bf47232-813a-4eb7-9bf0-0cc57bda070d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773964809, "uuid": "c27bbc78-23ef-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ArmanMX77/ZeroGrav.dev/refs/heads/main/assets/dev-Zero-Grav-v2.9-alpha.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773964809, "uuid": "c288cefa-23ef-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/FurkanGuwen/nats-server/refs/heads/main/outbellow/server-nats-3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773964811, "uuid": "c3fd46b5-23ef-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hahbibiali/Ad-Astra/raw/refs/heads/main/phosphoreous/Astra_Ad_1.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773964813, "uuid": "c4c0257c-23ef-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/FurkanGuwen/nats-server/raw/refs/heads/main/outbellow/server-nats-3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773964813, "uuid": "c50abec2-23ef-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/RainMeriloo/cf-browser-cdp/refs/heads/master/src/cdp-browser-cf-1.2-beta.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773964820, "uuid": "c94f022a-23ef-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ArmanMX77/ZeroGrav.dev/raw/refs/heads/main/assets/dev-Zero-Grav-v2.9-alpha.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773965768, "uuid": "fe7dab1f-23f1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://load3host.vectorstorage.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773965768, "uuid": "fe86a27e-23f1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://link4entry.vectorstorage.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773965769, "uuid": "fe970a77-23f1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/RainMeriloo/cf-browser-cdp/raw/refs/heads/master/src/cdp-browser-cf-1.2-beta.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773965769, "uuid": "ff16a94c-23f1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Hahbibiali/Ad-Astra/refs/heads/main/phosphoreous/Astra_Ad_1.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773965770, "uuid": "ff3c0d31-23f1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://proc1point.systemresource.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773965779, "uuid": "04b1bf1c-23f2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.91.183:42894/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773965781, "uuid": "05b70254-23f2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.180.249.27:35476/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773965827, "uuid": "215b624e-23f2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.30.38:34750/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773965946, "uuid": "686434c5-23f2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://entry2power.systemresource.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773965968, "uuid": "752df73d-23f2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.152.19:51782/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773966310, "uuid": "410ced60-23f3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Eskarlet78/terraform-aws-3tier-architecture/raw/refs/heads/main/modules/alb/aws-tier-architecture-terraform-potentness.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773966310, "uuid": "41386e1e-23f3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://load3local.systemresource.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773967267, "uuid": "7b6ee100-23f5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://work4flow.systemresource.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773967267, "uuid": "7ba42134-23f5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.23.65.216:54800/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773967267, "uuid": "7bd02cb8-23f5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://proc1infra.digitalfoundry.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773967267, "uuid": "7bd0d963-23f5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Ongbinlong/tts/refs/heads/master/sugarless/Software-2.2-beta.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773967267, "uuid": "7bd9d6bf-23f5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Ongbinlong/tts/raw/refs/heads/master/sugarless/Software-2.2-beta.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773967267, "uuid": "7bda9ba1-23f5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/eduxxhdfgfd/react-view-import/refs/heads/main/src/import-react-view-tristiloquy.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773967267, "uuid": "7bfa2d93-23f5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/okesing/neergz-web-app/refs/heads/main/canel/app-neergz-web-v2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773967267, "uuid": "7bfa67d5-23f5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/kasjan2137/azure-ml-pipeline/refs/heads/main/components/pipeline-azure-ml-3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773967267, "uuid": "7c00a90a-23f5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/okesing/neergz-web-app/raw/refs/heads/main/canel/app-neergz-web-v2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773967267, "uuid": "7c00ac98-23f5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/kasjan2137/azure-ml-pipeline/raw/refs/heads/main/components/pipeline-azure-ml-3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773967268, "uuid": "7c1246ca-23f5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/eduxxhdfgfd/react-view-import/raw/refs/heads/main/src/import-react-view-tristiloquy.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773967268, "uuid": "7c195e40-23f5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Ongbinlong/StarGate/refs/heads/main/demography/Star_Gate_v3.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773967268, "uuid": "7c2891ea-23f5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/anjdjWjf/fastuator/refs/heads/main/examples/Software-1.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773967268, "uuid": "7c2a40ff-23f5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Ongbinlong/StarGate/raw/refs/heads/main/demography/Star_Gate_v3.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773967268, "uuid": "7c2dd1d2-23f5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/anjdjWjf/fastuator/raw/refs/heads/main/examples/Software-1.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773967269, "uuid": "7cdd1125-23f5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Ongbinlong/HospitalBedManagementSystem/raw/refs/heads/main/node_modules/date-fns/fp/getWeekOfMonthWithOptions/Hospital_System_Bed_Management_v2.5-alpha.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773967271, "uuid": "7de75f50-23f5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Ongbinlong/HospitalBedManagementSystem/refs/heads/main/node_modules/date-fns/fp/getWeekOfMonthWithOptions/Hospital_System_Bed_Management_v2.5-alpha.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773967274, "uuid": "7fe3897e-23f5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.91.183:42894/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773967278, "uuid": "828376e7-23f5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.180.249.27:35476/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773967283, "uuid": "853588fb-23f5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.92.202:41414/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773968166, "uuid": "939928be-23f7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Eskarlet78/terraform-aws-3tier-architecture/refs/heads/main/modules/alb/aws-tier-architecture-terraform-potentness.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773968167, "uuid": "940922d7-23f7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://access4link.digitalfoundry.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773968167, "uuid": "9423fa62-23f7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://entry2base.digitalfoundry.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773968167, "uuid": "945f9169-23f7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://load3user.digitalfoundry.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773968174, "uuid": "9886bd44-23f7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.111.110:50545/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773968175, "uuid": "98e65d24-23f7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.210.224:40567/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773968176, "uuid": "9974958c-23f7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.149.239:51797/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773968229, "uuid": "b93aaaa9-23f7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.199.162:48139/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773968347, "uuid": "ff522917-23f7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://proc1alpha.activegateway.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773968352, "uuid": "02b50b72-23f8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.40.62:37098/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773968359, "uuid": "066d27b6-23f8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.30.130:48440/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773968416, "uuid": "28762f0c-23f8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.111.110:50545/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773968707, "uuid": "d5d0a980-23f8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://entry2core.activegateway.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773968894, "uuid": "45ca23ca-23f9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.34:45132/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773968956, "uuid": "6a4d1ddf-23f9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.8.122:40534/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773968956, "uuid": "6aa11098-23f9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.90:40870/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773969009, "uuid": "8a362253-23f9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://load3ghost.activegateway.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773969136, "uuid": "d584bd2a-23f9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.181.182:59416/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773969308, "uuid": "3bf8f41d-23fa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://view4sync.activegateway.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773969374, "uuid": "6385952e-23fa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.226.242:34980/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773969374, "uuid": "638e3442-23fa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.208.45:44408/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773969725, "uuid": "34fd7baa-23fb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.199.162:48139/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773969731, "uuid": "388ecdde-23fb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://proc1dark.remotenetwork.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773969857, "uuid": "83bd9a7f-23fb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.181.147:35624/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773969919, "uuid": "a85fd7fd-23fb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.49.50:41340/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773969971, "uuid": "c7abb3b0-23fb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.30.130:48440/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773970027, "uuid": "e8889595-23fb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.181.182:59416/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773970028, "uuid": "e945fb83-23fb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.108.13.91:39609/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773970146, "uuid": "2f766ae1-23fc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://entry2point.remotenetwork.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773970226, "uuid": "5f386286-23fc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.251.162.40:37060/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773970339, "uuid": "a2a36176-23fc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.149.239:51797/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773970451, "uuid": "e5bcc81c-23fc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.70.238:38299/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773970686, "uuid": "71cbc5d5-23fd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://load3view.remotenetwork.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773970827, "uuid": "c5aa713d-23fd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.226.242:34980/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773971045, "uuid": "47dcbce4-23fe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate4path.remotenetwork.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773971058, "uuid": "4f21fcf6-23fe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.84.214.66:36834/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773971107, "uuid": "6caa1453-23fe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.27.87:52895/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773971226, "uuid": "b35acf85-23fe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.88.208:51624/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773971237, "uuid": "b9ce27f2-23fe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.208.45:44408/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773971237, "uuid": "ba1e3292-23fe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.251.162.40:37060/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773971413, "uuid": "22b3b333-23ff-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.108.13.91:39609/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773971531, "uuid": "6923bbfb-23ff-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://proc1outer.staticboundary.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773971541, "uuid": "6f0a608e-23ff-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.49.50:41340/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773971657, "uuid": "b4871a1c-23ff-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.228.189.130:54987/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773971826, "uuid": "18fa6eed-2400-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.52.225:49564/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773972008, "uuid": "855268f0-2400-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://entry2area.staticboundary.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773972134, "uuid": "d0d7f409-2400-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.142.202:32776/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773972426, "uuid": "7ef4d7bc-2401-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://load3field.staticboundary.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773972725, "uuid": "310182f4-2402-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.88.208:51624/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773972845, "uuid": "78c37afe-2402-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://open4space.staticboundary.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773972859, "uuid": "809ab562-2402-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.231.171:46755/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773972916, "uuid": "a2e9ea37-2402-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.27.87:52895/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773972973, "uuid": "c4e70dbf-2402-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.35.21:34311/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773973220, "uuid": "57ea41f3-2403-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.84.214.66:36834/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773973224, "uuid": "5a39ebed-2403-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.212.75:42755/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773973331, "uuid": "9a6e52ef-2403-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://proc1orbit.infravariable.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773973337, "uuid": "9de34b4f-2403-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.78.128:52043/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773973468, "uuid": "ec0a9f34-2403-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.49.193:59477/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773973626, "uuid": "4a436271-2404-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.142.202:32776/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773973808, "uuid": "b66277e0-2404-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://entry2steel.infravariable.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773974228, "uuid": "b0e44362-2405-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.32.248:56596/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773974287, "uuid": "d431782f-2405-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://load3core.infravariable.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773974538, "uuid": "694a68e3-2406-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.231.171:46755/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773974766, "uuid": "f14a43f3-2406-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sat4link.infravariable.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773974766, "uuid": "f170ae5b-2406-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/7776573655/uVFeyUy.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773974828, "uuid": "16339c19-2407-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.57.13:35843/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773975129, "uuid": "c98faa61-2407-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.155.38:53043/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773975186, "uuid": "eba5bfb3-2407-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://proc1infra.secureterminal.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773975203, "uuid": "f63eac90-2407-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.78.128:52043/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773975608, "uuid": "e73c34e4-2408-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://entry2proxy.secureterminal.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773975728, "uuid": "2e9ded60-2409-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.32.248:56596/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773975732, "uuid": "316f2672-2409-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.57.13:35843/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773976086, "uuid": "0424fa3d-240a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://load3data.secureterminal.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773976164, "uuid": "32bcbfbe-240a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.95.229:58769/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773976567, "uuid": "22b04fab-240b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://main4point.secureterminal.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773976569, "uuid": "23eb2d62-240b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.93.182:43833/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773976703, "uuid": "73ddca18-240b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.219.218:35516/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773976820, "uuid": "b9fdbaa4-240b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.190.19.101:35901/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773977047, "uuid": "40c852e0-240c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://node1sync.networkobserver.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773977422, "uuid": "205d74cf-240d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.95.229:58769/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773977466, "uuid": "3ab283f0-240d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://node2data.networkobserver.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773977669, "uuid": "b4162823-240d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.221.18:53437/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773977826, "uuid": "1130db83-240e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.238.29:46404/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773977946, "uuid": "590ead82-240e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://node3edge.networkobserver.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773977951, "uuid": "5ba23232-240e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.191.231.12:53473/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773978127, "uuid": "c4e39ae8-240e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.156.184:35242/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773978365, "uuid": "52e1287e-240f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://node4static.networkobserver.