{ "Event": { "published": true, "date": "2026-02-25", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-02-25", "timestamp": 1772064921, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "72c6bd8a-5a46-4c50-9e4c-3e3e408f4f77", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "347cca64-11de-11f1-8369-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1771978148, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771978148, "uuid": "4885422f-d845-487d-9e0e-13b44c75d211", "comment": "Malware payload (CoinMiner)", "value": "55c65f788ec7a073942b81d8c987c386", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771978148, "uuid": "84726a02-2217-4e16-9998-ba3b65417e23", "comment": "Malware payload (CoinMiner)", "value": "389d3fefcaa011c88e9c9b613b9f546e7fac0a5c0878d757045e2bfb0ca71f9d", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771978148, "uuid": "47fae16e-fbb8-4e44-9077-5525e8df78cf", "value": "T1DEA6CF15A3B40071FA3BC674C9268733DAB1BC965B34C50F0259F2522F77EA29BAF2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771978148, "uuid": "f9f8a35c-bf0d-45f4-a1db-034188176b8c", "value": "de93f2c3ac12b121f15db149d1837f4b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771978148, "uuid": "0747fab5-1f0e-445c-a4da-862d9a9cea0d", "value": "196608:adWM0vfBJa0uzWDrdCB9IGruIoNJKlG1OoBjS:adofBo02WvMPVrxoHKwEum", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771978148, "uuid": "b9c17971-9d22-49e0-94ac-d0928f440f27", "value": 10261386, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771978148, "uuid": "b3ee4cdc-3d80-456d-a86f-859aa8a40f09", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1771978636, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771978636, "uuid": "39b1dfa1-9996-43ef-b1bf-f613f94fdf9d", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771978636, "uuid": "26b1fd5a-4e1f-4d77-ba8d-5325ae7bdf2e", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771978636, "uuid": "95d43e73-78bd-42dd-921f-e15996a355dd", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771978636, "uuid": "56f2584d-4dc7-4bc9-8ecc-3e4ae32a9247", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771978636, "uuid": "942383d4-4669-4c93-bda0-784551a6050d", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9176621a-11df-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771978734, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771978734, "uuid": "12f999dd-cc29-48b1-8456-9d710b1dde4a", "comment": "Malware payload", "value": "f4ae8cdceeb3859a400edaa1ce77abf1", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771978734, "uuid": "161d4254-9535-4ac7-b884-e792ed5c021e", "comment": "Malware payload", "value": "e2a3dbcea1cf7b005529a9a0eaaa3fc1a20da6acc8d6e9f5fd804d8cc7a57709", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771978734, "uuid": "f63e2564-e261-4880-9a23-4326c732a4c4", "value": "T15E8309327488582A210B428FD267336C70AFDCE2D611E5B6F6F632344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771978734, "uuid": "b10e3a28-e4d7-431a-a88f-02adeca2dab4", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnVWatVN/:XEKltp9txAX/yr2pbVWQVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771978734, "uuid": "2cb8779e-d389-4bda-97dd-70b80e9ac28b", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771978734, "uuid": "d5865183-0f2e-428f-9ad9-bf9019099979", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1771981814, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771981814, "uuid": "aca640d7-c8fe-46af-8e10-6768d85697b5", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771981814, "uuid": "70fafd6a-2ccd-48f6-9606-91f18ab89747", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771981814, "uuid": "cbd6ee7c-b12c-4d3c-8ff6-9a1b8a2eb4de", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771981814, "uuid": "2799a354-6aff-4a99-9f8a-f4c826372a65", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771981814, "uuid": "1f822f9f-8a5c-46c3-9721-47e000d1f32b", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771982906, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771982906, "uuid": "b26e9425-57d2-467d-9d10-94104ea6df94", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771982906, "uuid": "3ddd9ed0-1d5d-4f74-9121-be7ab692f5ff", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771982906, "uuid": "bd12a1e2-5206-49b6-810b-cdac3192f4e5", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771982906, "uuid": "dc032970-9c70-45cc-8c9b-bbcf5f4b77a9", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771982906, "uuid": "664ce572-2d7f-4cdc-864f-bd86c17025a0", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e4b10dc-11ea-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771983319, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771983319, "uuid": "c2a8ddde-d741-4583-a04d-84510630dc1b", "comment": "Malware payload", "value": "cd6c679af7b72fa1cf19aa7e0731ae3d", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771983319, "uuid": "6593795e-cc11-432b-b29d-30ce3d550610", "comment": "Malware payload", "value": "2dc276e6b45eb56cba6e090e3999d1f021932d5f93a98833042a0d1cd81b382b", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771983319, "uuid": "365ff752-70f6-4525-8aa7-082339f0f68b", "value": "T1CF963382F36A086EC4B341388E9657350A255E5BCE83574B2468733CBCBB2D98F95F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771983319, "uuid": "d32f9745-31d2-4c14-867f-7f31373fbd8f", "value": "196608:nq8kJH1UVIuKonSS4QMlWY2BVL19chnV8aEGjGeKo8uy0VdQlpgoLyStnLy:nbkJVUVlKBQMlSBVL19cdV8aECDzslpg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771983319, "uuid": "da0cfce6-489d-4c3e-8b0c-ced76cdb6fba", "value": 9197231, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771983319, "uuid": "44a35b27-1354-4866-9d88-9400bf911060", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc9b1d2f-11ea-11f1-8369-82aee05be84a", "comment": "Malware payload (RedLineStealer)", "timestamp": 1771983584, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771983584, "uuid": "67f33842-1b66-4115-adab-433fecaa9d14", "comment": "Malware payload (RedLineStealer)", "value": "11d120907a5692fd48598573d457b340", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771983584, "uuid": "9e4c2cae-b20c-4f5d-81fd-4c1827745833", "comment": "Malware payload (RedLineStealer)", "value": "2ec9acdb6e5ea802f5cb40e00ab7e973f3b1abae4033ba46b79e10af695d9e6c", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771983584, "uuid": "a30a8011-daed-486c-b277-e0fd3c80269c", "value": "T104935B5F33A430F8D5679174C9E14A46E773B87659B0A30F4774869A9F232C2AE2D3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771983584, "uuid": "8e5dc552-d61a-4325-a017-91ff35d2ce3a", "value": "48ca3036180f0cfc822176b8bce52945", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771983584, "uuid": "becc4425-e2b2-4482-8ae7-e13af05f26a2", "value": "1536:gzKPUGVAND/R58vjohR2yTjV6cpFwb5Wnel16W9Xa+t1ku1ZTs0+:gzSU1J58vjohgyTjV6cpFwb3NK+3kgT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771983584, "uuid": "77ed3958-031d-4b70-adb7-67814107c796", "value": 91648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771983584, "uuid": "88d1fb1b-05de-4b69-a091-c0aef923041d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72f54b6f-11ec-11f1-8369-82aee05be84a", "comment": "Malware payload (RedLineStealer)", "timestamp": 1771984266, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771984266, "uuid": "2743d23f-a8f6-4018-b385-c33263da2be3", "comment": "Malware payload (RedLineStealer)", "value": "b397b9309a04ea958aa087b7f8538551", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771984266, "uuid": "f8c092f7-c893-4885-9b16-f1c5cf479dbc", "comment": "Malware payload (RedLineStealer)", "value": "8e75dc34d4e08c4f03db2fa125a1ecc90ad445e9a222d0ca191ba03827d823f9", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771984266, "uuid": "c8b570cc-355f-4436-8386-c33874a7688e", "value": "T1D3248E21B9928433D5AB097498F9DF75893EFC510F7169D763840FBE89206C1AF34B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771984266, "uuid": "c9a102e5-4c83-4a95-9190-3524e7d2eacd", "value": "59f37c13d2cae7cc547b602d07aa7033", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771984266, "uuid": "f15ff524-7888-4d67-a6ba-6cc1009041ab", "value": "3072:QXiZYkCItXCGpSFRSJyE18jSaCTBIJCfCr8OIRachyk2Wh/RgaaATUxtN8l:QHkCItizSJJwYmUU3yacEkJTUD2l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771984266, "uuid": "898dda76-4036-4b84-b799-74cedd7ec519", "value": 209920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771984266, "uuid": "43943f68-d8c3-4a21-9537-1328ff293915", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2ba2cbc-11ec-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771984373, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771984373, "uuid": "1102750b-0cc9-44e2-b2ce-48acfbc0c754", "comment": "Malware payload", "value": "90b20abf80b2ecb82243533259921223", "object_relation": "md5", "Tag": [ { "name": "a3dacb", "colour": "#a7477c", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771984373, "uuid": "775e423e-85b2-4271-8b2b-7ad39bbb8329", "comment": "Malware payload", "value": "670c2800abc04f1612d73f0df5f5040f6f348a55464dac69039e5ef1ecc79575", "object_relation": "sha256", "Tag": [ { "name": "a3dacb", "colour": "#a7477c", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771984373, "uuid": "1e1883b8-2ab7-4a81-9d71-dd551a88cc71", "value": "T120545C4A77A440F5D9A78139C9A38A46E7B2B8650771A3CF036443B95F3B7E05E3E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771984373, "uuid": "f2a5ceba-2c34-45fd-ba31-81ff1d5e6727", "value": "3d85d3c28c2c171776d82f97bfb95153", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771984373, "uuid": "21536bf4-4ec8-4b72-8532-0c723566c0c1", "value": "6144:RvoTljfVSITGG9wNsf8cPR09QTiTrV2Z+qXTLrs+TpCsD:RU5GGiEPRoqXzs+Tz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771984373, "uuid": "9ef95405-e8fd-4b24-8010-594751274dce", "value": 295424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771984373, "uuid": "fb027cdd-6603-43ce-b889-dd21bd550da2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "162935bd-11ed-11f1-8369-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1771984540, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771984540, "uuid": "146066b3-7e61-42a4-8550-5a977dbe4d4f", "comment": "Malware payload (Amadey)", "value": "29356ad3ec3359aeebc69a8573271581", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771984540, "uuid": "ac8026fe-b161-4c9c-a5f4-2a9c26a2278a", "comment": "Malware payload (Amadey)", "value": "7969fd3648138292a9398f957f809ca67d9f3a1a9af91f7ac75ca5b2fbe3242a", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771984540, "uuid": "21dc6ea9-e2f2-4b25-a3fe-3bb1c2c799fd", "value": "T186170112B9AD16F5C5FAE1388469A211B671386503317BCB0BE816BB1E37AD46F3F3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771984540, "uuid": "272faa46-7157-416b-88ba-433b2daf9c2d", "value": "5175da4b99d292f751a152b8e78310d6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771984540, "uuid": "261cf34a-459d-4e90-ae4c-1a1a11a5c830", "value": "393216:OJiQipGmSn1yNdq1B7iR0gpHskqSPjZpiqbH4a7ho:sien1yNg1ABoS7Zp9bH4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771984540, "uuid": "6b985d67-d967-403c-8eec-c203d9e463ea", "value": 20044288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771984540, "uuid": "a9415860-3ea2-476b-b563-5d30127b7c6c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21613848-1122-11f1-8369-82aee05be84a", "comment": "Malware payload (RedLineStealer)", "timestamp": 1771984588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771984588, "uuid": "c4968715-1857-4596-8a22-6a27e11cbdf6", "comment": "Malware payload (RedLineStealer)", "value": "838703d503b5c20e07412c080c1dfc62", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "LoadedPL", "colour": "#3aedee", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771984588, "uuid": "9ea0d791-69aa-4bd2-bb6a-88915a24d7a5", "comment": "Malware payload (RedLineStealer)", "value": "599f8044ac833677564223f34b28fc9286c40683095485ba366ec465accdfa74", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "LoadedPL", "colour": "#3aedee", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771984588, "uuid": "4f7da8c0-aea9-43ce-911e-0b9010cf2675", "value": "T1C5645A5833E8CA10DA7F4775D861D67093B0BC63A552E70B4FC4ACAB3D32740EA51A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771984588, "uuid": "7c262e65-506d-47f2-bc15-4b923748d8c1", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771984588, "uuid": "ee716932-5e32-4b8d-b5de-dce651ee3098", "value": "3072:KcZqf7D34dp/0+mAOkyoSMQQgqDB1fA0PuTVAtkxzl3RceqiOL2bBOA:KcZqf7DIHnmn8B1fA0GTV8k3kL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771984588, "uuid": "7d159796-e39b-4918-bc08-a5edc4bb242a", "value": 