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773978438, "uuid": "7e3ff7d4-240f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.190.19.101:35901/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773978551, "uuid": "c1b58163-240f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.88:52045/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773978736, "uuid": "2f8ae979-2410-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.177.96.245:46573/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773978862, "uuid": "7ab894f2-2410-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.221.18:53437/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773978907, "uuid": "95a0d4a6-2410-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://unit1meta.securityprotocol.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773979026, "uuid": "dc58a94f-2410-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.238.29:46404/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773979210, "uuid": "4a3a8df8-2411-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.191.231.12:53473/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773979269, "uuid": "6d322902-2411-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://unit2proc.securityprotocol.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773979332, "uuid": "933258bb-2411-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.219.218:35516/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773979576, "uuid": "243a318b-2412-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.238.26:39255/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773979704, "uuid": "7107c282-2412-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.88:52045/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773979746, "uuid": "89ad0121-2412-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://unit3gate.securityprotocol.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773980226, "uuid": "a7c47da4-2413-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://unit4sync.securityprotocol.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773980246, "uuid": "b412a011-2413-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.176.109.85:52320/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773980298, "uuid": "d2c97b66-2413-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.86.252:59240/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773980413, "uuid": "177ab6f7-2414-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.27.208:36681/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773980476, "uuid": "3d02a84f-2414-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.93.182:43833/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773980533, "uuid": "5f2159b1-2414-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.86.252:59240/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773980592, "uuid": "82307e1d-2414-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.35.21:34311/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773980766, "uuid": "e9896da2-2414-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://host1store.datacentricnode.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773980769, "uuid": "ebd2598b-2414-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.223.236:57188/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773981126, "uuid": "c04edbca-2415-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.176.109.85:52320/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773981126, "uuid": "c06cc9a7-2415-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.191.80:57983/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773981427, "uuid": "73fb8ead-2416-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.240.136:46370/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773981489, "uuid": "98965ea5-2416-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://host2remote.datacentricnode.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773981665, "uuid": "0170f949-2417-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://host3dev.datacentricnode.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773981727, "uuid": "268bcfb8-2417-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.156.184:35242/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773981967, "uuid": "b588ebfe-2417-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.96.168:54171/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773981967, "uuid": "b5afbb05-2417-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.46.237:43466/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773982039, "uuid": "e08798f3-2417-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.223.236:57188/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773982088, "uuid": "fd70a4a2-2417-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://host4link.datacentricnode.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773982155, "uuid": "25acd84d-2418-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.65.9:54792/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773982216, "uuid": "4a0e4a37-2418-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.237.192:33821/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773982338, "uuid": "92d121e3-2418-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.79.58:58644/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773982567, "uuid": "1b5a2abe-2419-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://point1proc.virtualresource.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773982757, "uuid": "8cadcf17-2419-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.9.135.215:39420/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773983048, "uuid": "39aac168-241a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://point2power.virtualresource.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773983406, "uuid": "0f600483-241b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://point3local.virtualresource.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773983773, "uuid": "ea38ea34-241b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.180.12.36:45414/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773983826, "uuid": "09832773-241c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.35.226:52496/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773983886, "uuid": "2d7154fd-241c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://point4work.virtualresource.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773983900, "uuid": "35cae5e6-241c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.65.9:54792/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773984137, "uuid": "c303af70-241c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.114.13:38681/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773984308, "uuid": "2940b8c1-241d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://core1infra.systeminterface.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773984319, "uuid": "2f4f5a12-241d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.14.231:46134/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773984728, "uuid": "234a35be-241e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.92.204.242:33985/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773984846, "uuid": "69b1d8dd-241e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://core2base.systeminterface.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773985031, "uuid": "d7e892d0-241e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.99.180.141:38652/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773985095, "uuid": "fe136804-241e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.237.192:33821/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773985326, "uuid": "878b3e14-241f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://core3user.systeminterface.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773985626, "uuid": "3ad2d99e-2420-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.35.226:52496/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773985637, "uuid": "413eba1d-2420-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.114.13:38681/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773985686, "uuid": "5e54353a-2420-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://core4link.systeminterface.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773986171, "uuid": "7f8a8eee-2421-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://alpha1proc.cloudfoundation.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773986176, "uuid": "8216b0a6-2421-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.9.135.215:39420/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773986227, "uuid": "a0860884-2421-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.92.204.242:33985/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773986231, "uuid": "a36a0c52-2421-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.102.97:39853/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773986294, "uuid": "c8d36378-2421-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.158.254:49572/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773986648, "uuid": "9b85b8d2-2422-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://alpha2core.cloudfoundation.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773986901, "uuid": "323e39c1-2423-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.142.221:58074/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773987127, "uuid": "b95b8069-2423-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.23.132:50680/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773987128, "uuid": "b9b6e6c6-2423-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://alpha3ghost.cloudfoundation.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773987135, "uuid": "bdedeb78-2423-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.99.180.141:38652/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773987143, "uuid": "c2fd7e8a-2423-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.122.220:38105/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773987381, "uuid": "50c55af4-2424-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.10.125:46066/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773987547, "uuid": "b3bbb511-2424-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.165.146.103:56824/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773987548, "uuid": "b41e4639-2424-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.40.10:41244/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773987550, "uuid": "b5474fc1-2424-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.44.114.162:33887/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773987564, "uuid": "bdea5d5b-2424-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.158.254:49572/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773987565, "uuid": "be813283-2424-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.103.152:37596/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773987608, "uuid": "d7ba560e-2424-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://alpha4view.cloudfoundation.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773987608, "uuid": "d7bd5059-2424-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.40.10:41244/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773987673, "uuid": "feb7d2f9-2424-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.103.152:37596/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773987674, "uuid": "ff7837b3-2424-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.118.72:55943/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773987787, "uuid": "42604816-2425-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.62/bins/parm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773987787, "uuid": "426ff9f2-2425-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.62/bins/parm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773988088, "uuid": "f630ae73-2425-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dark1proc.remotediagnostic.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773988446, "uuid": "cbae0466-2426-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dark2point.remotediagnostic.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773988627, "uuid": "3700e4a2-2427-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.237.114:46886/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773988627, "uuid": "3701872d-2427-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.101.82:39180/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773988627, "uuid": "370a987e-2427-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.72.176:58766/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773988881, "uuid": "ce98be4f-2427-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.252.250:51652/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773988927, "uuid": "ea0bb462-2427-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dark3view.remotediagnostic.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773989301, "uuid": "c90c74c1-2428-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.52.160:50276/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773989302, "uuid": "c9cd5835-2428-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.205.219:42306/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773989466, "uuid": "2b8bb47a-2429-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dark4path.remotediagnostic.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773989473, "uuid": "2f8783b6-2429-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.165.178:37567/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773989527, "uuid": "4f9baaef-2429-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.249.140:58144/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773989527, "uuid": "4f9f4edf-2429-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.72.176:58766/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773989535, "uuid": "546a0a8f-2429-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.118.72:55943/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773989788, "uuid": "eb09c383-2429-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.90:40870/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773989789, "uuid": "ebafb933-2429-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.230.223:35819/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773989789, "uuid": "ebc8712a-2429-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.86.2:50926/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773989841, "uuid": "0ada955c-242a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.38.160:60343/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773989889, "uuid": "2772edfe-242a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://area1proc.boundarygateway.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773990367, "uuid": "447a6d0f-242b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://area2outer.boundarygateway.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773990726, "uuid": "1a52dc2f-242c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://area3field.boundarygateway.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773990970, "uuid": "abb7bab1-242c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.86.2:50926/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773991027, "uuid": "ce0ca2c7-242c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.65.146.195:40018/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773991208, "uuid": "39f7612d-242d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://area4space.boundarygateway.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773991329, "uuid": "81880465-242d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.94.13.193:56217/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773991453, "uuid": "cc000fc5-242d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.65.231:56094/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773991523, "uuid": "f5355776-242d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.252.250:51652/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773991625, "uuid": "31fd4e3b-242e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.237.114:46886/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773991630, "uuid": "35511211-242e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.23.183:41229/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773991687, "uuid": "56fb6e6f-242e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://orbit1proc.terminalvariable.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773992109, "uuid": "5277a4b3-242f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://orbit2steel.terminalvariable.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773992227, "uuid": "992962f3-242f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.101.82:39180/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773992478, "uuid": "2edd870e-2430-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.230.141.123:47229/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773992479, "uuid": "2f40f172-2430-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.237.16:34350/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773992647, "uuid": "93386f3a-2430-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://orbit3core.terminalvariable.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773992718, "uuid": "bd696440-2430-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.44.158:57158/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773992827, "uuid": "fef89e3d-2430-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.65.146.195:40018/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773992950, "uuid": "483cf757-2431-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.205.219:42306/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773993067, "uuid": "8db30f72-2431-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://orbit4sat.terminalvariable.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773993134, "uuid": "b5d34220-2431-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.26.226.171:52208/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773993247, "uuid": "f8b8fbec-2431-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://repost.optico-voda.info/denyexorcist", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773993436, "uuid": "69bb5d47-2432-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.23.183:41229/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773993546, "uuid": "ab09d3fa-2432-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.3:7777/noesisllc.online/wealt1818/wealtt/nerdfwiqtwqhdgfrwt6fntdwrgonht.js", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773993547, "uuid": "ab96d7b9-2432-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://main1infra.metrichandler.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773993550, "uuid": "addc79fe-2432-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.161.85:36289/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773993727, "uuid": "17205706-2433-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.118.218:39419/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773994026, "uuid": "c96d0d03-2433-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://main2proxy.metrichandler.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773994157, "uuid": "1726abad-2434-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.5.15:57613/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773994214, "uuid": "39a429a9-2434-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.230.141.123:47229/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773994447, "uuid": "c4125fd5-2434-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://main3data.metrichandler.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773994931, "uuid": "e4b34475-2435-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://main4point.metrichandler.