307712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771984588, "uuid": "5c0077b4-200c-4c6d-8ce4-64338a18592d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "42a2553b-11ef-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771985473, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771985473, "uuid": "6b2275f9-2785-4bc4-902d-872b074baf2b", "comment": "Malware payload", "value": "a7dbdb1a4d8463712a864f2d4dfc3ed4", "object_relation": "md5", "Tag": [ { "name": "BlankGrabber", "colour": "#f1c814", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771985473, "uuid": "373d8a6a-b0dc-46b6-a62c-48ab60440547", "comment": "Malware payload", "value": "50d24bf9b26c3aaa840f4a1a6e2376837fe78d25c37c24eeaa2541bc9c11c1cc", "object_relation": "sha256", "Tag": [ { "name": "BlankGrabber", "colour": "#f1c814", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771985473, "uuid": "cc45df84-decc-415b-8feb-27bdb3f4d0d7", "value": "T14EE6338053D14A67F6E7E13D45A7E161D2B2F4505B228ACF0BE48BA63F5B2F14E39B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771985473, "uuid": "9fb7299d-fa78-457f-9b5f-bd1b980c2407", "value": "74f4f918cc15caa2178da4a8adcd29a7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771985473, "uuid": "5ff9f37d-0bae-4308-abad-454a28b53f7e", "value": "196608:4gApNt2ntbW897GDr/x7eovq5XMP6PzFcPVz097WpHskNqSPrGuZRjMFqbH4Mirc:7n1yNdq1B7iR0gpHskqSPjZpiqbH4a7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771985473, "uuid": "cd450c25-6510-4426-9079-71e21d6ec1ba", "value": 14060032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771985473, "uuid": "42a814c2-eb2e-4cd9-8031-fc1d30669d5e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64f00548-10f8-11f1-8369-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1771987333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771987333, "uuid": "d5739b48-feaa-40da-b858-691987f4fa63", "comment": "Malware payload (Stealc)", "value": "f674075c28388137b66df82d05066330", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771987333, "uuid": "04f25cef-1f50-4bea-b6da-16c7567d34da", "comment": "Malware payload (Stealc)", "value": "b91cebec72ba934cde8ee67e8c4135c8c558d8ff46a70d3fdca83d9c37dd377b", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771987333, "uuid": "126df85e-a7a7-4811-9a25-6c49cce3885b", "value": "T1D5F47C1BE7A602F9D1B7C274CA424957E772B8065370978F03E14AA61F376909F3EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771987333, "uuid": "73e48346-3058-493c-b7da-d1e8fb306830", "value": "f456face36cfa724bf01290dd8927512", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771987333, "uuid": "dfb16cd3-7f94-4d31-ab4a-982ef1a9719b", "value": "12288:NzDhwo1qqr/aead+W3cyMzNP8WTopMRWd38yxBlDetAqxSva:D7NaeRW3P2k0WWUsybS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771987333, "uuid": "ca9bdc59-58b5-43fa-9a56-6b5bec5600f3", "value": 779776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771987333, "uuid": "81f8505e-79db-4db8-911d-799dc92cfc8d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cfa7cef1-11f5-11f1-8369-82aee05be84a", "comment": "Malware payload (QuasarRAT)", "timestamp": 1771988287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771988287, "uuid": "68645186-68b9-46f2-b53d-496a9097549f", "comment": "Malware payload (QuasarRAT)", "value": "2ee13ad3e30c578ad50003bcb7010695", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771988287, "uuid": "d3f25fc3-36f6-4a13-8ea0-d59a27b0596e", "comment": "Malware payload (QuasarRAT)", "value": "8f31c06c8e7ea9eb451bf26666ac4a958bb485b2a8b71feace1981633b116c92", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771988287, "uuid": "0e27c4da-9dec-4767-bbe0-043504b85563", "value": "T18725C09173F4860BE1FF2BB5E4B245594BBBB5529D36DB4F098490AD1EB37808E007", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771988287, "uuid": "7f12a69d-4f18-4d81-941c-110380d314b4", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771988287, "uuid": "beb5b697-b3c1-4c79-bc62-a15c4e6a8da7", "value": "24576:S4svdSpSgoa8ayclOoWLuyWfLDnbP7xXvDv0:NsvdSpSgJ8DGO8yWDDnbNXv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771988287, "uuid": "18ddc136-7ddf-446a-8cc9-b2e9fb2892fb", "value": 986112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771988287, "uuid": "95b70e4e-aac7-4562-ab36-23d5c8a466f7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5a04047-11fd-11f1-8369-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1771991652, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771991652, "uuid": "89a5bb44-37ee-4a9e-bf3a-d989cd43c548", "comment": "Malware payload (Gafgyt)", "value": "4b92229c5feca749b2e5f324ba60957e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771991652, "uuid": "8d1e098e-a7f2-4008-95cc-d7c209059dd9", "comment": "Malware payload (Gafgyt)", "value": "ee9601a9fd62c30100be9538933cc13c5f0cbb27ca4094d5a39cbe7cc4911bc9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771991652, "uuid": "47e0eac7-7ffd-4bb3-9cfe-10ccc07518c3", "value": "T172A30874F9445B1BC2D362F6E75C828E3E2A1FEB93F630114A34BF9067F26D215A54", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771991652, "uuid": "ca33895c-deb1-4ff6-a366-74072036f1ca", "value": "3072:Nz2o6Xu1S1vmz459FOr/gBFHnXOUe0zL:UXhvOBaFHnXre0zL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771991652, "uuid": "6bfc3c4a-e2f4-40ef-b2eb-3de97b2d8863", "value": 107120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771991652, "uuid": "a7e75691-705a-4f00-bd57-6c8fc45f08bc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5a2f1ae-11fd-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771991652, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771991652, "uuid": "afc5b4b4-4a31-490d-9be3-ad6893aab9ff", "comment": "Malware payload (Mirai)", "value": "f161a1cd3170cf8caebd53e028cba697", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771991652, "uuid": "3a879edb-ad54-4cae-894d-422685d3e01e", "comment": "Malware payload (Mirai)", "value": "29cdf182b1294aebff587ea2f3cbf442e18b4d2de578cb0e34411a14ff1b5192", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771991652, "uuid": "fec44143-3ee0-4551-8666-907fbd1721b7", "value": "T131C3B53B27230E23C0D650B012A75633BD74DF8730B856D7AAE07D9D5E3A9943492A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771991652, "uuid": "4d65e6e8-24dd-4aa5-9ce3-54e380bc0aba", "value": "1536:I+9fsTcb6Tyaw6cC9X1jgBe+wwJiGqgtIFVtHCcgscyeA:yqot9Ue+igHRscRA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771991652, "uuid": "e747586d-954c-4836-95bc-5a24de7f77d1", "value": 119708, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771991652, "uuid": "e3be44e7-e280-4d68-862c-41e1d83f8b11", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5a44a49-11fd-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771991652, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771991652, "uuid": "62bd35c0-121c-4f8c-85fb-74d9064a878b", "comment": "Malware payload (Mirai)", "value": "27d93de67b8cafcceec7fbda5a1366da", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771991652, "uuid": "d6f4fd80-387e-47d7-9680-3be9641729c8", "comment": "Malware payload (Mirai)", "value": "0a2088bfc13fdddc84d626b5405a9f3e3eb570c0bc28cb6499e2eaab0e945497", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771991652, "uuid": "17356a05-cb02-4b8f-b54a-a3d6f61837bd", "value": "T12BE3753E7A11AF7EE168827107F69F70DF5929D326E18240E26CE7085E7128D1C9FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771991652, "uuid": "f1b38dd6-c82d-41a7-898b-689c5050940b", "value": "1536:+EvHUdcrjBnuEVZNbaie2rKhtTmaTtW5cAYaPWHaTPOZZQlaXoa0NnrWeDspNKhR:a8Bq4NYa+HaT1w2WYsjGERstf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771991652, "uuid": "dcbd13cd-5b79-4598-ab15-b334982fcb2b", "value": 147776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771991652, "uuid": "9ced1634-e6fa-40d4-b8a2-88bde3e9d122", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5af2a93-11fd-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771991652, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771991652, "uuid": "c68a54ae-a92c-49a8-98e6-2e0032c88dc3", "comment": "Malware payload (Mirai)", "value": "d485bc880b41303684119560b949ef72", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771991652, "uuid": "13d9cb8f-0203-4b08-ba73-3f1057fa2a3f", "comment": "Malware payload (Mirai)", "value": "612ab7893f37c222f1c10ffa8139b0eb6a8e5dc156e699752f8c7a41d29d1f3e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771991652, "uuid": "400c7992-9a70-4277-931f-2dd743a9a10b", "value": "T1B7E38536A7215EB7D81ECD7301A585121C8C998712E92B6FB274E61CEB7BC4F08E3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771991652, "uuid": "9c0df7b3-7dd8-4581-84a0-f2c1f1cab3d6", "value": "1536:a3ZG4ejPnS3c+oT/rrVFwvmwpLBMdH4p4NHAg8L59/Kq0KLIRtCDv:rl0bpR4HCD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771991652, "uuid": "bead104a-b482-493c-9f3b-6c18da269ed0", "value": 147728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771991652, "uuid": "993caeff-4124-40f5-b2e2-6a526e1f6b6c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5af7f10-11fd-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771991652, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771991652, "uuid": "fd28f7c7-2e06-4fd2-b52f-9e004e12a411", "comment": "Malware payload (Mirai)", "value": "4eab39f9301b5b66fcd4b95ed9938124", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771991652, "uuid": "7a030982-3daf-4664-94ef-cab321b2a282", "comment": "Malware payload (Mirai)", "value": "b1a122473a7ffd38305703219562e87500772622e3f20c055eabbac72a455b8c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771991652, "uuid": "b3c04e71-89a9-4097-8a59-8ddf38353319", "value": "T1BAB3E8B3F801DE66F406E6B208A38C267D70FEF30B62156263177A9BDD360D61497E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771991652, "uuid": "5560c8ff-9856-4f75-9fd1-9c46d3b22366", "value": "3072:xpkTqZn9QeuacWjcW0JcWcB5MubDSAewPP8tAn7:xpjn9QeuacWjcW0JcWcBWubO50P8tc7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771991652, "uuid": "e821fd48-8ba9-4972-bfcf-f7f4e59911ea", "value": 112080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771991652, "uuid": "f6a46503-3c05-479d-b0c5-e561e185378b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5b20520-11fd-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771991652, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771991652, "uuid": "49d3bacd-ebcb-4f76-a10c-8b76ac78dbfb", "comment": "Malware payload (Mirai)", "value": "e57fe061839c434f21d3237f703d7554", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771991652, "uuid": "55afeb32-ebfc-4910-9595-682af170596c", "comment": "Malware payload (Mirai)", "value": "0777d670afbf79d3e262581249b9670f46dcf4870a0a544936f6c505163dbc2b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771991652, "uuid": "05f053c4-31c3-4adc-85ad-15b22d0e20b4", "value": "T13A830976E203D9B2D40310F211A7EA7B5E20FEB71471A986D3653F90EE334C26585B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771991652, "uuid": "eb94a8cf-311f-4a59-9a0f-08e1434d34f7", "value": "1536:jJYE8XEdrovm8wX2JypNSig9Wxk/DkhWG:tYE8XKroBwXp7Zg9WEQhWG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771991652, "uuid": "30935733-6c5f-44f9-9088-4a42adbbb073", "value": 88164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771991652, "uuid": "f8c6a9e4-dbf1-4e06-a70d-e147dfa4c2e5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc504132-11fd-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771991717, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771991717, "uuid": "ccb4f8f5-f6db-4db8-baaa-895aa3cf369a", "comment": "Malware payload (Mirai)", "value": "f34e6a64d8e04ac4bb9c86ac813ed0fb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771991717, "uuid": "e456ca3e-90ea-44d8-a90e-25c81a1f0f8a", "comment": "Malware payload (Mirai)", "value": "bcb7f2280de34809fbd8d7bc25a26b30fc9387b5999cadb57341e9f1b2df45c0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771991717, "uuid": "e3b45698-39c6-401a-8ffe-b97be6b06faf", "value": "T12683C332A281D876D00314F200A2DF7B0D32FEB71564959AE3A53EB0ED365C259E5F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771991717, "uuid": "242b6bb0-f659-436d-a0bb-61fb476d1df5", "value": "1536:iEJWqZ/S3UYe8hP4wEeOYr0DFFZzb1qCkZ9rpID7kz:iEJWv3UYZhgwWFx11kZAD7kz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771991717, "uuid": "6f808bac-8604-45ea-8f2d-b9cdf7385da3", "value": 84868, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771991717, "uuid": "8cbdb1ee-f8a2-418c-b726-2d870dc9f04b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc522b32-11fd-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771991717, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771991717, "uuid": "b30dc164-4e84-4eac-8d49-26506ba7848d", "comment": "Malware payload (Mirai)", "value": "218ccc12742f59090849111275799954", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771991717, "uuid": "def3d5ad-9924-4ec6-bc65-6e1dd459bbf6", "comment": "Malware payload (Mirai)", "value": "846f134b3303bcc2d840a9e39cf3fffe9f3e9f2e6af6eae4bfd364d53b057385", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771991717, "uuid": "c41b6d6e-be26-4188-b626-5eda687b0f06", "value": "T1FAB31A34E4504B1AC2D322FAE659815F3E231FEBA3EA30258B34BFA057F26D715759", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771991717, "uuid": "2c6c1fd6-9ce1-4215-9f1d-32a7a093c4f3", "value": "1536:QMnmu0qJkU5gqLlIuaufJCIzdhiC/VV3NfHRuO5JB72xW9YiqMq:241HOuaGVV3NfHUOjqy+Mq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771991717, "uuid": "24536909-d6ba-4fd2-90c0-86ab2e7ddc6e", "value": 107488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771991717, "uuid": "3b226455-a370-49a8-8750-cbe08795b23c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc5c4193-11fd-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771991717, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771991717, "uuid": "c0e6625a-9af3-4585-b345-23542d8e7167", "comment": "Malware payload (Mirai)", "value": "9fb63eb0687cdda1d0849515c7370daa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771991717, "uuid": "34b8fb48-f8cc-4fb3-b595-5f35bc0bb7ff", "comment": "Malware payload (Mirai)", "value": "331b245f671a6d020f5736aa59976a981de3233f12954fef41ab16841c0e5eff", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771991717, "uuid": "da37035e-fd52-4951-bab5-ffa9bb98f610", "value": "T155B31A34E4504B1AC2D322FAE659815F3E231FEBA3EA30258B34BFA057F26D715759", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771991717, "uuid": "a4b77dc0-c820-4bcc-bc89-a73ef0d0eb2f", "value": "1536:QMnmu0qJkU5gqLlIuaufJCIzdhiC/VV3NfHRuO5JB72xW9YLqMq:241HOuaGVV3NfHUOjqylMq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771991717, "uuid": "16fc141c-54b8-4ee5-8ec7-2ba00a3b90ea", "value": 107488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771991717, "uuid": "a8d9c30d-d2f7-4328-9084-505d8ea6ba74", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "feb9a7fa-120f-11f1-8369-82aee05be84a", "comment": "Malware payload (QuasarRAT)", "timestamp": 1771999533, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771999533, "uuid": "2542bc54-6b89-4334-9343-a45b0a4bb298", "comment": "Malware payload (QuasarRAT)", "value": "824687aa79948a0615a3c7e872e9c03a", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771999533, "uuid": "590e2170-f974-41aa-bc41-a48e744526a8", "comment": "Malware payload (QuasarRAT)", "value": "296bdae395089269f0a8577a5778ca61c22def516c18fd79823eacf1bfdbb389", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771999533, "uuid": "ed11426f-0fb3-4213-b074-1c34905a78cf", "value": "T1CE748D1377E4EA3BD1FD2B3AE43206155BB4D406BB16E38B5A5855B92C23386CD843", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771999533, "uuid": "21536474-f262-4c54-93cf-c16f70391d33", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771999533, "uuid": "d46b3eaf-92dc-4422-8816-ae52b686e1bc", "value": "6144:A16bPXhLApfpQrJvaLjjpb0BXpLhL+NHrzyK:MmhApaJCT6pFL+NHrzyK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771999533, "uuid": "abab0b52-98dd-4877-897f-9d14ad0afb27", "value": 356352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771999533, "uuid": "13436483-01f8-4ea3-a41e-b2cc5b754023", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0efa0c9e-1211-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771999990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771999990, "uuid": "5be71a73-f2b0-4df2-aaad-ee246fcb9a25", "comment": "Malware payload (Mirai)", "value": "1b6f542b6bf453d6b6c9e0a240ff2aa9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771999990, "uuid": "88e9b3f4-1fba-4417-93b6-fbcdfa1837ad", "comment": "Malware payload (Mirai)", "value": "b683f75b4d148ee87892db75e268901702d9c126548aac22654ee8b061eea6ce", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771999990, "uuid": "85d02598-34be-40b9-bd92-1cb3753dd2bc", "value": "T114333C4DF783E0F0DD4B0531115BF77E96349E025124DE7EEB98BE62AE32A02711B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771999990, "uuid": "b5e224eb-27d3-4a81-a5cb-58265709b034", "value": "768:VwheNR1eCZWUJ2S7pRflrFWwqTlFNB5azjYvzNeVMU2331ANA0B7RhuqDV98eN+s:VwOt37pOzwLMU431ANA0BLBCyr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771999990, "uuid": "ade69e40-ee60-498d-adb7-375c64376298", "value": 50476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771999990, "uuid": "4fe60a05-cfac-4894-9397-406c596daaf8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0efb9860-1211-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771999990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771999990, "uuid": "df1559bf-e46e-4f91-afba-36adad2aae93", "comment": "Malware payload (Mirai)", "value": "cdce2d238f4e8e1fcd1d654a61c4b702", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771999990, "uuid": "d45c8bc1-41f8-4517-b886-3b049d09a071", "comment": "Malware payload (Mirai)", "value": "1fa43c3b5fcf1f01c4a9d961fa7c97b53103ea65bf27e4815e55d4ec4f5be497", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771999990, "uuid": "e2f584aa-0688-4976-89a7-516f08f8f009", "value": "T156C39DABB24F1051C82647F41BCB579C2E3325019E2B9AE77C6E373E1A369DE58063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771999990, "uuid": "d19bca09-9d28-452c-adda-2703d17c9b76", "value": "3072:wf0GQgHfg5nBR4YYSOxTKB6Aq7mgbgiCrheiiU4pqe:wf0tJBR4NSALD7rnCrheiCqe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771999990, "uuid": "31c06d94-e486-4fb3-920d-ae1397f8e2e4", "value": 124344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771999990, "uuid": "5e021102-658d-437e-b43f-e02d7cb87253", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0efcfcbf-1211-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771999990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771999990, "uuid": "4058181b-cf54-4ea4-ae85-91df94f1ea55", "comment": "Malware payload (Mirai)", "value": "f4ff0b96e6262501e81ab206a5318ba4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771999990, "uuid": "8f1423d2-2d1c-4944-a660-14f8c5242851", "comment": "Malware payload (Mirai)", "value": "90b66cc73c8b1746d91b9e5247e6827499c9d99a94912d29a0f437c6a8ab5507", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771999990, "uuid": "77998152-2040-40fc-8d2a-5d60016d6ac1", "value": "T129B30945FC505B17C6C652BBFB4E428D7B2A1768D3FE720399256F30378B96A0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771999990, "uuid": "a335a44c-823e-4e0c-b82a-b985604543d0", "value": "1536:jUK9yqnU8vGRz4VA4j6T9y28Ty6O5FtZpqQcZlCtwywXvqcVuafhPeA45Zv5:QixnUHz4Z+5ypkn3E85", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771999990, "uuid": "430ef09a-e823-4b02-a761-b84a1c318a49", "value": 117280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771999990, "uuid": "7238566a-8270-4246-b014-e5532d0f84fc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0eff12b2-1211-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771999990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771999990, "uuid": "0f9b2621-9c10-41cd-8a4e-beeff8b8065d", "comment": "Malware payload (Mirai)", "value": "fe89b23c92efe23081cb940c124e7b99", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771999990, "uuid": "4a9a894c-f40a-4af4-89e9-3eb8dd53fbf4", "comment": "Malware payload (Mirai)", "value": "5b3dce5e66f16d232532c34188f6cebebc0fc5b987bb1d2a426d92d148a706f1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771999990, "uuid": "f175b792-f905-40b4-a3d0-1ad92dbd1e7c", "value": "T11AC32A05B30C0D47E1633EF43B3B27E193DFDA8121E4E640655FAA8A91B2D32558AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771999990, "uuid": "6188861a-f636-42d7-984a-c85a776c9b98", "value": "1536:6cB72AZ4ex10JrZqQ7UrZb6wI0vAnjiLVRuzae8Dhq6N2te5f3dIJ:6+B4exMF7oZKJnCNYaaJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771999990, "uuid": "16769a39-b3e8-4d7a-9c65-8c82e4536dbd", "value": 121508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771999990, "uuid": "cb4191b6-9bbc-4a29-9ed8-0b58187657aa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a453bdf9-1215-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772001958, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772001958, "uuid": "74451835-44a5-47ea-a007-1c6c979536c1", "comment": "Malware payload (Mirai)", "value": "66447a94d754ed6b3c8f9888ae8a589d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772001958, "uuid": "938997ca-f920-4ffa-99fe-16f1fd15aaba", "comment": "Malware payload (Mirai)", "value": "faf0dd87fc2872baa6f9786ffc3f14eb95178a02d3b922afb448e04196ccbe11", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772001958, "uuid": "49b7c863-fcde-4768-b66d-bbff210db4bb", "value": "T13434A65E6E228F7EF668C73447F74A31976D33D623E1D684D1ACC1141E2428E681FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772001958, "uuid": "7ff522bc-424e-4f1f-92f6-6407b934f950", "value": "3072:PTRWTc3J96bexzuUSJa0J1LMciWUKhwpus9TuHYxp0KbjvZN4ooeQtl6gjZte3:P9yfEzu/asucIKhwHD/vUo6tlljZt2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772001958, "uuid": "e7d92cfc-4984-42b6-93ef-1eed228be7e1", "value": 238476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772001958, "uuid": "a1846478-0962-4a3f-9c03-419a2c6dfd0e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4af7697-1215-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772002012, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002012, "uuid": "59beb095-83d6-48f3-8545-80edf6cdffc3", "comment": "Malware payload (Mirai)", "value": "169afc07bffa7fde00b71a8818554412", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002012, "uuid": "37f2377e-012a-4724-b498-1b3c4983ead8", "comment": "Malware payload (Mirai)", "value": "102d0a827f8262556711ad8338b0f85121ef18e33d797749fce92f8c05ffcd34", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002012, "uuid": "46b33d02-fe4b-43c8-a3b1-6ad1dd2c66fb", "value": "T171D31859BC819B11D6D526BEFE0F428A33135B6CE3EE7212DD245F2427CA95B0F7A0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002012, "uuid": "33f065b8-7d98-4f9d-aa0b-67c5aa4effb5", "value": "3072:D2t9xIKM1GdhSGB6mjzemdLL+MHbwWQuGOauAxBj+qWBDsXSAtXWFQfa:at97M1GdcGB6mjzemdLL+owdjOauAxBK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772002012, "uuid": "9f3a691f-f54a-4e3e-97e7-d5a358b30c66", "value": 132076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002012, "uuid": "3ff02fc9-0d63-4787-af3d-abd9964f7b90", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1133bdc-1216-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772002489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002489, "uuid": "b90e6691-1bd1-48d0-886c-0b8efe266455", "comment": "Malware payload", "value": "c16e34136024dcee8257f7847cd778a2", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "clipbanker", "colour": "#5efbe3", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002489, "uuid": "4ff4eb67-4f12-46f3-8e47-6c364ed51c38", "comment": "Malware payload", "value": "19cf650c891876f51413ba4448ad3f29bcab6271a4af6146718c4dc6f1af8a8c", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "clipbanker", "colour": "#5efbe3", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002489, "uuid": "922cb039-39f0-48ff-a1b8-8f70584aa379", "value": "T133547C15B3A414FDEA6BC17DC9424945EB72BC5647A1EBCF03A04BA22F136E09E3E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002489, "uuid": "aa192a4d-0998-4542-9ca5-a56bfe1faf21", "value": "8f1204fd0f9e5fde1ea21874e8cd273b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002489, "uuid": "1a3c20e2-d7ab-4ed2-ba0a-f36bb1a56c31", "value": "6144:Y7W38hxAg1cLdQiZGP19vPdbbP5F41AcM:Yk8XsdjkXvRbH41U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772002489, "uuid": "c4762dff-4d0d-4d86-a8c4-049d4923aec3", "value": 292352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002489, "uuid": "9bcae6a9-d2be-4e4e-b84e-ddb650f42a1b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec95a9f3-1216-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772002509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002509, "uuid": "8e2aa41b-7efc-4da2-a9ab-eb97bcae3f29", "comment": "Malware payload (Mirai)", "value": "acd405c3e36300b130418ae6cb00b4d1", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002509, "uuid": "5a9f7b2f-5a4e-4ab6-9a02-b387dbf8d8f1", "comment": "Malware payload (Mirai)", "value": "0c6fb120b5ed230dcaa7ae3600df6a8d4b0efbbdbe63cb8eb7ad1f7737d7dc7a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002509, "uuid": "8b5e187f-261a-4f53-8255-071e253ae8e4", "value": "T114932896F401DDBEF80ED77B4493090AB230E3A109831F366257B867AD761E49973F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002509, "uuid": "7f03de38-1a67-4645-8083-554e04b0cd33", "value": "1536:Ltn1p2xk39dDtO83Qi2+Xn3eFm8FjinqIHzUhhPXPfsdFW8QMT0yZnH:Z1p+U9RT3Qt+Xn3eFN8zmhvX8QMRZnH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772002509, "uuid": "78efa941-b796-43c3-959f-5203eafbe5c5", "value": 