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773994993, "uuid": "09f75973-2436-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.180.134:53621/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773995121, "uuid": "55f64edd-2436-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.202.167:51648/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773995410, "uuid": "026a8e26-2437-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://adzpzg.trueslak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773995526, "uuid": "476617a3-2437-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.118.218:39419/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773995889, "uuid": "1f7c3f00-2438-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://merlithar1.trueslak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773995905, "uuid": "2923f758-2438-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.206.248:47286/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773996127, "uuid": "ad5da8d6-2438-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.118.101:49747/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773996306, "uuid": "185ceb25-2439-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://neo-c1iff.trueslak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773996561, "uuid": "b0619db9-2439-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.202.167:51648/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773996669, "uuid": "f06bbec2-2439-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.180.134:53621/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773996732, "uuid": "163ef783-243a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://za7lvsc.trueslak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773997027, "uuid": "c62056cd-243a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/7341834371/BgAtGH0.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773997152, "uuid": "10cd2b25-243b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.206.248:47286/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773997209, "uuid": "328f315e-243b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://taldraen.trueflow.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773997230, "uuid": "3ed614e7-243b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.80.62:49186/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773997641, "uuid": "33dd4b69-243c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.3.1:36234/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773997689, "uuid": "50a3724a-243c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://solcorea.trueflow.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773998064, "uuid": "304f02ac-243d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.29.195:57588/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773998074, "uuid": "360c9e30-243d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.162.174:42524/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773998171, "uuid": "70194ffd-243d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://summeinn.trueflow.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773998532, "uuid": "476af5b2-243e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://meta-sh0re.trueflow.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773998541, "uuid": "4cc82226-243e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.201.64.178:45797/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773998656, "uuid": "90fe6172-243e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.80.62:49186/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773998828, "uuid": "f7c643ee-243e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.42.88.121:56735/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773999010, "uuid": "63d36523-243f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://opt1c8-core.capslock.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773999256, "uuid": "f6a462ec-243f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.162.174:42524/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773999427, "uuid": "5c98745b-2440-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.216.110.222:45252/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773999434, "uuid": "60c68775-2440-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://arkspire4ex.capslock.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773999859, "uuid": "5dcd9724-2441-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.65.64:33635/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773999908, "uuid": "7b6fdee7-2441-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://embdark.capslock.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774000327, "uuid": "74e757f7-2442-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.229.188:60557/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774000333, "uuid": "78ae78ff-2442-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.37.40.52/l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774000334, "uuid": "78e7c8e0-2442-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.37.40.52/h", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774000341, "uuid": "7d1340b9-2442-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.37.40.52/f", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774000341, "uuid": "7d1773ff-2442-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.37.40.52/e", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774000341, "uuid": "7d21ddba-2442-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.37.40.52/g", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774000341, "uuid": "7d24fd49-2442-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.37.40.52/k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774000342, "uuid": "7dcc5fd7-2442-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.37.40.52/q", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774000344, "uuid": "7f3a78cf-2442-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.37.40.52/a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774000344, "uuid": "7f5fd086-2442-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.37.40.52/w", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774000344, "uuid": "7f5fe0fd-2442-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.37.40.52/s", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774000344, "uuid": "7f6bd501-2442-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.37.40.52/j", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774000345, "uuid": "7fa80814-2442-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.170.24:49093/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774000345, "uuid": "7fc781ad-2442-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.37.40.52/t", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774000346, "uuid": "80899561-2442-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.37.40.52/d", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774000352, "uuid": "840e88e3-2442-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.37.40.52/r", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774000447, "uuid": "bca93191-2442-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://arkcrestex4.capslock.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774000879, "uuid": "bdc2ffc1-2443-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.65.64:33635/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774000879, "uuid": "bde77a3b-2443-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://hxfpc.infosafe.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774000940, "uuid": "e263d132-2443-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.32.228:45526/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774001346, "uuid": "d473ed72-2444-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://nefnpr.infosafe.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774001712, "uuid": "ae9c2bba-2445-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.170.24:49093/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774001765, "uuid": "ce40cd93-2445-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://proto-patt3r.infosafe.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774002310, "uuid": "13344dcb-2447-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://soltideis9.infosafe.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774002729, "uuid": "0c8ea7f2-2448-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://qczcgd.plotsafe.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774003098, "uuid": "e89cd1a8-2448-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.237.16:34350/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774003210, "uuid": "2b7642f9-2449-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://innultra.plotsafe.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774003282, "uuid": "568dd5b0-2449-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.18.48:44270/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774003326, "uuid": "70644f18-2449-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.197.49:44787/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774003337, "uuid": "7707d499-2449-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.82.206:38670/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774003448, "uuid": "b94d61f3-2449-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://132.145.235.110:2/agent.exe", "Tag": [ { "name": "Ligolo", "colour": "#BDEABC", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774003630, "uuid": "25bf4068-244a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dynfluxon.plotsafe.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774003928, "uuid": "d7899222-244a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.32.228:45526/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774004047, "uuid": "1e6e3ea5-244b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://streamglo.plotsafe.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774004827, "uuid": "ef5f8e63-244c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.197.49:44787/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774004827, "uuid": "ef690202-244c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.201.196:36728/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774004828, "uuid": "efb028af-244c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://streamnoble.gothrough.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774004895, "uuid": "1807e9de-244d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.82.206:38670/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774004947, "uuid": "36cc50c5-244d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://delivergolden.gothrough.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774005197, "uuid": "cbce9b2c-244d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.231.176:49841/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774005427, "uuid": "549a7780-244e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://rav3n-span.gothrough.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774005440, "uuid": "5c7cc5a6-244e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.137.51:33799/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774005442, "uuid": "5d98e68d-244e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.112.243:41561/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774005611, "uuid": "c2928b03-244e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://uwor76f8.oaknet.digital/?=check&&actmn=drvTptepxZwxHxGJ", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774005680, "uuid": "ebd1ec96-244e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.151.65:38339/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774005786, "uuid": "2b17d18f-244f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://iwug.gothrough.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774006268, "uuid": "49fb9fb5-2450-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://arktideix1.dombove.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774006517, "uuid": "de97ec61-2450-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.231.176:49841/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774006628, "uuid": "208ed68f-2451-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.201.196:36728/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774006630, "uuid": "21e9f89d-2451-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dusdyna.dombove.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774006931, "uuid": "d54b18ef-2451-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.100.99:46128/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774006986, "uuid": "f660c9dc-2451-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://fsrwr05.dombove.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007119, "uuid": "459c4bc4-2452-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.137.51:33799/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007228, "uuid": "86157be1-2452-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/BramSkiee/fishxcode/raw/refs/heads/main/es/Software_v2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007228, "uuid": "861e4827-2452-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/BramSkiee/fishxcode/refs/heads/main/es/Software_v2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007228, "uuid": "863b4ea6-2452-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/kattimatti22/vibecode-playground/refs/heads/main/hooks/playground_vibecode_2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007228, "uuid": "863fc5ee-2452-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/danieltulus/Bit-of-Business-OS/refs/heads/master/images/OS_Bit_of_Business_v2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007228, "uuid": "864d7671-2452-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/kattimatti22/vibecode-playground/raw/refs/heads/main/hooks/playground_vibecode_2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007228, "uuid": "8653bcda-2452-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/danieltulus/010-020-022_datamining_polibatam/refs/heads/master/scaturient/polibatam-datamining-v2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007228, "uuid": "867aee86-2452-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/danieltulus/010-020-022_datamining_polibatam/raw/refs/heads/master/scaturient/polibatam-datamining-v2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007228, "uuid": "867b43ad-2452-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/danieltulus/notes-app-back-end/raw/refs/heads/master/node_modules/nopt/notes-end-app-back-2.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007229, "uuid": "86cf36b0-2452-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/danieltulus/bookshelf-api-submission/raw/refs/heads/master/robustiously/submission_bookshelf_api_1.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007229, "uuid": "86d47ea2-2452-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/danieltulus/Bit-of-Business-OS/raw/refs/heads/master/images/OS_Bit_of_Business_v2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007229, "uuid": "86d58f73-2452-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/danieltulus/bookshelf-api-submission/refs/heads/master/robustiously/submission_bookshelf_api_1.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007229, "uuid": "86de3d61-2452-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/danieltulus/rest-api-app/raw/refs/heads/main/flaskr/rest_app_api_2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007229, "uuid": "86e07345-2452-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/danieltulus/notes-app-back-end/refs/heads/master/node_modules/nopt/notes-end-app-back-2.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007229, "uuid": "86e491a9-2452-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/danieltulus/rest-api-app/refs/heads/main/flaskr/rest_app_api_2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007408, "uuid": "f1c25b90-2452-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.151.65:38339/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007469, "uuid": "161e8d73-2453-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://visualfier.dombove.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007709, "uuid": "a516500f-2453-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/charlieallen16/vibeshell/refs/heads/master/src/components/EditServerDialog/Software_v3.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007710, "uuid": "a5592966-2453-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/charlieallen16/vibeshell/raw/refs/heads/master/src/components/EditServerDialog/Software_v3.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007710, "uuid": "a559871c-2453-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/dellarwalter/ThrottleAI/raw/refs/heads/main/examples/AI_Throttle_2.2-beta.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007711, "uuid": "a5f159b9-2453-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/dellarwalter/ThrottleAI/refs/heads/main/examples/AI_Throttle_2.2-beta.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774007886, "uuid": "0ea7be51-2454-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://harvestedit.doabove.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774008186, "uuid": "c15a477e-2454-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://reef-dat.doabove.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774008318, "uuid": "101de3bb-2455-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.0.118:47266/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774008426, "uuid": "507c2557-2455-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.100.99:46128/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774008427, "uuid": "514c34e8-2455-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.118.156:40791/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774008615, "uuid": "c0f8c277-2455-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://mercoreet5.doabove.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774008796, "uuid": "2d0c7dd4-2456-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.1.168:49421/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774008908, "uuid": "6fb6e1d3-2456-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/MannKalariya/powersub-demo-1078/refs/heads/main/shufflingly/demo_powersub_v2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774008908, "uuid": "6fd8ff80-2456-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/MannKalariya/powersub-demo-1078/raw/refs/heads/main/shufflingly/demo_powersub_v2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774008909, "uuid": "7012b636-2456-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/MannKalariya/Digital-Resume-Builder/raw/refs/heads/main/public/Digital-Builder-Resume-predramatic.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774008909, "uuid": "701cb8f3-2456-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/MannKalariya/Portfoilio/raw/refs/heads/main/.vscode/Software-1.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774008909, "uuid": "702054d3-2456-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/MannKalariya/Digital-Resume-Builder/refs/heads/main/public/Digital-Builder-Resume-predramatic.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774008909, "uuid": "70205ceb-2456-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/MannKalariya/BO6-SecretLoadouts/refs/heads/main/stepbrother/B-Secret-Loadouts-1.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774008910, "uuid": "709f2196-2456-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/MannKalariya/Portfoilio/refs/heads/main/.vscode/Software-1.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774008910, "uuid": "70c8c3a1-2456-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/MannKalariya/BO6-SecretLoadouts/raw/refs/heads/main/stepbrother/B-Secret-Loadouts-1.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774008918, "uuid": "75da98a3-2456-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.0.118:47266/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774009087, "uuid": "da4eb749-2456-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://trilineix.doabove.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774009451, "uuid": "b332a689-2457-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://kel-nexis.currvers.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774009576, "uuid": "fe213a94-2457-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.114.59.22:54479/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774009627, "uuid": "1c6ec6d8-2458-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.28.195:58680/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774009689, "uuid": "417d4744-2458-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/1781548144/nKZgdKm.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774009865, "uuid": "aa308b0a-2458-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://frozenlayout.currvers.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774010175, "uuid": "62df3c49-2459-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.191.80:57983/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774010227, "uuid": "81ce963a-2459-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.249.78.255:38086/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774010287, "uuid": "a587cb46-2459-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ndakntj.currvers.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774010416, "uuid": "f2aaeb46-2459-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.1.168:49421/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774010826, "uuid": "e6ee556e-245a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.28.195:58680/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774010900, "uuid": "1324888f-245b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.114.59.22:54479/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774010948, "uuid": "2fddaec8-245b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ravenreview.currvers.