89592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002509, "uuid": "fe917e1b-ab34-4a13-8734-3b77fcd63996", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec976260-1216-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772002509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002509, "uuid": "8fba0910-7ccf-4d62-b837-c1ff61bf477d", "comment": "Malware payload (Mirai)", "value": "36d6ef42802e8a6b3acf32686bdd1fbd", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002509, "uuid": "4ada589f-4da6-48c1-969a-c832d1e9906d", "comment": "Malware payload (Mirai)", "value": "17e803d3e9dc909f1d9dce9fb0b8944bbf3e7177f7136ab235aeabf3a1eff5f4", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002509, "uuid": "7a05a53d-4b95-4b7b-a46e-9290e23c99b8", "value": "T1C4734A4779C080FDC89AC138676FA23AD933F86E0134B25A27D8FA277D4DE112E2D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002509, "uuid": "b012e883-77d8-4be1-8cd1-52e934c7057c", "value": "1536:BvNYMmMJdgI0vb9sRUSdbxnzF1x1K/s5KWR7iOqoqYFK:0MALbKUSBxh1x1K/sh7iOqAFK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772002509, "uuid": "ad7f3a6b-5329-4f6f-a194-39e3032a3a07", "value": 79840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002509, "uuid": "02f0395d-cb0d-4e48-944b-cd19f59be789", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eca9b4b5-1216-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772002509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002509, "uuid": "2543edd6-183c-4dea-af72-76c9122b3ec5", "comment": "Malware payload (Mirai)", "value": "03a0e71f5b128be61580cfaa34a69429", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002509, "uuid": "b837ce75-a7bf-48a3-bcef-9f782c2d78d2", "comment": "Malware payload (Mirai)", "value": "0c395ed2f9adbd71048a2c2bf7b437ead57f777de0b9b17d43fffd7ff47685a3", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002509, "uuid": "14e9d3ed-974d-4ce9-a85d-41dce0f92ad1", "value": "T18A834BC9FB83E4F0E95605B111ABF77E46319D221020CE6BDB94FD72ED22A52E11B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002509, "uuid": "e2c88554-b81e-4d1e-b620-cd60edf5cca3", "value": "1536:hSYyng4DguDU8KJbdC8Eo11AUr31QxS+wd9zJ7zr:hSYyn5cudqruTmJb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772002509, "uuid": "067db71c-43fd-41ca-be59-f909d4b341e2", "value": 86772, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002509, "uuid": "7eb7fc79-ada1-4593-909e-de220008df72", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ecb9c006-1216-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772002509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002509, "uuid": "f66b3c38-da76-47ae-a4e9-287e459bdddf", "comment": "Malware payload (Mirai)", "value": "426671bd60ac27f6261a52c58eda9ee6", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002509, "uuid": "5529255b-4078-43d9-a5e4-c09e57506015", "comment": "Malware payload (Mirai)", "value": "a9b26f00361d52b2157c22ea7a664f36df511f8ff911ab6c96d14fb681b97d32", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002509, "uuid": "1db9ad8b-bdb9-42bb-89ed-e8966644157e", "value": "T1037328C2B547C0F9E81748304067F77FCB31E6289061CA6FDF6A9E76DE2354262172", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002509, "uuid": "e67b23ec-320f-402c-8b0e-dbd0cdadb736", "value": "1536:xRm7i25PUpfDuY8yYi2AE48YVULM9WxiEKJRh1F7a3ytY:6eOPUpfDEy5PE48Ys7QEKJRDFW1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772002509, "uuid": "e7b5e122-7ca1-4deb-a71a-9727218b27da", "value": 74928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002509, "uuid": "fe615276-b4df-4c7e-afa8-d78ad511700a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ecc49748-1216-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772002509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002509, "uuid": "c4791b2a-2fd4-4815-bc66-2eefe40fb9eb", "comment": "Malware payload (Mirai)", "value": "ba5b00bad9a8bc5a20ca00f9567715ec", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002509, "uuid": "f3ea478a-1c00-4005-8521-9a4e999d8a8c", "comment": "Malware payload (Mirai)", "value": "e3140cc9dc1348c3d4d7f0e76211d5411083cf649c9ffd88dc2969e55d9f7b6f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002509, "uuid": "f6ae188b-0b57-41e2-bf06-13f4ffde156f", "value": "T1F7512AC541D40FB41C636B77EAB6416C33C6B6678CE1ABD5D9E4BBE0824EE5039407", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002509, "uuid": "30092305-32bb-4d8a-bb19-26ec8b2dbfe4", "value": "48:vt7u7N7htX6GtgfzPtHKWtZoUt7Z7o7Utf83bt+9Rt1cgtSpVtfSOtD+CtMfTtUm:vt7u7N7htX6GtgfzPtHKWtZoUt7Z7o74", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772002509, "uuid": "99cf69ff-ed98-4ca5-a400-79d59474f770", "value": 2910, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002509, "uuid": "c5ba6114-4c5e-42bb-b4e3-35c317f15af5", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ecd10ebb-1216-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772002509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002509, "uuid": "f30e3889-2472-405e-a45f-c3ef022df8e1", "comment": "Malware payload (Mirai)", "value": "4af8bec7f64d73fe459a2b17ab0c6662", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002509, "uuid": "dbd59b69-c4a8-4d8c-87d1-e9f6f5b8339f", "comment": "Malware payload (Mirai)", "value": "4f55702afbddc308c85dea9fa471e6940a4f75419a970dcc0aee8c18eb69589f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002509, "uuid": "9bb91787-3d79-43cd-8e3e-0ffc899d52d0", "value": "T121B3C609EF614FFBE86FDD3746B8074525CCA51622A93B3A3574D828F24A64B09E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002509, "uuid": "03446fac-584d-4bf8-8b4a-7c28e47ef41f", "value": "1536:w4Ij5gpB2UJ5bTuoK7RMG6+FnFn+93c1Z/TWqJcZZsI+I/8NWqS:wm1+1F+9s10E+8NWq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772002509, "uuid": "d8834545-bcd2-4994-81df-17f9c16ece13", "value": 110272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002509, "uuid": "8e743573-3621-4d83-9b5c-dbe5d0fd5029", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ecd15cd5-1216-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772002509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002509, "uuid": "6005f3f6-7d04-432b-a4bf-6a42cf09bd9e", "comment": "Malware payload (Mirai)", "value": "528cf3f444fd3d3ee1344ec5edf70077", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002509, "uuid": "e213afa7-875f-41d5-84f5-134c08a6541c", "comment": "Malware payload (Mirai)", "value": "fd77c73a6619e384a8a62913377b59325351774dacf62584a2cdc030f0366355", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002509, "uuid": "f154cacb-7826-46c0-8a12-b60ef0edd377", "value": "T100639D63CE3A2E54E54888F071F48F7D1753D851828B1EFA199AC67A9043DEDB2463", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002509, "uuid": "3fe3da43-24ba-46dd-b204-a17d93455a7f", "value": "1536:AxBGXIRNXwELFKvgYasjlUDKTtKj75kyBtVvCU2LsA6:AxaIRPYa0UmT6KyXVvKIx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772002509, "uuid": "7c6331bc-deae-48c3-bdac-a497cdd9dff9", "value": 73040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002509, "uuid": "35bfe4c9-d262-4071-88d5-1e4575da0821", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ecd42310-1216-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772002509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002509, "uuid": "4de9dbfa-2b63-4204-97f9-72b68154041f", "comment": "Malware payload (Mirai)", "value": "2872b9fb87f79386ef2dfc24d3e0b4ab", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002509, "uuid": "8848750e-1968-4cb7-bee5-d727adba20e5", "comment": "Malware payload (Mirai)", "value": "0b5db13b09dae805c3162f7dd53cd7b1ae8fa875aea3b5afd8fa82742f09d1c0", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002509, "uuid": "f3cdb9f8-a9a5-4822-97fa-fdeafce04066", "value": "T18D835C42B70C0A43E4570DF43B3F17E1C3EA669121E8FA89690DAF4A92B5E325547E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002509, "uuid": "5301d9a8-0788-4d37-afde-18d4afa1bb1e", "value": "1536:dz9VbQTRWYfbJDQX1m5Ck8PtC09gXBfdloNjDrIe+pj/D:V9VbQJ6FmskEtcfdODrYjD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772002509, "uuid": "127826d0-06e9-40ca-9a3e-a5c2b46f001f", "value": 83436, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002509, "uuid": "d3c45af6-afb5-44cd-bdf1-6e74bcfee280", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ecefb255-1216-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772002509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002509, "uuid": "709b68c0-f810-4937-b9a2-155e40b114ec", "comment": "Malware payload (Mirai)", "value": "ed419dc67fb306504414b110e9a17f47", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002509, "uuid": "e745ca03-f81c-4561-8289-838da42b5f58", "comment": "Malware payload (Mirai)", "value": "ed3f5b9fd6aade86001cde876544672d67c658e534858cc4b48c221b5eaa4697", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002509, "uuid": "fabfd03a-94c5-4917-a7a4-f7b2a816f675", "value": "T173A3B85E6E218FBDF76C833007B74A31A79933D62BE1D681E1ADD5011F6024E245FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002509, "uuid": "bf8132b7-589d-4bcf-b1a5-0be83ac13e00", "value": "1536:ytjRz5rsx/rXS3ZOZdC/wVfSWvuuZaXH0jAxN6+eT+U9N3Z7:QFZY/TssQ/EdvuuZaXHlN67N3R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772002509, "uuid": "6aafa578-e2ad-442a-9957-1c459e59b2c0", "value": 106176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002509, "uuid": "05576545-2713-4a4b-8539-4fa1a8ab0cfb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ecf6a8e3-1216-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772002509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002509, "uuid": "3374a292-2037-4a7f-9613-30e341bec94e", "comment": "Malware payload (Mirai)", "value": "bdb04db101f2035d5407c80986b6b42c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002509, "uuid": "cebeb725-63d7-4e1e-9968-55caaec8102e", "comment": "Malware payload (Mirai)", "value": "924dbe5686c9a9a147d86cd890c8fc1dd0a69b013cf68e2b8fe2bbbf44a8c11a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002509, "uuid": "8df6130d-d5ce-4167-ac43-56d8ed89398b", "value": "T108833B42B71C0A43D0675DF02F3F17D1D3EEA69021F4FA88691EAB469176E321586E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002509, "uuid": "62a0f6ff-aa75-48c0-959d-ff15c3e89f87", "value": "1536:dBYvB1A37Mf8sTYE5j090uQ+MQ5eF9UEZ9//dbz4HyU9ONVcB:d8ArMfhTYJoVQoFFLdQH+sB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772002509, "uuid": "22591732-10dd-4f0a-bd57-9eecc9db7575", "value": 83436, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002509, "uuid": "e4088ca5-6527-42d8-8306-12765869a744", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ecff9220-1216-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772002509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002509, "uuid": "9e680b2d-3d77-4c98-8e45-e191b19aa3dc", "comment": "Malware payload (Mirai)", "value": "cc6ef4bf3cdc3f798d802610034ed045", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002509, "uuid": "dd237679-b58f-44d2-ad32-f9ba63c7f8b3", "comment": "Malware payload (Mirai)", "value": "f22293977dc2303d9fcffc252cb3feecda2cb15c3602e1c829f0629cb82ec071", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002509, "uuid": "2a4c429f-9d99-4dd8-b838-866e5e019e18", "value": "T16D833A85FC819622CAC5167BFB5E028D3B2717A8D2EE7203DD25AF21338B96B0D775", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002509, "uuid": "aa488446-f0e5-4713-a5c8-323bb5952acd", "value": "1536:/oUE3+RL1Nkkwnpf3wpZn3dIvpX7eZzyYCHNreAvBLyvL:gUE3WL/qJwpZn3dIvpXqZz7AyL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772002509, "uuid": "b859f362-915d-45e5-ab30-7be1e2a7708c", "value": 83880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002509, "uuid": "9b9a2371-39fe-4109-bc2e-30216e71154c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed129856-1216-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772002510, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002510, "uuid": "2eb7aa59-17eb-4e68-a6e7-876f5f03c95d", "comment": "Malware payload (Mirai)", "value": "b858727ee4edbb246528fcec9ad7ae05", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002510, "uuid": "cfbef6d7-6138-4ff8-b95d-9303e27d900b", "comment": "Malware payload (Mirai)", "value": "f66f1bec086eedd6d20104987628b2ce6bc23a057d7ee563cab47c2ae353cd8f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002510, "uuid": "1d49b8d4-5b84-4f69-9e8f-8190e42d2f15", "value": "T1F7B39E9BF28724A1C86787F007C71BAD2E1332018F57E9F77C1D2A3A197A1DB051A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002510, "uuid": "987076c7-cd36-4299-ad70-a4e1cd5ec2f5", "value": "1536:ZlbE6JHcTckcbA2axCrPBetfPc4YFlzPR/ewkx4Thqgs5I/LWY:3wYcXcU26WgtXbYFFR/eIqgPq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772002510, "uuid": "b4963c14-a0c9-4d52-9239-bf66e134c831", "value": 