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774011128, "uuid": "9af65e78-245b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.78.200:56363/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774011187, "uuid": "bde59a88-245b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://opticsval.withregw.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774011427, "uuid": "4d3e3aa1-245c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://anch0-bridge.withregw.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774011726, "uuid": "ff7be928-245c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.249.78.255:38086/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774011849, "uuid": "486cb99c-245d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://neo-rnount.withregw.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774012027, "uuid": "b29d0dc3-245d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.123.210:55914/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774012269, "uuid": "43281912-245e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://proto-h4ul.withregw.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774012567, "uuid": "f46e4baf-245e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://normarkal9.gothrough.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774012630, "uuid": "19f150e2-245f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.78.200:56363/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774012631, "uuid": "1b0e2b6d-245f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.91.63.194:36568/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774012754, "uuid": "64080516-245f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.188.200:51937/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774012823, "uuid": "8d6336fd-245f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.203.201:55599/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774012928, "uuid": "cbe2a248-245f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.186.228.165:49909/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774012997, "uuid": "f5001909-245f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.237.29:51625/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774013226, "uuid": "7db7625b-2460-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.91.63.194:36568/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774013290, "uuid": "a3d1a9eb-2460-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.162.223.228:34429/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774013347, "uuid": "c5d5d5fb-2460-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://flerai.dombove.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774013359, "uuid": "ccc3375c-2460-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.188.200:51937/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774013527, "uuid": "30c84a6d-2461-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://trac-glade.doabove.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774013527, "uuid": "30ccf623-2461-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.123.210:55914/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774013718, "uuid": "a2baea75-2461-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.27.208:36681/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774013827, "uuid": "e39f5968-2461-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://arkcrest7is.currvers.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774014128, "uuid": "96fb45be-2462-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.34.109.121:49345/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774014377, "uuid": "2b510656-2463-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.231.36:60213/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774014550, "uuid": "924cd894-2463-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://nlcygd.withregw.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774014728, "uuid": "fc93e3ff-2463-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sensorsupp.trueslak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774014728, "uuid": "fcbebd3a-2463-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.194.23:51772/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774015027, "uuid": "aeca9305-2464-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.3.1:36234/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774015029, "uuid": "b04d9329-2464-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://mewmm.trueflow.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774015099, "uuid": "d9f60d0d-2464-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.162.223.228:34429/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774015100, "uuid": "da32bdf1-2464-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.3.223:37239/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774015579, "uuid": "f831c5ae-2465-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.118.156:40791/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774015628, "uuid": "14e661fc-2466-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.176.97:38114/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774015690, "uuid": "39d31d57-2466-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://illumewholes.capslock.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774015818, "uuid": "86720db5-2466-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.231.36:60213/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774015867, "uuid": "a359cd12-2466-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://d3fen-cache.infosafe.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774016167, "uuid": "566b1d31-2467-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://s1gna1-track.plotsafe.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774016467, "uuid": "095677ec-2468-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dc1sync.analyticspoint.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774016529, "uuid": "2e661587-2468-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.74.105:41436/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774016722, "uuid": "a0f9a47b-2468-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.3.223:37239/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774016768, "uuid": "bc6ac92b-2468-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dc2data.analyticspoint.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774017034, "uuid": "5af239fe-2469-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.198.141:55413/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774017308, "uuid": "fe875125-2469-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/7782139129/1fz7hzL.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774017427, "uuid": "4564374b-246a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.12.83.68/321/goodforeveryonetogetit.hta", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774017428, "uuid": "4617587a-246a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.176.97:38114/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774017430, "uuid": "47578cdf-246a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dc4static.analyticspoint.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774017430, "uuid": "477e0c58-246a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.168.5.54/img/optimized_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774017849, "uuid": "40f677e5-246b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vol1meta.infrastructurebase.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774018147, "uuid": "f2c04471-246b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vol2proc.infrastructurebase.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774018162, "uuid": "fba89af9-246b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.76.249:54431/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774018330, "uuid": "5ff1e9b0-246c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.183.121:37835/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774018509, "uuid": "ca0fbe6d-246c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vol3gate.infrastructurebase.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774018633, "uuid": "142641ab-246d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.177.107.90:46573/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774018689, "uuid": "35b4529e-246d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.198.141:55413/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774018809, "uuid": "7d4e47cc-246d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vol4sync.infrastructurebase.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774019003, "uuid": "f0cb0099-246d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.131.250:55513/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774019119, "uuid": "35ef14c2-246e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.29.195:57588/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774019167, "uuid": "52ad3347-246e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://app1store.telemetryservice.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774019467, "uuid": "0524ee13-246f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://app2remote.telemetryservice.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774019527, "uuid": "291d41a4-246f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.252.211:53634/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774019530, "uuid": "2b2daf59-246f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.78.191.254:57162/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774019827, "uuid": "dc16a872-246f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://app3dev.telemetryservice.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774020190, "uuid": "b42d1bc8-2470-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://app4link.telemetryservice.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774020549, "uuid": "8a912994-2471-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dc1proc.platformendpoint.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774020554, "uuid": "8d542e8f-2471-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.237.78:47344/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774020622, "uuid": "b59d3b2a-2471-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.131.250:55513/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774020847, "uuid": "3bb8b299-2472-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dc2power.platformendpoint.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774021211, "uuid": "14aa4463-2473-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dc3local.platformendpoint.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774021509, "uuid": "c67f8f58-2473-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dc4work.platformendpoint.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774021518, "uuid": "cc154aec-2473-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.89.237.112/1.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774021627, "uuid": "0cc25e17-2474-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.253.250:51979/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774021699, "uuid": "377e7f36-2474-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.26.226.171:52208/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774021818, "uuid": "7edd607c-2474-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.43.5.24:45030/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774021926, "uuid": "bf209f03-2474-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.253.250:51979/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774021991, "uuid": "e60f26f2-2474-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vol1infra.diagnosticresource.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774022170, "uuid": "507f7b17-2475-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vol2base.diagnosticresource.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774022228, "uuid": "72c94b23-2475-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.8.128:53522/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774022588, "uuid": "49d0f913-2476-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vol3user.diagnosticresource.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774022603, "uuid": "52560e43-2476-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.84.142:39669/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774022829, "uuid": "d9041ba6-2476-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.54.240:56556/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774022833, "uuid": "db6a842e-2476-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vol4link.diagnosticresource.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774023022, "uuid": "4c969296-2477-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.174.106.223:44857/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774023190, "uuid": "b023f7b6-2477-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://app1proc.managementgateway.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774023489, "uuid": "62b3a676-2478-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://app2core.managementgateway.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774023498, "uuid": "683fa071-2478-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.43.5.24:45030/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774023727, "uuid": "f0806797-2478-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.8.128:53522/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774023850, "uuid": "39b0cd62-2479-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://app3ghost.managementgateway.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774023985, "uuid": "8a8fb4c5-2479-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.160.228:54183/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774024212, "uuid": "118ecb6e-247a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://app4view.managementgateway.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774024218, "uuid": "153f4cb6-247a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.251.214:49768/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774024273, "uuid": "361d6a07-247a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.84.142:39669/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774024326, "uuid": "5594d868-247a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.54.240:56556/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774024567, "uuid": "e5524fa3-247a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dc1proc.operationalsystem.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774024579, "uuid": "ec5dec48-247a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.174.106.223:44857/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774024866, "uuid": "97a53343-247b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dc2point.operationalsystem.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774024928, "uuid": "bc2e7979-247b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.31.224:40470/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774025118, "uuid": "2d89d3d4-247c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.222.14:53357/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774025298, "uuid": "98d5e73f-247c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.160.228:54183/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774025526, "uuid": "20ffedcc-247d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dc4path.operationalsystem.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774025887, "uuid": "f821c7ba-247d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vol1proc.connectivitynode.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774026246, "uuid": "cdb84f52-247e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vol2outer.connectivitynode.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774026548, "uuid": "81be71eb-247f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vol3field.connectivitynode.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774026846, "uuid": "337958ee-2480-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vol4space.connectivitynode.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774027267, "uuid": "2e55454a-2481-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://app1proc.distributedmatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774027391, "uuid": "7857d3be-2481-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.1.175:52131/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774027460, "uuid": "a146a959-2481-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.222.14:53357/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774027511, "uuid": "bfd19526-2481-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://app2steel.distributedmatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774027521, "uuid": "c5e8d5ec-2481-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.101.145:60207/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774027926, "uuid": "b7934a5b-2482-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://app3core.distributedmatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774028058, "uuid": "0631a3f0-2483-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.120.234:52713/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774028227, "uuid": "6afa7768-2483-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://app4sat.distributedmatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774028291, "uuid": "90e4a3da-2483-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.253.48:38620/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774028648, "uuid": "65e31a0a-2484-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dc1infra.applicationbuffer.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774028709, "uuid": "89c9bf02-2484-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dgp13ezr.winddev.digital/?=check&&actmn=juwRQGoaJFQJrxaD", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774028826, "uuid": "cffd132d-2484-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.83.201:50550/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774028949, "uuid": "1937fddd-2485-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dc2proxy.applicationbuffer.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774029017, "uuid": "41e520ca-2485-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.101.145:60207/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774029125, "uuid": "823528cd-2485-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.23.65:38850/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774029249, "uuid": "cb9f6e9e-2485-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dc3data.applicationbuffer.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774029547, "uuid": "7d65371c-2486-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dc4point.applicationbuffer.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774029555, "uuid": "82770c6e-2486-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.120.234:52713/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774029674, "uuid": "c972aaa7-2486-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.25.220:51243/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774029968, "uuid": "784a7331-2487-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://res1sync.analyticsprocessing.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774030266, "uuid": "2a35840a-2488-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://res2data.analyticsprocessing.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774030326, "uuid": "4e1ee8cb-2488-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.229.188:60557/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774030518, "uuid": "c029b3f8-2488-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.8.167:37698/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774030628, "uuid": "01b96cad-2489-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://res3edge.analyticsprocessing.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774030992, "uuid": "dad6b232-2489-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://res4static.analyticsprocessing.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774031050, "uuid": "fd84638e-2489-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.98.97.145:34651/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774031238, "uuid": "6d5d3718-248a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.77.246:43708/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774031350, "uuid": "b00211ab-248a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pnt1meta.infrastructurecloud.