116068, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002510, "uuid": "066125d8-1769-4cad-89bc-0fce8d2ca5a7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ea551ae-1217-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772002566, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002566, "uuid": "7a3eb1c0-2f91-4215-b7af-ad11bddab375", "comment": "Malware payload (Mirai)", "value": "1baabe6fa9c10bb5bc9c81af87327748", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002566, "uuid": "1697bd6b-c8f0-4663-af74-c3733f9be2c9", "comment": "Malware payload (Mirai)", "value": "329697799d8c260732f02a2d036bb17e429ad681c30702597bf64181348d6d48", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002566, "uuid": "2ba162b3-a87d-4344-b318-3d8bce17a1d7", "value": "T1C1636CC6EA43D0F1FC6206752177E7360A73E5392069DA87C774E932EC53641AA2B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002566, "uuid": "0883441e-34d3-400b-ab07-4ba78ebac991", "value": "1536:DrpARyzrfyjsIEfp+q0dZyYYPubr83cpTUjE4GgDoXE/z+Q:3piyffyYIip+qE/r83yUw9gM0K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772002566, "uuid": "53177193-46e6-4f0e-9e7c-68581fafe78e", "value": 70832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002566, "uuid": "6d74aaa9-458d-410c-92a4-ec786737867f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "75ad0f5d-1218-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772003168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772003168, "uuid": "153944be-13fc-4986-9d9d-792b70f5c033", "comment": "Malware payload", "value": "ef423d26c9decd6805a66d4cd36ac983", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772003168, "uuid": "c464e9d3-14de-423e-ac84-60809721db46", "comment": "Malware payload", "value": "412c3374cdc0043bf112c227fd4f86d50b0670d90ff7475be605a8c0eb735d94", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772003168, "uuid": "2e50683f-baf6-4960-aeeb-8ab5f329bc61", "value": "T16C34F922A5CC1D3D89B386E075266B0EFA7D9013DA492989FAFC17970FF3CB195136", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772003168, "uuid": "72912eeb-02d4-4504-ba11-324987b3ef83", "value": "1536:E0htzcLmsfZWmFYj2TyG+sbubuqAfwtdV+8aTS8cHYAbhNYxhT4XLweGuxW7eyXn:EU1ImlTurfwD7EOLwL3t9dM5CZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772003168, "uuid": "07f62878-1fe4-4e5b-9a90-3d5c95ea3b18", "value": 230772, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772003168, "uuid": "d09d1bf6-0340-4ebc-adee-37947e8ca090", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b76d1250-1218-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772003279, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772003279, "uuid": "e8f1441c-8578-43bf-97e2-5cd7439e6f3c", "comment": "Malware payload", "value": "f5cadec57f0fbce59fd32578f090319d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772003279, "uuid": "30dfcff4-4de5-4d68-a683-1c4acdf2bada", "comment": "Malware payload", "value": "902c42d0bda581439f6caffa3f9d720bde0f1cbfecef87c2713bf25c9cbf2399", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772003279, "uuid": "cec888d7-926a-4abd-9a7f-e6f9898014d9", "value": "T1A88308327588582A210B028FD263336C70FFD8E2D611E5B6F6F922344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772003279, "uuid": "e15e5204-a711-4b5f-8661-d98888c2c037", "value": "1536:XJyp/QdMqpYJKNoCtpxD3t2ZSDXpdyr2pbnVWatVN/:XEKltp9t2SX/yr2pbVWQVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772003279, "uuid": "f3b0aea5-77b0-4df7-b040-7bdb98b8e257", "value": 85051, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772003279, "uuid": "7e7fa9f5-6dc6-422d-904a-6df8c2423459", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1dcd1f2c-1219-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772003450, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772003450, "uuid": "99dc0f26-94c1-4083-92fb-bbf03ea2ad3e", "comment": "Malware payload", "value": "41278e079b8488ed9af39bd5752bf522", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772003450, "uuid": "a8d7cbb3-3517-485f-b1c1-67b582b0f92c", "comment": "Malware payload", "value": "71aca2e0583b81b3b843e54724b928eacbd18b7cde9d361b97fa9f28024253b7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772003450, "uuid": "0bb5d19b-c6fb-44e5-96d3-26cb4b3308da", "value": "T1C93612FD72483B4CC01A49748133ED49F272562D0DFAD97AB6E677A07BBB820D602E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772003450, "uuid": "5c14e014-3516-468c-af63-9bbace288a98", "value": "1c9ac2acbaf0b716e789dce48e3499d6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772003450, "uuid": "3b0930f8-b245-4f06-ad97-4165f8b4e425", "value": "98304:XpGKqQJUmzzg0qZbL9flsKaw8qjBTuqEoGPQnPfzj+xtAvk8VgqY5QfKlWnoG+mr:X3qQiCzkvvpD1TunoLHHtjkrH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772003450, "uuid": "b38da038-9293-4d04-b04b-0f438569f829", "value": 5021696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772003450, "uuid": "200215aa-041e-45f2-bafb-e4d81daaa98a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43900298-1219-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772003514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772003514, "uuid": "2cddb42f-be6b-48e3-9b48-54863390bdc4", "comment": "Malware payload (Mirai)", "value": "05aa1be27f6ba1a86fbcbc783285eb88", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772003514, "uuid": "c247a53d-6466-4290-bed3-6a5c3af45e3c", "comment": "Malware payload (Mirai)", "value": "3139b0d6e77ad728a21219e1297a54f8eedc5771eeb1a5a6796e13f2b0960117", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772003514, "uuid": "24371277-5360-4488-92a6-b24fa2857534", "value": "T16AF3F845BC519B13C6C626BBFB4E428D772A1758E3EE3203DD256F24379B85B0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772003514, "uuid": "2da3d9aa-7bf9-4a6e-a6de-c99911b48b0c", "value": "3072:I53vPopIPlzl3D0Lxprxi0VvbvbA9VzxK4ZTW18Why19d+xEd/:4fPopIPlzlzEDg0VvbvbA9VNK4Za18WK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772003514, "uuid": "8e9892ea-40dd-464c-abb5-166e4185bac0", "value": 170392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772003514, "uuid": "09bf6f6f-63c8-44ea-bc97-678034f123ca", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "efa8850a-1219-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772003802, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772003802, "uuid": "9436a76a-907a-4da0-9d25-1c4f1151e85a", "comment": "Malware payload", "value": "1a5a033e9e19d40e118e31a38f89eb17", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772003802, "uuid": "da706693-3118-46f8-aa29-8fa97a6205d4", "comment": "Malware payload", "value": "d290e32e7e803e85d271e5fde9bd66f958236fc0e9e137d84bc4a3a037a1ca72", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772003802, "uuid": "0dcd615d-ad69-465b-97e5-e1a70cdcde42", "value": "T18E24E00DAAD5106A2B49F502547C7CECF12CC8EB708E7D0EAECB7687975B65A2C247", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772003802, "uuid": "7b03bac1-24c2-457a-96a1-6c89192f433c", "value": "3072:n7QzNPkN0v/GdSHsNkmRkPg4Qi3BfMvqIjQpZixqVCqH/4+ZX5GYkaF76kJnFI9:n76VkNI/GdSMDRknQGUyIdeCC/4u5zq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772003802, "uuid": "a03fb14d-967f-44dd-a5e6-66907a1fca4b", "value": 209991, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772003802, "uuid": "43e9c1f2-26be-43a4-8df8-fcf8e0b7e8ef", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "751aea8c-121b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772004456, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772004456, "uuid": "9c83a642-5396-4632-907b-f9ab6e202a96", "comment": "Malware payload (Mirai)", "value": "8be4ab5dd48e2327afe3b1df001e3e12", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772004456, "uuid": "9dbbea71-99e4-4c09-ba4a-adf8da38cb0d", "comment": "Malware payload (Mirai)", "value": "10f635da68cf55e01a3e82882c2fb2502c6ec800f608b5ac04f5b76c70981e8b", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772004456, "uuid": "0551dd35-6ab6-49df-a1d1-83bebb90b780", "value": "T1F2040845BC519B13C6C616BBFB4E428D772A1798E3EE3203DD246F24379B95B0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772004456, "uuid": "6c1bc1ed-35b0-4a84-813e-6de80221cc4f", "value": "3072:lYSvPb19lynIQm36BToDitTFv96T93r4fyV6cJArPYg3n0pD:KGPb19lynIJ3sToDitTFv9653r4fy6cf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772004456, "uuid": "feee7fb7-9815-450f-bc1b-8d2e0bd7b87b", "value": 173944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772004456, "uuid": "96148fcf-0069-453c-8d43-d7d22099243e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cedc445-121c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772004952, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772004952, "uuid": "6bcf8a7c-e001-4b28-80e3-c40a3843b922", "comment": "Malware payload", "value": "4a46dd496dd5f0cc0c54505d531b0251", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "NirCmd", "colour": "#9081ea", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772004952, "uuid": "15190f8c-df59-4355-8ad4-0150d36838ad", "comment": "Malware payload", "value": "22f9df8d3719ce3161e219639f7f66d02a0d04fec2772af01f611f99aa943117", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "NirCmd", "colour": "#9081ea", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772004952, "uuid": "818600f4-8968-46e3-a5a1-5ed08c732628", "value": "T152A52342F8C485F3C4511C331B65A7616A7DBE202F268EDBB3856B1DE9614D0EB31A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772004952, "uuid": "a720f393-8896-470b-806e-cd4463b05e05", "value": "12e12319f1029ec4f8fcbed7e82df162", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772004952, "uuid": "56250ef6-786e-416f-bcbc-731076470e2e", "value": "49152:ABRmTpc8iYM5pF9UBB6jdLXsuuX4/cqZIiQx6lSONx:a8TFM5pXUBB6BLXTuoEXx6lSONx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772004952, "uuid": "5101d743-dc7b-4fd6-b09b-29fd8b461670", "value": 2110512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772004952, "uuid": "576afcdf-8264-47f7-8eae-9fac71f85fb9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a026ee9-0fd2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772005073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772005073, "uuid": "e4046260-f803-454a-a6ff-f19d4df179a1", "comment": "Malware payload (Mirai)", "value": "dc78d5022b48ce467860c9348581f8d6", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772005073, "uuid": "94263240-918d-424f-8272-48b5d2f62651", "comment": "Malware payload (Mirai)", "value": "68d7893dc16ce4f4966c869b1527634d3635b86243bd09b30eea831170bf306e", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772005073, "uuid": "717f8f1b-7e36-4632-8378-e58924520e2e", "value": "T12A515BDB12005B719618855FB7F035B4624AE0D6AADECF14FB4C182E0FCAD4C7685B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772005073, "uuid": "833cbcb4-20b4-4043-9800-0311cfe26d21", "value": "24:MF2JMAebiBoLuZzEgEnE2EhEgoGbwrgJUf/AhM3k:MF2JMAebiBoLuZzzcvysGbwzAhM3k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772005073, "uuid": "1ccb9708-868c-46b6-925a-0bf2ed21607b", "value": 2907, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772005073, "uuid": "a85e5f27-79ab-494c-8aa5-d45354351dff", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "875b89ad-121e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772005775, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772005775, "uuid": "4fac0f11-bcc1-4af7-858c-f18818967f6e", "comment": "Malware payload (Mirai)", "value": "5ff850ead43180ed141e28745e2c427e", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772005775, "uuid": "3fbffd34-5d47-4a86-8cf1-c4b15dddc7da", "comment": "Malware payload (Mirai)", "value": "e7c427b7a4164bda25f899fc73d482dc3e80612812fd78975af3291aa351a399", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772005775, "uuid": "5e16a619-7b63-40d3-9357-e05828a77ec2", "value": "T16334B70AAF610EBBDC6FDD3706E90B0625CCA50722A83B753674D518F55A90F8AD3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772005775, "uuid": "391adc30-ae5e-40de-b864-5bfe4f7ffab5", "value": "3072:QfY8QzQ66Mrbe6W+eFdksJYr1XZMIpX5qAmtxVFY8:cY8QSMraT+eFd+pMIzuPVFY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772005775, "uuid": "543ac2a7-7e46-426e-b234-19da73e201e2", "value": 240908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772005775, "uuid": "946cdcdd-de9a-426f-88f3-94f8ff986770", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b122704c-121e-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772005845, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772005845, "uuid": "99c9f0d2-de03-4726-a8f5-f7c4405444a9", "comment": "Malware payload", "value": "0988b97a1f2352104e9a66c1aed8c843", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772005845, "uuid": "c8a5b4af-9e04-48de-9d54-1f13115c3ce9", "comment": "Malware payload", "value": "69c1d1fe05ed3d210447d0061dcebca3a43ad0f9869edb8831af76c5a9efed64", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772005845, "uuid": "d2b8e6b7-c1f1-4df7-a565-75c2a1a76a9d", "value": "T1A034DF6A48897112D0B4B953B4E1ACCBB282F27657AC0EEC1BD1C4DD230E4995FA7F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772005845, "uuid": "1b9e4c52-29fd-482d-a8bb-dcea963ad5b2", "value": "6144:owbqLxS/QCETTmJ0KdEaeWi777w2OB5Vdn3yGGVb0Qc:cxS/MTmuyEwprdNQc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772005845, "uuid": "19f38f86-1f1e-449f-83e9-1e8e2b96aab4", "value": 239686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772005845, "uuid": "db521316-97fa-45cf-b128-d59aaa72b44e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "120c8e2b-1221-11f1-8369-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1772006867, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772006867, "uuid": "68e91003-ab94-44aa-b7ab-e0d46f077795", "comment": "Malware payload (GCleaner)", "value": "8421c712ddb10e8df13624a76ed54a2c", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#baa077", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772006867, "uuid": "8cccb7a0-809e-4e06-acf5-1630afe31726", "comment": "Malware payload (GCleaner)", "value": "c01cc0a3fe9e26e5734cc7c8fd9bc668164cefce3ec796ec9b516be37666819c", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#baa077", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772006867, "uuid": "a8bcb715-4493-4f5e-8d3c-1aa41d7850ff", "value": "T198059E25F6D08733E1336E38DD1B6665583B7E812928584B2AE43DCD8F2938235E63", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772006867, "uuid": "7e73cd6e-09fc-4fbc-b491-c83de0dadad4", "value": "ce7a1d07b14b49824555865592c3af45", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772006867, "uuid": "7de4d810-6f89-4816-a9f5-53f60ee205e6", "value": "12288:RkAJdZJGY+5K/Lo9r7WTB+rPpQL7ivrIl7i8NZTBtq6mH:zXZJeK0Z0qQXqcNZTn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772006867, "uuid": "475ff28d-d13b-4b30-b0dc-2f9e21027b1f", "value": 796672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772006867, "uuid": "d10e92ec-4545-4073-b60b-7790dc1ea0e5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7f11b85-1229-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772010608, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772010608, "uuid": "b9aa0ac0-b85d-4e61-bd87-d8a203609a39", "comment": "Malware payload", "value": "62531f8b67be425f2fb812fba26abffe", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772010608, "uuid": "17b3de99-a0e5-40c3-a53b-4e5ed6baefbe", "comment": "Malware payload", "value": "8271511f8abbe34df859cbc8cfef0908853cca9edd0660a1e98d55917c15dec9", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772010608, "uuid": "61283803-aeeb-4cbd-b51b-519e54bc2ef1", "value": "T105C423B7179AB0897503E3E4854C6D9489AF20D957C3436ECA1E2693F5BE147FB200", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772010608, "uuid": "c8a7ff58-64df-4de6-9334-ef2155a798a7", "value": "12288:neElNtIBB2gX3U5SA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9N3ezk:neSIBBfH0m6Jj6ESfUxZ91kmY/9Heo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772010608, "uuid": "2212af58-4421-4ee5-b4ec-04a62fd9c3e9", "value": 584435, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772010608, "uuid": "8949f491-fe4f-4604-855f-2310b7b4d067", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e0f0f1c6-122b-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772011509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772011509, "uuid": "466f182c-708c-4e9a-b359-c9cf85084788", "comment": "Malware payload", "value": "341a6d065f80b82ca100d60c5a2de0a5", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772011509, "uuid": "26944d35-3c1b-40c3-814a-e45cea4c77a1", "comment": "Malware payload", "value": "bc22b4a591da3a71906d4fa3a363bfd0ebcd3ec567cc811fda1c261940d2cb8c", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772011509, "uuid": "dc0d1792-3a44-4beb-9a81-05b58b5b21bc", "value": "T19C55334253A8C5DFD1FFA590EE77DCCA642D34B6BA9D195A800873B0962F013BDD92", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772011509, "uuid": "457b8e4c-7065-4f7d-8317-4d9250b0d425", "value": "24576:sIni+vlCZf7e3Q6OQ/QxTJ7ILzYlsRhjw6LCvavtxU6bJOt3ztV3l+:ti+vleRxTN+ke3eSvFJujzl+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772011509, "uuid": "d38f92f9-3244-4034-b336-08bbfacfb9e6", "value": 1334521, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772011509, "uuid": "d79271e0-0ad4-4133-93c3-2d8c1a7203f4", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772013617, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772013617, "uuid": "e0bb909f-7404-4784-9b63-c44de5f4bce0", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772013617, "uuid": "d068d212-dee9-4567-a90e-a4712b6875ab", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772013617, "uuid": "5c8bb73d-dc73-462f-a31f-1aa311e16b71", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772013617, "uuid": "e1820795-4c17-4c62-b00b-5dcd95171b69", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772013617, "uuid": "9dacb585-41fc-4da9-8e4f-2376218b63ed", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a382552-1231-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772013967, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772013967, "uuid": "0fbc1077-c02f-42ce-89e5-7be792d88631", "comment": "Malware payload", "value": "e53c4410d8c4eab255f0ad4c8fc2bca7", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772013967, "uuid": "afbe67fb-063f-4d29-a20e-204a41254428", "comment": "Malware payload", "value": "e1764a57275e778eb5f0fcf06c325de639fa8baf47f46ffb23c56e93dd985047", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772013967, "uuid": "095e5e62-29f7-4ba7-b353-152304b7fa93", "value": "T117069E16A2B500ECD0BBC27889469607D77278550335EBEF56E08EA22F23EE15B7F7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772013967, "uuid": "11f895a7-9b78-4722-98fb-21573c5f7ed8", "value": "af0c845503178cb230674faadcc961fe", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772013967, "uuid": "f3858214-90cc-4a83-9fe1-0dc51e35d2fe", "value": "24576:Coij9wqn7meRNGKda9Lrc5p8JruwnFHtR7XI:CoowqnfN/grc5ppqr9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772013967, "uuid": "59d8e110-8cf1-4b90-b679-ac9163cbb166", "value": 3757568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772013967, "uuid": "b3eae00a-58b9-4252-8ed5-dae63dc9c660", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2ef5f82-1233-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772014867, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772014867, "uuid": "50443547-1a12-4614-bdab-8f75f31b95ca", "comment": "Malware payload", "value": "3130517ed272e172f2fe1a8ec9518190", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772014867, "uuid": "683be2c8-33f9-4e26-8cf9-68b475b46cd2", "comment": "Malware payload", "value": "111989ae932c343373febd7672b83418c0e3e766fc779102a9c0c91f82088eed", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772014867, "uuid": "2326475a-3791-4456-94b8-76086d93490e", "value": "T115C423692755F0C46106F3FC828CBCD886EF14F98B9315BAC90FA545F456257BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772014867, "uuid": "1fdaba7d-53ad-431d-8bf7-977450f1502b", "value": "12288:UA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpW1SFyorOIic/7MPQ:/m6Jj6ESfUxZ91kmY/99z8EFXicTT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772014867, "uuid": "46d57eed-bf0e-4373-91d1-08c64ad8136f", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772014867, "uuid": "309fba98-ccbd-44ca-901f-ee343592ef4e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3bb38a74-1235-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772015526, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772015526, "uuid": "e10db805-19a0-40db-afb0-b769f66b3fd0", "comment": "Malware payload", "value": "a05e8bd47bd109f0c7d963c572cf0518", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772015526, "uuid": "8757cc74-ba24-4ddd-8c9c-a690a404a55d", "comment": "Malware payload", "value": "ddd1bad59f4f9e0d3d6f563da395655d080b8b2e2a128638130715b4ecf2c0ee", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772015526, "uuid": "3d934459-542e-4acd-8333-53da53949967", "value": "T11CB423856C6C2B73F541F98C1AC4342CD4202C3B9AB763DC5E8844D3647EB66BD6A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772015526, "uuid": "54b90461-c311-4c64-99e9-22d2f2f0021f", "value": "12288:0jXlNMiiXBZTpViRziobl9jcr91+rTY3r8q5fUhury:cXR2BZd0RLbl2rKY3Im8My", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772015526, "uuid": "b9f2a7ca-7c19-46c4-9d85-449fbb2b2740", "value": 530766, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772015526, "uuid": "4ab682ac-e708-4461-8dbb-9307ad928df2", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f0af828-1236-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772016069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016069, "uuid": "83e962a8-1215-4825-b1b8-61edfdb6ce70", "comment": "Malware payload", "value": "930931b63dec2110c4d4c8b6c1aa207e", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016069, "uuid": "4be24f58-31e7-4f98-b13d-8f2fc165a602", "comment": "Malware payload", "value": "54853512452a2b557f6e3508698850f7892a39bd429cd2ec9ed5613d3448598e", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016069, "uuid": "72dc3b06-751d-43c0-91ff-f900c52e8e3c", "value": "T1ECC423692755F0C46206F3FC828CBCD886EF14F98B9315BAC90FA585F456257BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016069, "uuid": "3be25588-034d-4eac-96bf-9b1bf65d0a35", "value": "12288:IA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpW3SFyorOIic/7MP6:Tm6Jj6ESfUxZ91kmY/99z8CFXicT5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772016069, "uuid": "2ea4e7cc-c5ce-488e-99e4-5303457c4900", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016069, "uuid": "3fd4cad6-6067-4c25-adb1-725c097c0540", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c60e7b91-1236-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772016188, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016188, "uuid": "eaa4d713-465a-4eae-b443-afa3340282f6", "comment": "Malware payload", "value": "c9089dcf274c327a6695f0614ab63580", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016188, "uuid": "50e6791d-d46b-4842-b4ce-3e7dbe6c9e52", "comment": "Malware payload", "value": "929feb93077c61a87caa81605d3039e341705fee406745cd53fa7d030440de15", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016188, "uuid": "5af91dec-d37b-4017-8689-6037d736147b", "value": "T130C42304340641D5835A2B1EAEC4E6E0BEB560DBFA1CF940AADD7FD06DE92A177C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016188, "uuid": "482f9ac3-fc3d-411d-a094-4479c9c2f65a", "value": "12288:X6wlOMWROC/FTeHo22Qm7NzofOr68mieA924EwCU:v4MQOC/gHozN7NzomW8gA9n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772016188, "uuid": "1e37ec8e-92d9-41c9-ade1-0eeb11628f7b", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016188, "uuid": "ede6bd2f-b170-4700-8b57-36e6e2ab911e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "303a97ce-1237-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772016366, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016366, "uuid": "01384918-6dfa-4c25-8fe3-6885cba6e373", "comment": "Malware payload", "value": "b6570ba8935a9a4f0e83a40880a857cd", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016366, "uuid": "60b8e373-adb9-4760-81a0-1b419e03e2d9", "comment": "Malware payload", "value": "2d92df6beff6ccdb68272adedc1673ea12c1a19efecb77a16f9161ecda56ae8b", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016366, "uuid": "e22474ed-1e25-4be2-b551-8195437df8e9", "value": "T18EC4D9B46204B8C0D46EAB729C74BFA8A13E11B59FCE3ECC1194BAD01FA37557A0D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016366, "uuid": "2a37c025-741f-418c-bdac-eb072d1c3984", "value": "6144:ACHu6h+VH6n4WACNXYPSNu2XrwsYVPUrT7CompdR36Ue8kTCExan/lOH:ACu6cU4WfBdyPUqpyylO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772016366, "uuid": "06d62708-3c0f-496f-820b-d63cb4d47200", "value": 594222, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016366, "uuid": "eb8fb931-47f2-4ee4-9b27-cc03dffa8c8d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77c62460-1237-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772016486, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016486, "uuid": "41136ab7-690f-4a9b-8135-90323461bea0", "comment": "Malware payload", "value": "f83ef3ad39fbf1fa323dd58ad37319be", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016486, "uuid": "756d0df1-3cca-492d-980a-81616ffd8e22", "comment": "Malware