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774031526, "uuid": "18e5cd35-248b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.13.91:60566/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774031648, "uuid": "61f30a99-248b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pnt2proc.infrastructurecloud.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774032007, "uuid": "37e783b1-248c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pnt3gate.infrastructurecloud.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774032019, "uuid": "3f198b73-248c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.98.97.145:34651/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774032126, "uuid": "7ed9224c-248c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.69.236:39999/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774032196, "uuid": "a87c327c-248c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.8.167:37698/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774032366, "uuid": "0d7ed87f-248d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pnt4sync.infrastructurecloud.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774032668, "uuid": "c1d2f305-248d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/8074464496/Fu4sGxz.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774032670, "uuid": "c2b60697-248d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://loc1store.telemetryinterface.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774032740, "uuid": "ec97e93d-248d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.246.84:47528/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774032858, "uuid": "32ecb73a-248e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.107.41:52389/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774032973, "uuid": "77703576-248e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://loc2remote.telemetryinterface.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774033033, "uuid": "9b38246f-248e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.25.220:51243/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774033164, "uuid": "e95cfaca-248e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.241.22:55500/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774033267, "uuid": "2687e2c3-248f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/DaniloRasovic/powersub-demo-1807/raw/refs/heads/main/Smilax/demo-powersub-v2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774033280, "uuid": "2e673b37-248f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.187.212:33650/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774033328, "uuid": "4aeca36e-248f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/arpan02/pwskills_assignment/raw/refs/heads/main/bucolic/assignment-pwskills-v1.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774033328, "uuid": "4b07e1f6-248f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/DaniloRasovic/powersub-demo-1807/refs/heads/main/Smilax/demo-powersub-v2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774033328, "uuid": "4b1914fa-248f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/arpan02/pwskills_assignment/refs/heads/main/bucolic/assignment-pwskills-v1.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774033328, "uuid": "4b1b2d87-248f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/arpan02/ecommerce_frontend/refs/heads/main/src/pages/CollectionPage/CollectionPageMenu/frontend-ecommerce-v1.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774033328, "uuid": "4b1faed4-248f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Players123/soenneker.gen.adapt/refs/heads/master/priority/soenneker-gen-adapt-nervimuscular.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774033328, "uuid": "4b205804-248f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/arpan02/open-webui-rust/refs/heads/main/static/assets/fonts/open_rust_webui_1.4-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774033328, "uuid": "4b24bc98-248f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/arpan02/open-webui-rust/raw/refs/heads/main/static/assets/fonts/open_rust_webui_1.4-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774033329, "uuid": "4ba51c94-248f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Players123/soenneker.gen.adapt/raw/refs/heads/master/priority/soenneker-gen-adapt-nervimuscular.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774033329, "uuid": "4baada24-248f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/arpan02/assignment/raw/refs/heads/main/pluricipital/Software_v1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774033329, "uuid": "4baaeb58-248f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/arpan02/ecommerce_frontend/raw/refs/heads/main/src/pages/CollectionPage/CollectionPageMenu/frontend-ecommerce-v1.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774034227, "uuid": "62b8281c-2491-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.69.236:39999/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774034227, "uuid": "62c9f02e-2491-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/arpan02/assignment/refs/heads/main/pluricipital/Software_v1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774034227, "uuid": "62e33cd2-2491-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.13.91:60566/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774034227, "uuid": "62e635b9-2491-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/arpan02/ecommerce_backend/raw/refs/heads/main/controllers/backend-ecommerce-1.4-beta.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774034227, "uuid": "63273cee-2491-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/arpan02/ecommerce_backend/refs/heads/main/controllers/backend-ecommerce-1.4-beta.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774034230, "uuid": "64b9d24e-2491-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://loc4link.telemetryinterface.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774034231, "uuid": "651905c7-2491-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://loc3dev.telemetryinterface.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774034238, "uuid": "6958de31-2491-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.230.127.196:36861/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774034239, "uuid": "6a4e028c-2491-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://res1proc.platformcontroller.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774034347, "uuid": "aa3ed055-2491-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://res2power.platformcontroller.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774034357, "uuid": "b06c0975-2491-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.246.84:47528/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774034602, "uuid": "42a958e9-2492-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.118.66:40554/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774034646, "uuid": "5cefdb9b-2492-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://res3local.platformcontroller.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774034727, "uuid": "8ce1c88d-2492-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.187.212:33650/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774035066, "uuid": "56f0aab0-2493-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://res4work.platformcontroller.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774035126, "uuid": "7a9353a8-2493-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.49.161:49392/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774035190, "uuid": "a1124004-2493-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.118.66:40554/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774035246, "uuid": "c2589908-2493-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.240.253.55:48881/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774035311, "uuid": "e914a9da-2493-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pnt1infra.diagnosticendpoint.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774035318, "uuid": "ed9454c0-2493-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.241.22:55500/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774035668, "uuid": "bde9d9e8-2494-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pnt2base.diagnosticendpoint.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774035726, "uuid": "e030ee83-2494-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.114.50:51629/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774035977, "uuid": "75ca9227-2495-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.74.105:41436/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774036032, "uuid": "96f188a2-2495-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.214.191.18:54341/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774036086, "uuid": "b729de13-2495-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pnt3user.diagnosticendpoint.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774036333, "uuid": "4a0d87e5-2496-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pnt4link.diagnosticendpoint.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774036689, "uuid": "1e61d1c5-2497-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://loc1proc.managementresource.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774036880, "uuid": "9017bb6e-2497-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.40.50:38654/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774037046, "uuid": "f351f6ad-2497-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://loc2core.managementresource.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774037237, "uuid": "64cece81-2498-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.163.134.250:42543/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774037708, "uuid": "7d9df934-2499-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://loc4view.managementresource.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774038133, "uuid": "7ae93190-249a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://res1proc.operationalgateway.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774038427, "uuid": "2a5f586d-249b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://res2point.operationalgateway.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774038558, "uuid": "78932467-249b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.40.50:38654/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774038665, "uuid": "b83aab5e-249b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://res3view.operationalgateway.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774038726, "uuid": "dc9d69a2-249b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.118.124:48559/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774038727, "uuid": "dd2cb25a-249b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.118.124:48559/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774038983, "uuid": "75d03912-249c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.163.134.250:42543/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774039088, "uuid": "b46efa57-249c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://res4path.operationalgateway.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774039574, "uuid": "d6280b6b-249d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.93.65:57143/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774039687, "uuid": "19a5ba28-249e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pnt1proc.connectivitybuffer.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774039866, "uuid": "845684c6-249e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pnt2outer.connectivitybuffer.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774039987, "uuid": "cc6e1325-249e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pnt3field.connectivitybuffer.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774040347, "uuid": "a2a363b5-249f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/7776573655/8RPb9TK.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774040408, "uuid": "c70ffb29-249f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pnt4space.connectivitybuffer.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774040709, "uuid": "7abd7e0b-24a0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/arkaih/arkaih.github.io/refs/heads/main/untractably/github-io-arkaih-v1.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774040710, "uuid": "7b18e43d-24a0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/2332245/2332245.github.io/refs/heads/main/endlichite/github_io_v3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774040710, "uuid": "7b24604f-24a0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/2332245/starspring/raw/refs/heads/main/starspring/decorators/Software-v3.8-beta.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774040710, "uuid": "7b2a650c-24a0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/2332245/2332245.github.io/raw/refs/heads/main/endlichite/github_io_v3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774040710, "uuid": "7b2a7c3b-24a0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/69IR/OpenSem/raw/refs/heads/main/configs/Sem_Open_v2.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774040710, "uuid": "7b2b6dd8-24a0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/69IR/OpenSem/refs/heads/main/configs/Sem_Open_v2.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774040710, "uuid": "7b2facbd-24a0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/69IR/69ir.github.io/refs/heads/main/outbring/io_github_ir_v3.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774040710, "uuid": "7b2fc303-24a0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/2332245/starspring/refs/heads/main/starspring/decorators/Software-v3.8-beta.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774040710, "uuid": "7b300e82-24a0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/arkaih/VPS_BOT_X/refs/heads/main/vps_bot-x/modules/X_BO_VP_pitying.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774040710, "uuid": "7b39075b-24a0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/arkaih/arkaih.github.io/raw/refs/heads/main/untractably/github-io-arkaih-v1.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774040710, "uuid": "7b5b23ed-24a0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/69IR/69ir.github.io/raw/refs/heads/main/outbring/io_github_ir_v3.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774041668, "uuid": "b67294d5-24a2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.204.252.240:50788/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774041669, "uuid": "b6999205-24a2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/longtengsiha/arbitrum-dapp-skill/refs/heads/main/references/arbitrum_dapp_skill_2.7-beta.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774041669, "uuid": "b699966c-24a2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/KontolKambings/kontolkambings.github.io/refs/heads/main/drawfiling/io_kontolkambings_github_2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774041669, "uuid": "b69999f6-24a2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/longtengsiha/arbitrum-dapp-skill/raw/refs/heads/main/references/arbitrum_dapp_skill_2.7-beta.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774041669, "uuid": "b69a001f-24a2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/KontolKambings/ai-inference-resources/refs/heads/main/android/app/src/profile/resources_inference_ai_1.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774041669, "uuid": "b6c370c7-24a2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/sablive25/IranPipFix/refs/heads/main/spangled/Fix-Pip-Iran-1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774041669, "uuid": "b6d1bb1c-24a2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/sablive25/IranPipFix/raw/refs/heads/main/spangled/Fix-Pip-Iran-1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774041669, "uuid": "b6d1c82d-24a2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.84.213.31:43364/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774041669, "uuid": "b6db9f68-24a2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://loc3core.distributednetwork.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774041669, "uuid": "b6e4a759-24a2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://loc2steel.distributednetwork.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774041670, "uuid": "b71c8079-24a2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/sablive25/sablive25.github.io/raw/refs/heads/main/tumor/io-github-sablive-1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774041670, "uuid": "b7260f3f-24a2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/sablive25/sablive25.github.io/refs/heads/main/tumor/io-github-sablive-1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774041670, "uuid": "b749d04b-24a2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/KontolKambings/ai-inference-resources/raw/refs/heads/main/android/app/src/profile/resources_inference_ai_1.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774041671, "uuid": "b7af803a-24a2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/KontolKambings/kontolkambings.github.io/raw/refs/heads/main/drawfiling/io_kontolkambings_github_2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774041672, "uuid": "b8caa01f-24a2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://loc1proc.distributednetwork.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774041682, "uuid": "be8584ae-24a2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.24.253:39150/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774041683, "uuid": "bef0a140-24a2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.93.65:57143/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774041731, "uuid": "dbf648e0-24a2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://loc4sat.distributednetwork.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774041803, "uuid": "06d66030-24a3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.36.18:55606/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774042026, "uuid": "8bd12343-24a3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://res1infra.applicationservice.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774042326, "uuid": "3e4a939d-24a4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.204.252.240:50788/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774042387, "uuid": "62f110f5-24a4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/davirenner88-rgb/davirenner88-rgb.github.io/raw/refs/heads/main/telewriter/io-davirenner-rgb-github-v2.6-alpha.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774042388, "uuid": "630f2883-24a4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/XrecentX/xrecentx.github.io/refs/heads/main/carpentry/io-github-xrecentx-v2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774042388, "uuid": "63176662-24a4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/davirenner88-rgb/davirenner88-rgb.github.io/refs/heads/main/telewriter/io-davirenner-rgb-github-v2.6-alpha.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774042388, "uuid": "632b1a5a-24a4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/XrecentX/xrecentx.github.io/refs/heads/main/carpentry/github_xrecentx_io_burnisher.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774042388, "uuid": "6348f027-24a4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/davirenner88-rgb/davirenner88-rgb.github.io/refs/heads/main/telewriter/io_davirenner_rgb_github_2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774042388, "uuid": "634d4748-24a4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/davirenner88-rgb/davirenner88-rgb.github.io/raw/refs/heads/main/telewriter/io_davirenner_rgb_github_2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774042388, "uuid": "635a1db1-24a4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/XrecentX/xrecentx.github.io/raw/refs/heads/main/carpentry/github_xrecentx_io_burnisher.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774042388, "uuid": "6378141d-24a4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/XrecentX/xrecentx.github.io/raw/refs/heads/main/carpentry/io-github-xrecentx-v2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774042388, "uuid": "639377f6-24a4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/XrecentX/vllm-skills/raw/refs/heads/main/skills/skills_vllm_2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774042389, "uuid": "63c164d7-24a4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/davirenner88-rgb/LR-S/refs/heads/master/gamesv/src/logic/Level/S_L_1.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774042389, "uuid": "63cef26b-24a4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/davirenner88-rgb/LR-S/raw/refs/heads/master/gamesv/src/logic/Level/S_L_1.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774042446, "uuid": "85b04be3-24a4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/XrecentX/vllm-skills/refs/heads/main/skills/skills_vllm_2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774042446, "uuid": "861babd5-24a4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://res2proxy.applicationservice.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774042590, "uuid": "dbe002d5-24a4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.24.253:39150/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774042746, "uuid": "38be9d60-24a5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://res3data.applicationservice.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774042867, "uuid": "80e41ddf-24a5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/UmarMoin22/claude-code-startup-skills/refs/heads/main/skills/compress-images/skills_claude_code_startup_v1.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774042867, "uuid": "80ff0121-24a5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/UmarMoin22/umarmoin22.github.io/refs/heads/main/palpableness/io_github_umarmoin_3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774042867, "uuid": "81018532-24a5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/UmarMoin22/claude-code-startup-skills/raw/refs/heads/main/skills/compress-images/skills_claude_code_startup_v1.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774042867, "uuid": "810196f3-24a5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/UmarMoin22/umarmoin22.github.io/refs/heads/main/palpableness/umarmoin_github_io_2.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774042867, "uuid": "81019b88-24a5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/UmarMoin22/SQL-PowerBI-Projects/refs/heads/main/herbivore/B-Power-SQ-Projects-v1.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774042867, "uuid": "8105e806-24a5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/UmarMoin22/umarmoin22.github.io/raw/refs/heads/main/palpableness/io_github_umarmoin_3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774042868, "uuid": "813378f0-24a5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/UmarMoin22/SQL-PowerBI-Projects/refs/heads/main/herbivore/Projects_SQ_Power_B_v3.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774042869, "uuid": "81d94438-24a5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/UmarMoin22/umarmoin22.github.io/raw/refs/heads/main/palpableness/umarmoin_github_io_2.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774042874, "uuid": "850f10f8-24a5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/UmarMoin22/SQL-PowerBI-Projects/raw/refs/heads/main/herbivore/B-Power-SQ-Projects-v1.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774042874, "uuid": "85215072-24a5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/UmarMoin22/SQL-PowerBI-Projects/raw/refs/heads/main/herbivore/Projects_SQ_Power_B_v3.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774043185, "uuid": "3e878cfd-24a6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.67.155:43515/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774043476, "uuid": "ebd206fa-24a6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.36.18:55606/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774043603, "uuid": "37693a94-24a7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.224.97:55095/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774043647, "uuid": "51c25cc6-24a7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vld1sync.cyberneticsystems.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774044009, "uuid": "2941fd2d-24a8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vld2data.cyberneticsystems.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774044307, "uuid": "db0cf565-24a8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vld3edge.cyberneticsystems.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774044669, "uuid": "b2c7b0c7-24a9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.67.155:43515/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774044726, "uuid": "d4e0932b-24a9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vld4static.cyberneticsystems.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774045028, "uuid": "88aa915a-24aa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext1meta.analyticalhubnode.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774045099, "uuid": "b3675012-24aa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.224.97:55095/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774045455, "uuid": "8796e34e-24ab-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.162.221:35569/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774045511, "uuid": "a8f0e47d-24ab-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.162.221:35569/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774045687, "uuid": "11fcf602-24ac-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext3gate.analyticalhubnode.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774045927, "uuid": "a0b7c9d9-24ac-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.86.122:35733/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774045986, "uuid": "c433344e-24ac-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext4sync.analyticalhubnode.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774046049, "uuid": "e94cdbd8-24ac-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.230:50132/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774046348, "uuid": "9b71f869-24ad-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://int1store.securitybackbone.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774046539, "uuid": "0d710054-24ae-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.48.81:42778/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774046593, "uuid": "2dfe6e9e-24ae-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.120.224:44258/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774046709, "uuid": "7323149f-24ae-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://int2remote.securitybackbone.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774047067, "uuid": "47fae5b8-24af-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://int3dev.securitybackbone.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774047490, "uuid": "44845ea5-24b0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.230:50132/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774047562, "uuid": "6f89fea9-24b0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.96.197:51129/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774047666, "uuid": "ad8b8444-24b0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://int4link.securitybackbone.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774047788, "uuid": "f5bf39dd-24b0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vld1proc.dataintegritynet.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774048147, "uuid": "cc2962c3-24b1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.243.62:37787/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774048326, "uuid": "36b3cadf-24b2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.215.152:53334/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774048626, "uuid": "e97c96e0-24b2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vld3local.dataintegritynet.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774048757, "uuid": "378f16ad-24b3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.120.224:44258/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774048808, "uuid": "55af776b-24b3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vld4work.dataintegritynet.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774048926, "uuid": "9c352074-24b3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.215.152:53334/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774049048, "uuid": "e4d23f4f-24b3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext1infra.operationalmatrix.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774049346, "uuid": "96bef382-24b4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext2base.operationalmatrix.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774049415, "uuid": "bfa15afc-24b4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.243.62:37787/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774049646, "uuid": "494b0575-24b5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext3user.operationalmatrix.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774050022, "uuid": "2967043f-24b6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.48.81:42778/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774050197, "uuid": "919d0e01-24b6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.49.9:44374/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774050367, "uuid": "f7393075-24b6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://int1proc.virtualgatekeeper.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774050496, "uuid": "441d8ae1-24b7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.67.68:34932/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774050858, "uuid": "1ba8dbcb-24b8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.69.99:43722/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774051027, "uuid": "80616dd7-24b8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://int3ghost.virtualgatekeeper.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774051146, "uuid": "c782cb2d-24b8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/8434554557/X8cqVrA.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774021807, "uuid": "77deda21-2474-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.43.5.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773970024, "uuid": "e726295b-23fb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "101.108.13.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774017425, "uuid": "4473c06d-246a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "104.168.5.54", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774018144, "uuid": "f0de9336-246b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.76.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773991623, "uuid": "312e72d4-242e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.23.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773968225, "uuid": "b688f2ac-23f7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.38.199.162", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774004825, "uuid": "eded88d7-244c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.38.201.196", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774010224, "uuid": "802d0b96-2459-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.249.78.255", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774019525, "uuid": "27f5b231-246f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.78.191.254", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774031045, "uuid": "fa9a62f1-2489-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.98.97.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773974823, "uuid": "13bf2d3e-2407-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.57.13", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774034225, "uuid": "618ff564-2491-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.230.127.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774041785, "uuid": "fc2d266d-24a2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.36.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774005184, "uuid": "c3ec5ff7-244d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.231.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774014365, "uuid": "2490bc31-2463-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.231.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773987545, "uuid": "b24f33a0-2424-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.40.10", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774027506, "uuid": "bd39d92b-2481-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.54.101.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774018985, "uuid": "e5d342c2-246d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.131.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774005665, "uuid": "e29685f1-244e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.151.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773989284, "uuid": "bed67b6c-2428-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.205.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773968944, "uuid": "637ee029-23f9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.8.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773989465, "uuid": "2aa8a2fc-2429-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.165.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773986225, "uuid": "9f67355b-2421-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.102.97", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773994145, "uuid": "1029ae69-2434-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.5.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773989764, "uuid": "dd15c861-2429-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.230.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773974224, "uuid": "ae9c1adf-2405-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.32.248", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774046584, "uuid": "281a1a96-24ae-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.120.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773977644, "uuid": "a4da1bbd-240d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.221.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774046525, "uuid": "0508a691-24ae-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.48.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773967263, "uuid": "795ab72b-23f5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.92.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773973444, "uuid": "ddc97146-2403-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.49.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774003264, "uuid": "4bccdc37-2449-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.18.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773972124, "uuid": "caa5c6f5-2400-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.142.202", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773969124, "uuid": "cec31e13-23f9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.181.182", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773982324, "uuid": "8a57fac7-2418-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.79.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773986884, "uuid": "285b0bfb-2423-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.142.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773970205, "uuid": "52e57fb1-23fc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.251.162.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773993124, "uuid": "afdf600d-2431-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.26.226.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774012624, "uuid": "16ca9b94-245f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.91.63.194", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774009565, "uuid": "f73ae875-2457-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.114.59.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773988866, "uuid": "c5e6d298-2427-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.117.252.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774024206, "uuid": "0e1be87d-247a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.179.251.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774031225, "uuid": "659e6b1b-248a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.77.246", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774041664, "uuid": "b3fda9ca-24a2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.84.213.31", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773971044, "uuid": "47155172-23fe-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.84.214.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774000325, "uuid": "738a9d4e-2442-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.37.40.52", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774022225, "uuid": "713878be-2475-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.8.128", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774029664, "uuid": "c35ca0fa-2486-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.25.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774009625, "uuid": "1ae147cd-2458-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.28.195", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773987365, "uuid": "473081aa-2424-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.10.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774014725, "uuid": "fafa1f01-2463-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.194.23", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774048144, "uuid": "ca47f448-24b1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.243.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774013284, "uuid": "9fbd16f0-2460-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.162.223.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773987545, "uuid": "b24f3347-2424-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.44.114.162", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774028824, "uuid": "ce958af8-2484-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.83.201", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774043584, "uuid": "2c49eeca-24a7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.224.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774030506, "uuid": "b90300f7-2488-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.8.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774032124, "uuid": "7d6a11a8-248c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.69.236", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773991024, "uuid": "cc28ceea-242c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.65.146.195", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774003444, "uuid": "b727e88c-2449-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "132.145.235.110", "Tag": [ { "name": "Ligolo", "colour": "#BDEABC", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774017005, "uuid": "4a1780d0-2469-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.147.198.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773968164, "uuid": "92ab86c0-23f7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.148.149.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774003324, "uuid": "6f60713b-2449-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.82.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774023006, "uuid": "42e6be44-2477-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.174.106.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773982744, "uuid": "8507e691-2419-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.9.135.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773987545, "uuid": "b24f1e11-2424-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.165.146.103", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773987784, "uuid": "40fd83ac-2425-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.62", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774015085, "uuid": "d1881d8b-2464-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.3.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774024924, "uuid": "ba41caf8-247b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.31.224", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773973324, "uuid": "95f65d0f-2403-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.78.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773972964, "uuid": "bfb1162e-2402-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.35.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774023965, "uuid": "7e89439a-2479-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.160.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773986284, "uuid": "c30ae886-2421-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.158.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774050844, "uuid": "13896380-24b8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.69.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773984725, "uuid": "21465811-241e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "183.92.204.242", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773995106, "uuid": "4cf4ff0e-2436-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.202.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774025106, "uuid": "2695fcb2-247c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.222.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773998526, "uuid": "43433b88-243e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.201.64.178", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773995885, "uuid": "1d3db1aa-2438-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.206.