payload", "value": "37fd4a6375041fd2f6b36dd5b8379ba632bf8a469336a8c6d3ddf950fc6250cf", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016486, "uuid": "786de47e-c8dc-4280-8bf9-fd4c0a7a8733", "value": "T176C423ED0B6E70884C7B13659B8322145E2E0F725A10B7D7A2E8D64D4E17A9C9F78F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016486, "uuid": "56b2ec57-4a31-45cf-b500-78b71ac6d2e7", "value": "12288:wyBXIs7rM1ocqOqO3g/ALyYG0ZaDajTCXMO8xzDOee5g:NImQ1gEA/f0Za6TCXKBxeW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772016486, "uuid": "33f17add-6be3-4368-bcbc-21a9d771d3cf", "value": 547027, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016486, "uuid": "0d9446c4-c7c0-4cf2-aadb-9fb636a3cbd7", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cd66ceb-1238-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772016978, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016978, "uuid": "2673c757-c22c-4014-b30b-ee8708c267bf", "comment": "Malware payload (Mirai)", "value": "9292c9309f308ba809711e5ccc3a07f8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016978, "uuid": "4df3c37b-5421-43e2-9a5a-b93dbe8a2772", "comment": "Malware payload (Mirai)", "value": "c3bf3b0be0e8a68eef4365fcae96aeef658b18e32fe52c86701e13ae464ecd70", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016978, "uuid": "a653a6ce-17eb-48f3-87ba-9f4cfc68e496", "value": "T1A5A2D01172A32D65F3ED2C3DC96E8357F9671BFC80F6327569415A20C94924A3E38A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016978, "uuid": "83f774b1-dbc3-41a7-aa92-a963061dfbf0", "value": "384:UvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjGHN4hymdGUop5hl:UvQn4j+ZO5fKAlxyOs3UozL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772016978, "uuid": "2412f96b-43aa-47de-b6e7-ce06687f1058", "value": 22160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016978, "uuid": "a7a85696-18f8-4ba7-a3b9-ddddfd0bebd4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cd7f78a-1238-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772016978, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016978, "uuid": "13d45063-5f38-4660-b010-ae244f38f1e6", "comment": "Malware payload (Mirai)", "value": "136ebb88cf914f502054a6525e6601db", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016978, "uuid": "511a2bf4-db22-4f37-ac8e-41ca8fa8f53a", "comment": "Malware payload (Mirai)", "value": "1ab5099ca53a7ac2fdfc5455f52f9b67036eb3d89a44ca98099a11cff86056fe", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016978, "uuid": "e071aaba-bc0f-4eb1-bc4c-a978928ace88", "value": "T1DDA2D025D345AEF4DFAF9D9052C2C2C27AE547C6278AC8E240FEAF017506046BB89D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016978, "uuid": "0a353d63-14db-41fd-a7cc-3eabe559b3ec", "value": "384:M/JywWc84Tp2YshxqlDeAkSqjGJLeCE5zRW6C5zjNSmM4uVcqgw05VxJD:MRxsSVsMD6xiJJE5zRWNJo14uVcqgw0j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772016978, "uuid": "dbb4a726-991d-4492-8936-996e3b9d1a5c", "value": 21884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016978, "uuid": "4f3bc331-5666-4995-b3ee-06e06d799de3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cd9e538-1238-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772016978, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016978, "uuid": "27311522-16d2-41ff-8da0-0b83187bd94e", "comment": "Malware payload (Mirai)", "value": "ff48f72815eca43373bcedfcd84d4826", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016978, "uuid": "ec0ed5a2-bcb8-40eb-b282-3da79dff1a6e", "comment": "Malware payload (Mirai)", "value": "f2d106119cf094bab39955c564eaa924ff7e0888d9e225c69fd0123cda5f43e7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016978, "uuid": "93b4f332-6871-4aef-a10a-734eee9cc843", "value": "T17E336C36E029DED0C6560234A4E88F751F03F1C883536EBB2AE546B2645396CFA19F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016978, "uuid": "775b67e0-bf7a-4201-b4d4-8a6bfcbff627", "value": "768:Oa2vU7eng2qGJert7LrLMU6fgatQh+YbT/9+m3CZQoV/bnmCozw:Oa4U7G7SvT6ftBTm3KVrmCo8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772016978, "uuid": "3a1277e3-fd8a-42be-875e-26c00371831b", "value": 50168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016978, "uuid": "909776df-3f60-447f-b63c-f5d95c725d32", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ce491a2-1238-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772016978, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016978, "uuid": "4e65cc09-97ea-4443-887a-4a9a7efa3814", "comment": "Malware payload (Mirai)", "value": "ad04d1a8355622cb1f920e6674170d81", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016978, "uuid": "34a9c492-9745-4108-b1c6-d2ec564e4fe8", "comment": "Malware payload (Mirai)", "value": "ab277a4ed7e102b7ab4c204127cc5c38ba69cd8799d6042518457b0225abfde0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016978, "uuid": "d9b32e68-30ec-4526-9d10-568b3beee647", "value": "T14B230271490E8EB524303C72EFD99793B6E12AB1C6673023D6280A386F757531E57E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016978, "uuid": "7bd9495e-c6f3-41d3-834b-bb23ae8c54b8", "value": "768:g/TYCoIxdEk+AxoTZAZHFeq8b3M4V9q3UELbUXfi6nVMQHI4vcGpvt:gECFd+A6YHAxMJLRQZt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772016978, "uuid": "ce993bb5-b681-4632-ad70-d9c99b77c5c9", "value": 46624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016978, "uuid": "b9269587-e25d-425a-af90-52c1f11b3b0c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ce8bcf6-1238-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772016978, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016978, "uuid": "953ac816-409b-4b18-8e73-b993333813e1", "comment": "Malware payload (Mirai)", "value": "e6a08efc0ef45ed510897023fe461b78", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016978, "uuid": "5026a7f5-de7e-4654-bbea-70252670979c", "comment": "Malware payload (Mirai)", "value": "6a8e701c2bccea14460cdf7bc8d92acf5ff1187554094565407cf91ce226cab2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016978, "uuid": "e37f1fda-bffb-4280-9390-4ab0c160c315", "value": "T1A5432921B63A1F13D0E0A47D21FB4B59B1A15ADE26A4C64E7D720F4FFF11680A943D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016978, "uuid": "4cedf8e7-b9b2-4885-90fd-c57fcc57d246", "value": "768:RqowmZPu9wtnfbltWgC6BSJsBcfDSTFIuQKqgESnmC/xO+KpAw6:RqtmZPuutfbltZFBSJsBcfDSTFI+BE6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772016978, "uuid": "10f573cc-08aa-41a8-bf01-449d72ab7ea7", "value": 58376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016978, "uuid": "ace8d7d9-3b96-4d25-a17d-6d6b293c45a5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ce8d97c-1238-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772016978, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016978, "uuid": "96ac695d-f1a3-45a3-8a95-f2a4aa9438cf", "comment": "Malware payload (Mirai)", "value": "aa1dfa735f6913529d3048a40e2d4e1e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016978, "uuid": "b11b5cc5-f167-42a2-8fd6-e39c6a23559d", "comment": "Malware payload (Mirai)", "value": "aadd6c06fab540b50b2f84fe852b970fd625defa427597e8a4c0f33ca1320c35", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016978, "uuid": "bdaf5e50-af06-43c7-adcc-c03fc6f93024", "value": "T180330A9EB8029D3CF90BE6BE54164E0DB93177C152830B2767BBFDA36C721945E02E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016978, "uuid": "c5044d1f-9d95-4954-8a71-26b26294f5c0", "value": "768:gduPBFnHooqR8qOCKq2cH4/te+TK806MMUVjzkfQXObHud2oGS:r/hqaJMeteqK806MHdkfQX6HuCS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772016978, "uuid": "c22a9e1d-f935-4d53-8124-46229c6b796f", "value": 54932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016978, "uuid": "ad5fa157-49f2-4719-98c7-3816a7ca5b32", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cebd08b-1238-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772016978, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016978, "uuid": "e7856fb1-ce09-425e-bc2f-882571b9a37a", "comment": "Malware payload (Mirai)", "value": "ef9d34c8647f049f82157429c64d0513", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016978, "uuid": "18bd8760-4761-46c0-8b21-599a39d30569", "comment": "Malware payload (Mirai)", "value": "0260f7c239b5741341c84b2334222c98a8bfa688fb058472c2ac390b039ea100", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016978, "uuid": "784857f7-4b42-474f-af12-aa43fad8ec83", "value": "T16A82DF3052AF75E5CBF10431EEAECEC6971A0BB8D1FC369217586B78898210251F87", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016978, "uuid": "5819849b-f0d8-4ccf-bf74-33616920a61e", "value": "384:MjlzRV0P6iOwrkom0DRnVATuSlShu6NvmPWtUn+KMaT43+IhymdGUop5h5lE:6/V0P6+kom0tVAoNvm+to1T435s3Uozu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772016978, "uuid": "00f2a2ca-7418-4f93-9d7e-1074f9c627d1", "value": 18488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016978, "uuid": "7a2e5b90-1da1-4b6f-8f4f-02e7f23645f4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cf2f8f0-1238-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772016978, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016978, "uuid": "5d1ce0ed-55d4-4cd7-ada9-6149bd6be34f", "comment": "Malware payload (Mirai)", "value": "242166aeb6303652248fa17cd46bf116", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016978, "uuid": "babf97df-083d-459a-b218-eec7eaadad3c", "comment": "Malware payload (Mirai)", "value": "0e5ce8920fc81721e195d6567473daeee40023ae542c0e641a099b39441f20cf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016978, "uuid": "0fcb1a54-e219-4889-a42b-f0ef0f7c1c0e", "value": "T1B9B2DF3C1B151B98DE1AC0BD83A80B613CB81B259142AD8B6217ED939F568747453B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016978, "uuid": "257ff023-dd31-4b55-ac00-bf2a19f2686e", "value": "384:6eD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiqiDmd1JgGlzDpH7uNj1JX:6eD8ZSWvZHZbs1row697qohQvg9qgi1s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772016978, "uuid": "9393fdc8-6339-4d26-abd1-bba6572751dc", "value": 23784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016978, "uuid": "cce5f91d-cb19-4aa6-b818-91dcd9ff3b8d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cf6b45a-1238-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772016978, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016978, "uuid": "d0a2d4f0-04f6-4dd0-9b13-8d4d87a6e8c6", "comment": "Malware payload (Mirai)", "value": "32a60dc7f923c35c338ede6d1e261208", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016978, "uuid": "067875ed-955b-4505-90e3-73ac8b2e29a0", "comment": "Malware payload (Mirai)", "value": "3762a6a3b989850716155a080bf907ddde31d00903cf192dbd01fe3584bc3b1f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016978, "uuid": "2dd86af1-a570-4337-ad22-452d287cdd8c", "value": "T1F7B39CDBF24702A0C8624AF007CB4BED3E2723815F27C5E72C6A657969791CF8905F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016978, "uuid": "61fe9ec5-b4e4-426b-9511-6ae0f7d1f722", "value": "1536:Fu27gBY9FSSpj3z5Qxw6YaWWgg1l/LWy:c9sSyzz36YaWWgg1lq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772016978, "uuid": "8a118620-cc8c-4e7d-bf38-3942425f9676", "value": 107800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016978, "uuid": "8cf9b48c-74cb-4dd1-8584-5e556898c43e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cf70bfd-1238-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772016978, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016978, "uuid": "b583f013-e308-4a59-ab4e-ff761c29181d", "comment": "Malware payload (Mirai)", "value": "d626895c9c650b6adc3adec005449978", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016978, "uuid": "d0cd5138-8706-4847-8580-a13577761689", "comment": "Malware payload (Mirai)", "value": "03eba2113e1ce14bec510ab7c3cb9536886d9cc46ec02936538a610104ff09ba", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016978, "uuid": "2fed0dc9-333f-40ec-9a76-b64861dde108", "value": "T1A3C2E0E07726FA31C420AC3DE52B4D8A3A51067C90FF353764268D359EC1A9A67F84", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016978, "uuid": "07a0dcbb-d76f-4c83-88c4-b66f5eed9625", "value": "768:eMKyhegCCMqfizjoNpd2vJdX6vwrc9q3UELuJ:NKy4qfqoeJdXWglLI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772016978, "uuid": "c71b8397-20db-4d05-9115-edfbc4df2029", "value": 27300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016978, "uuid": "53703dd8-05ab-4db3-8797-13dde94207d1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bb625fd4-1238-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772017029, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772017029, "uuid": "fc8a49d7-a714-4125-bf5d-8dc97086c116", "comment": "Malware payload", "value": "202fb063d4b40e42a0ddafdc5d585a3e", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772017029, "uuid": "b908391e-410a-4884-9c50-94c2a1a6cd89", "comment": "Malware