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774036024, "uuid": "9242b6d0-2495-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.214.191.18", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773993724, "uuid": "15a0a418-2433-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.118.218", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774036864, "uuid": "86cdeca5-2497-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.40.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773978125, "uuid": "c3824b47-240e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.156.184", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774020547, "uuid": "88e8abab-2471-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.237.78", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774039565, "uuid": "d083adf3-249d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.93.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773993544, "uuid": "aa2eb8b1-2432-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.161.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774005425, "uuid": "53667b86-244e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.137.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773994985, "uuid": "051bbf9f-2436-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.180.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774045925, "uuid": "9f52dc70-24ac-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.86.122", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773999425, "uuid": "5b3d80e1-2440-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.216.110.222", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773987545, "uuid": "b24f192e-2424-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.103.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773972844, "uuid": "77ce945a-2402-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.70.231.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773983765, "uuid": "e5179334-241b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.180.12.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773965766, "uuid": "fcc9e072-23f1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.180.249.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774033144, "uuid": "dd37c3b0-248e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.241.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774012745, "uuid": "5e87a26d-245f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.188.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774022826, "uuid": "d74b56ca-2476-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.54.240", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773968345, "uuid": "fe5f6a0c-23f7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.40.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773989764, "uuid": "dd15aafb-2429-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.86.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774045444, "uuid": "80ef57d3-24ab-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.233.162.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773965766, "uuid": "fccaf5fe-23f1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.91.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774008425, "uuid": "4f9477bf-2455-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.118.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774000325, "uuid": "738ca268-2442-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.170.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773981124, "uuid": "bf1b2a2e-2415-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.191.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774012806, "uuid": "831ec93f-245f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.7.203.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773980224, "uuid": "a6d71ea9-2413-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.176.109.85", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774018625, "uuid": "0f939994-246d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.177.107.90", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773978725, "uuid": "290a7d1b-2410-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.177.96.245", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773998044, "uuid": "242e41d5-243d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.180.162.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774018325, "uuid": "5cb8ba3a-246c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.180.183.121", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774033265, "uuid": "256736e2-248f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.180.187.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773987124, "uuid": "b736baa7-2423-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.122.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773965945, "uuid": "6793be1e-23f2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.152.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773973205, "uuid": "4f0a349c-2403-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.212.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774022586, "uuid": "48793609-2476-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.84.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774047544, "uuid": "6479f92e-24b0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.96.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773987124, "uuid": "b73794de-2423-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.23.132", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774015625, "uuid": "133735f9-2466-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.176.97", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773969844, "uuid": "7bfdf8d4-23fb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.181.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774021625, "uuid": "0b606702-2474-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.253.250", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773987665, "uuid": "f9c323fd-2424-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.176.118.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774016525, "uuid": "2bb870dc-2468-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.74.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773991324, "uuid": "7efc4b55-242d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "62.94.13.193", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774021507, "uuid": "c53a7ff4-2473-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "80.89.237.112", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773968165, "uuid": "92ba1142-23f7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "access4link.digitalfoundry.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773995405, "uuid": "ff7985c0-2436-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "adzpzg.trueslak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773986165, "uuid": "7c1b5de1-2421-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "alpha1proc.cloudfoundation.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773986645, "uuid": "99f9ba32-2422-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "alpha2core.cloudfoundation.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773987124, "uuid": "b745bb96-2423-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "alpha3ghost.cloudfoundation.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773987605, "uuid": "d65d266f-2424-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "alpha4view.cloudfoundation.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774011424, "uuid": "4b839027-245c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "anch0-bridge.withregw.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774027264, "uuid": "2cded8ba-2481-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "app1proc.distributedmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774023185, "uuid": "ad624280-2477-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "app1proc.managementgateway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774019165, "uuid": "5187d97e-246e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "app1store.telemetryservice.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774023486, "uuid": "61110767-2478-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "app2core.managementgateway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774019465, "uuid": "040ee482-246f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "app2remote.telemetryservice.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774027507, "uuid": "bd47e5af-2481-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "app2steel.distributedmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774027924, "uuid": "b6698f70-2482-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "app3core.distributedmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774019825, "uuid": "dae23405-246f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "app3dev.telemetryservice.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774023846, "uuid": "378dcadb-2479-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "app3ghost.managementgateway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774020186, "uuid": "b1f8a9da-2470-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "app4link.telemetryservice.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774028224, "uuid": "69040ab2-2483-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "app4sat.distributedmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774024206, "uuid": "0e2ea9bd-247a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "app4view.managementgateway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773989886, "uuid": "25aae559-242a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "area1proc.boundarygateway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773990365, "uuid": "43537f3f-242b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "area2outer.boundarygateway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773990724, "uuid": "197d4501-242c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "area3field.boundarygateway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773991206, "uuid": "3898129a-242d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "area4space.boundarygateway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774013825, "uuid": "e23d4845-2461-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "arkcrest7is.currvers.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774000445, "uuid": "bb318c17-2442-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "arkcrestex4.capslock.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773999427, "uuid": "5c77eb61-2440-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "arkspire4ex.capslock.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774006264, "uuid": "47f210f5-2450-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "arktideix1.dombove.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773984306, "uuid": "27c37c0f-241d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "core1infra.systeminterface.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773984844, "uuid": "68a9bfd9-241e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "core2base.systeminterface.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773985325, "uuid": "86db992d-241f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "core3user.systeminterface.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773985684, "uuid": "5d55fe8b-2420-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "core4link.systeminterface.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774015865, "uuid": "a2338bdf-2466-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "d3fen-cache.infosafe.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773988086, "uuid": "f5189e3c-2425-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dark1proc.remotediagnostic.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773988444, "uuid": "ca7e5bb5-2426-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dark2point.remotediagnostic.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773988925, "uuid": "e9213ebb-2427-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dark3view.remotediagnostic.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773989465, "uuid": "2ab699be-2429-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dark4path.remotediagnostic.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774028644, "uuid": "638d7e9b-2484-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dc1infra.applicationbuffer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774024565, "uuid": "e4294641-247a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dc1proc.operationalsystem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774020486, "uuid": "64e7e9fc-2471-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dc1proc.platformendpoint.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774016465, "uuid": "0813199e-2468-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dc1sync.analyticspoint.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774016765, "uuid": "bb0de538-2468-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dc2data.analyticspoint.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774024864, "uuid": "965664bd-247b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dc2point.operationalsystem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774020845, "uuid": "3a7678c6-2472-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dc2power.platformendpoint.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774028944, "uuid": "163660cd-2485-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dc2proxy.applicationbuffer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774029244, "uuid": "c91af0ae-2485-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dc3data.applicationbuffer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774021206, "uuid": "12143201-2473-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dc3local.platformendpoint.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774025524, "uuid": "1f707b70-247d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dc4path.operationalsystem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774029545, "uuid": "7c17facb-2486-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dc4point.applicationbuffer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774017425, "uuid": "447e4a53-246a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dc4static.analyticspoint.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774021507, "uuid": "c5460cf7-2473-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dc4work.platformendpoint.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774004945, "uuid": "3555a5b3-244d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "delivergolden.gothrough.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774028706, "uuid": "887c8a6b-2484-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dgp13ezr.winddev.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774006626, "uuid": "1f613617-2451-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dusdyna.dombove.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774003625, "uuid": "22bbe38e-244a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dynfluxon.plotsafe.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773999905, "uuid": "794a85bb-2441-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "embdark.capslock.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773972006, "uuid": "845e5ca7-2400-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "entry2area.staticboundary.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773968165, "uuid": "92c08d79-23f7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "entry2base.digitalfoundry.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773968705, "uuid": "d4c03d28-23f8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "entry2core.activegateway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773970144, "uuid": "2eae3855-23fc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "entry2point.remotenetwork.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773965945, "uuid": "67aa69dc-23f2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "entry2power.systemresource.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773975606, "uuid": "e64723a6-2408-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "entry2proxy.secureterminal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773973807, "uuid": "b5969204-2404-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "entry2steel.infravariable.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774049044, "uuid": "e28a4f15-24b3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext1infra.operationalmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774045025, "uuid": "8752ff0d-24aa-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext1meta.analyticalhubnode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774049344, "uuid": "95b3aa35-24b4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext2base.operationalmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774045686, "uuid": "1114c69e-24ac-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext3gate.analyticalhubnode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774049644, "uuid": "486412da-24b5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext3user.operationalmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774045984, "uuid": "c2e2a950-24ac-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext4sync.analyticalhubnode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774013345, "uuid": "c43bb33b-2460-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "flerai.dombove.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774009807, "uuid": "875e604f-2458-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "frozenlayout.currvers.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774006985, "uuid": "f53666d4-2451-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "fsrwr05.dombove.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773971044, "uuid": "472c950e-23fe-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate4path.remotenetwork.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774007884, "uuid": "0d8ef32e-2454-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "harvestedit.doabove.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773980764, "uuid": "e8d2f632-2414-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "host1store.datacentricnode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773981486, "uuid": "9728664a-2416-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "host2remote.datacentricnode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773981663, "uuid": "007c0296-2417-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "host3dev.datacentricnode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773982084, "uuid": "fb375ce4-2417-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "host4link.datacentricnode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774000864, "uuid": "b516c4ac-2443-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "hxfpc.infosafe.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774015686, "uuid": "37da0288-2466-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "illumewholes.capslock.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774003207, "uuid": "298274c7-2449-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "innultra.plotsafe.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774050365, "uuid": "f5d77dcb-24b6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "int1proc.virtualgatekeeper.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774046344, "uuid": "992a8c51-24ad-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "int1store.securitybackbone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774046707, "uuid": "71a8be7d-24ae-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "int2remote.securitybackbone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774047064, "uuid": "46aa54e6-24af-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "int3dev.securitybackbone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774051025, "uuid": "7f1f2aa3-24b8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "int3ghost.virtualgatekeeper.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774047664, "uuid": "ac26567e-24b0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "int4link.securitybackbone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774005784, "uuid": "29cf5907-244f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "iwug.gothrough.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774009445, "uuid": "afd29747-2457-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "kel-nexis.currvers.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773965766, "uuid": "fcd9d341-23f1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "link4entry.vectorstorage.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773974286, "uuid": "d36f9180-2405-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "load3core.infravariable.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773976085, "uuid": "03642ff7-240a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "load3data.secureterminal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773972367, "uuid": "5b6a6c5d-2401-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "load3field.staticboundary.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773969006, "uuid": "8808bc65-23f9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "load3ghost.activegateway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773965766, "uuid": "fcd7d6b0-23f1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "load3host.vectorstorage.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773966308, "uuid": "3fee9e9c-23f3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "load3local.systemresource.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773968165, "uuid": "92b8b97b-23f7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "load3user.digitalfoundry.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773970684, "uuid": "708f97b7-23fd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "load3view.remotenetwork.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774040706, "uuid": "78c836bf-24a0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "loc1proc.distributednetwork.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774036684, "uuid": "1bb225fe-2497-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "loc1proc.managementresource.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774032667, "uuid": "c1383e56-248d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "loc1store.telemetryinterface.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774037044, "uuid": "f244da92-2497-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "loc2core.managementresource.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774032965, "uuid": "72fb78ce-248e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "loc2remote.telemetryinterface.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774041665, "uuid": "b41b24f9-24a2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "loc2steel.distributednetwork.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774041665, "uuid": "b41ab0bf-24a2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "loc3core.distributednetwork.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774033325, "uuid": "49269fc9-248f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "loc3dev.telemetryinterface.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774034225, "uuid": "61a036bf-2491-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "loc4link.telemetryinterface.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774041730, "uuid": "db12bbd7-24a2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "loc4sat.distributednetwork.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774037705, "uuid": "7c511c49-2499-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "loc4view.managementresource.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773993544, "uuid": "aa40255c-2432-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "main1infra.metrichandler.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773994024, "uuid": "c84bca32-2433-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "main2proxy.metrichandler.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773994445, "uuid": "c2e5639d-2434-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "main3data.metrichandler.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773994926, "uuid": "e1d4eb65-2435-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "main4point.metrichandler.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773976564, "uuid": "215809a2-240b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "main4point.secureterminal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774008608, "uuid": "bd053f69-2455-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "mercoreet5.doabove.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773995886, "uuid": "1de22255-2438-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "merlithar1.trueslak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773998531, "uuid": "46825b70-243e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "meta-sh0re.trueflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774015025, "uuid": "adef7050-2464-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "mewmm.trueflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774010285, "uuid": "a47454d6-2459-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ndakntj.currvers.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774001344, "uuid": "d3501922-2444-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "nefnpr.infosafe.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773996305, "uuid": "177426a6-2439-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "neo-c1iff.trueslak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774011844, "uuid": "45ed076b-245d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "neo-rnount.withregw.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774014545, "uuid": "8fdbe21a-2463-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "nlcygd.withregw.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773977045, "uuid": "3f9c15a9-240c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "node1sync.networkobserver.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773977464, "uuid": "39e27f93-240d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "node2data.networkobserver.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773977945, "uuid": "5805be01-240e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "node3edge.networkobserver.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773978364, "uuid": "51e93616-240f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "node4static.networkobserver.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774012565, "uuid": "f343b34b-245e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "normarkal9.gothrough.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773972844, "uuid": "77db4c3c-2402-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "open4space.staticboundary.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773999008, "uuid": "62f6932b-243f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "opt1c8-core.capslock.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774011185, "uuid": "bcc2cec9-245b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "opticsval.withregw.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773991685, "uuid": "55ebad71-242e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "orbit1proc.terminalvariable.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773992107, "uuid": "5155f916-242f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "orbit2steel.terminalvariable.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773992645, "uuid": "9238b9b1-2430-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "orbit3core.terminalvariable.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773993065, "uuid": "8cd476e1-2431-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "orbit4sat.terminalvariable.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774035305, "uuid": "e5893d1a-2493-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pnt1infra.diagnosticendpoint.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774031345, "uuid": "acf63419-248a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pnt1meta.infrastructurecloud.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774039684, "uuid": "1790b8f2-249e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pnt1proc.connectivitybuffer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774035666, "uuid": "bcfa3489-2494-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pnt2base.diagnosticendpoint.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774039806, "uuid": "6087752d-249e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pnt2outer.connectivitybuffer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774031644, "uuid": "5f5b8e08-248b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pnt2proc.infrastructurecloud.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774039984, "uuid": "cabaed5b-249e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pnt3field.connectivitybuffer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774032005, "uuid": "36d4fda8-248c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pnt3gate.infrastructurecloud.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774036084, "uuid": "b5b1d6f5-2495-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pnt3user.diagnosticendpoint.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774036324, "uuid": "44ea182b-2496-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pnt4link.diagnosticendpoint.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774040406, "uuid": "c5d350ac-249f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pnt4space.connectivitybuffer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774032364, "uuid": "0c810317-248d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pnt4sync.infrastructurecloud.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773982565, "uuid": "1a3ba705-2419-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "point1proc.virtualresource.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773983044, "uuid": "37ab2c25-241a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "point2power.virtualresource.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773983405, "uuid": "0e8da4dd-241b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "point3local.virtualresource.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773983885, "uuid": "2cafce89-241c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "point4work.virtualresource.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773968345, "uuid": "fe6cb39b-23f7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "proc1alpha.activegateway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773969724, "uuid": "3454b56a-23fb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "proc1dark.remotenetwork.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773967263, "uuid": "7975d1f8-23f5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "proc1infra.digitalfoundry.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773975184, "uuid": "eab0a6bd-2407-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "proc1infra.secureterminal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773973329, "uuid": "993c97e9-2403-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "proc1orbit.infravariable.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773971529, "uuid": "68584306-23ff-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "proc1outer.staticboundary.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773965766, "uuid": "fcf53118-23f1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "proc1point.systemresource.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774012266, "uuid": "410c55b4-245e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "proto-h4ul.withregw.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774001763, "uuid": "cd256220-2445-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "proto-patt3r.infosafe.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774002725, "uuid": "0a5dfb03-2448-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "qczcgd.plotsafe.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774005425, "uuid": "53705ebd-244e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "rav3n-span.gothrough.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774010947, "uuid": "2ec678a5-245b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ravenreview.currvers.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774008183, "uuid": "bf970c11-2454-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "reef-dat.doabove.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773993245, "uuid": "f7c051f4-2431-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "repost.optico-voda.info" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774042024, "uuid": "8a884914-24a3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "res1infra.applicationservice.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774038129, "uuid": "78ec9158-249a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "res1proc.operationalgateway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774034225, "uuid": "61a286de-2491-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "res1proc.platformcontroller.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774029963, "uuid": "759c627e-2487-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "res1sync.analyticsprocessing.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774030264, "uuid": "2915c1e4-2488-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "res2data.analyticsprocessing.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774038364, "uuid": "0522e462-249b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "res2point.operationalgateway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774034344, "uuid": "a88e5270-2491-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "res2power.platformcontroller.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774042445, "uuid": "8532e2b5-24a4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "res2proxy.applicationservice.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774042744, "uuid": "37c7132c-24a5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "res3data.applicationservice.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774030624, "uuid": "ffac6d17-2488-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "res3edge.analyticsprocessing.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774034645, "uuid": "5beee1fc-2492-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "res3local.platformcontroller.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774038663, "uuid": "b723351a-249b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "res3view.operationalgateway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774039084, "uuid": "b20f78ab-249c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "res4path.operationalgateway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774030987, "uuid": "d803bf92-2489-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "res4static.analyticsprocessing.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774035064, "uuid": "55c4909c-2493-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "res4work.platformcontroller.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774016165, "uuid": "54fecf82-2467-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "s1gna1-track.plotsafe.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773974764, "uuid": "f05cfac6-2406-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sat4link.infravariable.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774014725, "uuid": "fb00d825-2463-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sensorsupp.trueslak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773997685, "uuid": "4e189d86-243c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "solcorea.trueflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774002307, "uuid": "1144e430-2447-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "soltideis9.infosafe.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774004045, "uuid": "1d226ec5-244b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "streamglo.plotsafe.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774004825, "uuid": "edf7ff8a-244c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "streamnoble.gothrough.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773998167, "uuid": "6d575745-243d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "summeinn.trueflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773997207, "uuid": "312092df-243b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "taldraen.trueflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774013525, "uuid": "2f9ce4b7-2461-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "trac-glade.doabove.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774009085, "uuid": "d93b9dbd-2456-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "trilineix.doabove.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773978905, "uuid": "94769e80-2410-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "unit1meta.securityprotocol.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773979265, "uuid": "6ae0e8c6-2411-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "unit2proc.securityprotocol.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773979744, "uuid": "88a24e1d-2412-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "unit3gate.securityprotocol.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773980224, "uuid": "a6e2e294-2413-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "unit4sync.securityprotocol.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774005605, "uuid": "bf3b0544-244e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "uwor76f8.oaknet.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773969306, "uuid": "3b26ea39-23fa-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "view4sync.activegateway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774007467, "uuid": "14bba6dd-2453-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "visualfier.dombove.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774047786, "uuid": "f4c6c65a-24b0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vld1proc.dataintegritynet.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774043644, "uuid": "4fecf37f-24a7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vld1sync.cyberneticsystems.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774044006, "uuid": "27b776fe-24a8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vld2data.cyberneticsystems.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774044305, "uuid": "d9de3ee1-24a8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vld3edge.cyberneticsystems.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774048624, "uuid": "e814e0fe-24b2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vld3local.dataintegritynet.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774044724, "uuid": "d3f032ce-24a9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vld4static.cyberneticsystems.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774048806, "uuid": "54d51198-24b3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vld4work.dataintegritynet.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774021985, "uuid": "e24fb3d3-2474-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vol1infra.diagnosticresource.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774017845, "uuid": "3e9b14c4-246b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vol1meta.infrastructurebase.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774025885, "uuid": "f681c5cc-247d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vol1proc.connectivitynode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774022166, "uuid": "4de3a987-2475-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vol2base.diagnosticresource.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774026244, "uuid": "cc96f727-247e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vol2outer.connectivitynode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774018144, "uuid": "f0ea3654-246b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vol2proc.infrastructurebase.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774026544, "uuid": "7fc8aaa2-247f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vol3field.connectivitynode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774018505, "uuid": "c82af519-246c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vol3gate.infrastructurebase.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774022586, "uuid": "4886fd63-2476-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vol3user.diagnosticresource.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774022828, "uuid": "d89c0162-2476-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vol4link.diagnosticresource.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774026844, "uuid": "3256f3ac-2480-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vol4space.connectivitynode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774018807, "uuid": "7bdd999b-246d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vol4sync.infrastructurebase.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773967263, "uuid": "796ca1ae-23f5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "work4flow.systemresource.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773996730, "uuid": "153b2363-243a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "za7lvsc.trueslak.in.net" } ] } }