payload", "value": "41e795a883c96aaee1739ca6e4911c964960aa6e809fe3affb76e680041c2bce", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772017029, "uuid": "68111863-c36f-4d22-b731-eb57a1ce21f3", "value": "T1F3C423ED0B6E70884C7B13659B8322145E2E0F725A10B7D7A2E8D64D4E17A9C9F78F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772017029, "uuid": "d0e124b2-2469-4bf9-919f-153dc9ad6c18", "value": "12288:RyBXIs7rM1jcqOqO3g/ALyYG0ZaDajTCXMO8xzDOee5Y:0ImQ17EA/f0Za6TCXKBxeu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772017029, "uuid": "955383e0-2ac1-44c5-9a19-be975d2b2a0a", "value": 547027, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772017029, "uuid": "30caa5e6-fcc2-4426-a1cf-26535e208d4b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bce03f53-1238-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772017032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772017032, "uuid": "154a64ef-f4b9-457e-95c9-3476da379a43", "comment": "Malware payload (Mirai)", "value": "8a36ab0e48f4ce2d3d303a8f5b063fe8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772017032, "uuid": "db163e7f-2ce9-4aac-abe4-da7c1ccc589f", "comment": "Malware payload (Mirai)", "value": "be4e5905ac734250ef02d18c3cad7c537ae7f6c2b4a35a77da99c1e2eb74abb8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772017032, "uuid": "58100a17-d455-4c81-a784-49c376909533", "value": "T153B2D0CD649430C4CA8D7C7C178D4B664F6CA190BAED9B26E354CD9873BEA4B386D0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772017032, "uuid": "017d9859-8642-4a2d-b6d3-91bfa57235de", "value": "768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBpQZqSWvX:4QlS07FUXqIYSXQKquIqP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772017032, "uuid": "3f25ebe0-717e-4e19-88a1-c31532a86abb", "value": 24912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772017032, "uuid": "4e56c115-7bb1-4856-9f2b-1b1ac1e03ed5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be20647f-1238-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772017034, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772017034, "uuid": "2205414f-612d-4c43-ab83-2a8134c1d29c", "comment": "Malware payload (Mirai)", "value": "216cf6b202f0cd7cf8fd0984455b4386", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772017034, "uuid": "9e4dd2db-aca6-468e-9395-5982a4f102ff", "comment": "Malware payload (Mirai)", "value": "33704c6f682a5399f3a763bbef351afae4f64759a4d9eab086e3530fc4e13023", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772017034, "uuid": "0e524420-c6bd-42d0-b88e-974be54a151e", "value": "T1EDA2E0217F1DE98FCC37B23887E5E5C692D17D24C29C86866781C11BBAB36C46824E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772017034, "uuid": "7e69e7a5-4891-4448-acee-c96632df6a15", "value": "384:Mg9Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaQNAr8vcoBAvP+qNV+KLebRt3vSyD:798o08kxofBE+ZkXaT47C2Epit1D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772017034, "uuid": "8edaa49a-c370-4e4e-a66e-af4d611ee1e7", "value": 21500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772017034, "uuid": "a24a005f-a6ac-4734-9b4f-cc7a3e1bfaf8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25f1bbf6-1239-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772017208, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772017208, "uuid": "34bbf5dd-1fd3-4059-9950-4e72302e2b7d", "comment": "Malware payload", "value": "2280852af5ceb1e92bc212362c7c2779", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772017208, "uuid": "4032412a-2c77-4cec-b5b1-b6fc63751ada", "comment": "Malware payload", "value": "08d98d3945182f70dbe478012999f61711a03fbb1b91f7436427b95d3f7335ff", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772017208, "uuid": "3920c1f8-df32-4bd3-916d-9b256b9c2030", "value": "T12EC4238BA3FD845390BF1F58AA5BB48D091976F34722DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772017208, "uuid": "2e2bb617-5514-4bdb-80bb-172f1b346f63", "value": "12288:f+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byVH9I1P0QKw6FEt:f+QqldA/TSO713u7xnVH9IaQKHg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772017208, "uuid": "324fcda0-fa66-4ba6-ae36-8810fc82da4d", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772017208, "uuid": "a637f060-8b2f-4be0-9cb9-3e418de8ce60", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc933d85-1239-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772017568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772017568, "uuid": "7676b19f-bdf8-4700-9035-20c0064b755c", "comment": "Malware payload", "value": "e93e09200e81b44e4a49e1211f3da5b9", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772017568, "uuid": "8e0db8e7-8d4a-41f0-88ef-fc10546cb1ca", "comment": "Malware payload", "value": "13de5d17cb767cc394891cc895aa393ef58193785be2d6c40fa7c5610caccb8e", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772017568, "uuid": "f4e7b751-f99f-4231-be6f-10fac8873a59", "value": "T139C42367226FB2500DFE92ED4E4156146D3D8E322A00A6FE55D8C9CE8719F0ECE35E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772017568, "uuid": "66a4ffb9-32a4-423f-8007-8428cddbc60b", "value": "12288:+eCEhtf9qO3g/ALyYG0ZaDajTCXMO8xzDOeQakh:htlA/f0Za6TCXKBxlm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772017568, "uuid": "556c83c5-032b-42f0-8d53-0437b2a5da53", "value": 546286, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772017568, "uuid": "ba3b7771-165e-4f4d-8d0b-1e6b8af937ed", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f5a58bb3-123a-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772017986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772017986, "uuid": "fd77188e-b10d-4f7d-ae65-85045a52ae47", "comment": "Malware payload", "value": "fc8c8727cff456e30798439a55d391fb", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772017986, "uuid": "07e1a27b-47c0-4b4f-93a8-f8b18801c216", "comment": "Malware payload", "value": "110c7bc6edae5ec10f86dae949a052d41eaf07c06a7172da4c49da75cf74af7e", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772017986, "uuid": "893e4d3a-1b4e-4fef-a1bf-77eea62598e9", "value": "T161C4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772017986, "uuid": "59447362-ed60-4d99-9dd3-57ee50008f06", "value": "12288:j+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2bywH9I1P0QKw6FEu:j+QqldA/TSO713u7xnwH9IaQKHD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772017986, "uuid": "6c4f3f3d-409a-4552-8e3d-337f0059bb05", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772017986, "uuid": "f92dc276-0757-47f2-9f47-0be81a84990c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef9a7c31-123c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772018835, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772018835, "uuid": "21b52b1a-7fe8-41c6-91c1-936fa045fcdd", "comment": "Malware payload", "value": "0f5ef903eea9f0297de60532729089d1", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772018835, "uuid": "51edb99b-78ae-40da-9e83-0373ee68d5db", "comment": "Malware payload", "value": "bcfe0b04eaa74b76215fa323030e710d8b4b91dfb8f3875210bbd7efe5e38342", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772018835, "uuid": "d630071d-498e-4d97-8cf5-98bd44cf8733", "value": "T17486330CDCBD2C09F20FA271798A191AB4404D4096B9A71B0764B4B59D9FDEB2F73B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772018835, "uuid": "09a72e64-2f07-4bd8-b924-d85f078482f0", "value": "196608:px1WtNjPq5ld4V8ENo/0HP9bFW7ajMwXClj7e8x5wC3wF2TitQYSs:gtNjP84RasHxQaYwXB8QnEGtQYz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772018835, "uuid": "754ebd2f-9ccb-40d0-b097-6c57f5d4b5dd", "value": 8472710, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772018835, "uuid": "a75217e0-ce6c-48d0-94db-eea077322d2b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9eae35de-123d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772019128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772019128, "uuid": "8e471afe-584b-40b3-bc39-88b9cd2ccc95", "comment": "Malware payload", "value": "afb4af4e3c44e47edd2e5a0ed519b5e3", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772019128, "uuid": "f1189549-f2d8-4bac-bde3-2eb9f41ed906", "comment": "Malware payload", "value": "965ea92125c661aa3079795d6f20e9d858b3a6b2d896cb68e21d0e090aae7f03", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772019128, "uuid": "e9727ccb-8fec-4652-91d5-4a0af6dcb928", "value": "T107B423F5A7606BCC9D20522F2F4A27CE19274B41B403C54A1ED2875A421F6FF4E7AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772019128, "uuid": "1186da17-7df3-4244-8630-e46a9fb3ff06", "value": "12288:ABRdpQ73iBVYWVCwvEXgbvM0a4OTHiQIIFzuK9Gd9IU2:AHUw2WQ9XgbM0azTHiQIouDa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772019128, "uuid": "e7a692da-f36c-41ee-9bee-6f8286fc0817", "value": 542317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772019128, "uuid": "24261aba-fe4e-4437-b657-8dd50baa9186", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1da7d79c-1241-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772020630, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772020630, "uuid": "d8974355-b921-4a88-aefd-f2c79ebcfa0c", "comment": "Malware payload", "value": "a75d0d0a1e368015d71981b44b7a7951", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772020630, "uuid": "7deae1bc-56b9-4bf3-9ba0-1e228f16cdb4", "comment": "Malware payload", "value": "6d9e3cd2d1570b230be6f00fc89ee2d2f3f345e00f6376e9a56cb67b2fc5a302", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772020630, "uuid": "3c9b8aa7-ba01-45e1-b39d-dd98b3e2d2b3", "value": "T1EBF633A8C9DFF5A7F8670834A146A4A764E7F88611BFD4E4483DCAF482BF42495847", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772020630, "uuid": "b39f9fd0-3634-446b-867a-3138cb6be905", "value": "393216:cOAoA6cb5DWMqOZHvEDMuU5KNzvL4orIMWiaaYsgP0:HAP6ctDrBZPQRzT4orIYFoP0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772020630, "uuid": "331b7937-9cec-4a00-b978-82cb5361ad23", "value": 15660591, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772020630, "uuid": "e9b28d58-4b24-4a21-83de-3345085a59cd", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1dac912d-1241-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772020630, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772020630, "uuid": "c3e20586-cae2-4a6f-8001-2a8e9af884fe", "comment": "Malware payload", "value": "ff0eb16768e7ecde4c7407f68a1f9b95", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772020630, "uuid": "9960f8eb-91b7-417c-91dd-ef0c3c47cf91", "comment": "Malware payload", "value": "ebeef831c52b7e930a6456caedf7849814b8d4def2bc0e70a0e7a357621ef6bc", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772020630, "uuid": "0ee36471-643d-43ae-9367-f2b1cea5df31", "value": "T19A3120FF9906C061886281D9CAF5E61EFAC3287B6425D42C3C05C9C75B36D39DAA00", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772020630, "uuid": "233a2e2f-8fa0-4c84-b3d2-a951d115b4ec", "value": "48:n14t1Ge7zje0TAVzDrqnqzfF/aa8quE/fwNJw6rj:n882zje0TAVzDrqnQ1aaGAB6rj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772020630, "uuid": "b2925334-e715-4b91-8e27-d3f203453996", "value": 1876, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772020630, "uuid": "9c4667f0-ac28-4f1a-a4be-5427f10e144e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f262b284-aea2-11f0-9691-82aee05be84a", "comment": "Malware payload (Heodo)", "timestamp": 1772020636, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772020636, "uuid": "2dd0a9af-3a0d-4c63-ba9b-3c7c76dd2e8d", "comment": "Malware payload (Heodo)", "value": "f4ea4e9b8017b5edd392b7416bd390af", "object_relation": "md5", "Tag": [ { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772020636, "uuid": "14b4698e-bf78-44e9-a175-c1a1b038714a", "comment": "Malware payload (Heodo)", "value": "230b84398e873938bbcc7e4a1a358bde4345385d58eb45c1726cee22028026e9", "object_relation": "sha256", "Tag": [ { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772020636, "uuid": "e47b5f9b-ce98-4ec9-9ee3-5c7882c938dd", "value": "T178E55A46B6A104E6D3A68038CD66A227E771381D17F257F77280D7EA3F23AE179393", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772020636, "uuid": "f5520fff-222c-4133-b959-8a4e9edab8a6", "value": "68474882704138e677b9350eb7d5a5e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772020636, "uuid": "4fb83842-7f8c-417d-934d-d1f07f17c36d", "value": "49152:lp7S3lVurjjOGoXZSdWqlQRTPH+lM+XwIGtlLsor4Y4tZ2ziIU6iKmlTRej7E:L1dvD9mF+POE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772020636, "uuid": "1b89ab2a-1025-49fc-9fe4-68ba54156145", "value": 3158952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772020636, "uuid": "2cf429d1-818c-40a0-9ccd-d9c61628354b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "22575ac2-1241-11f1-8369-82aee05be84a", "comment": "Malware payload (SimpleHelp)", "timestamp": 1772020638, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772020638, "uuid": "ea14e7de-4f42-4120-a40b-93bcad7bb445", "comment": "Malware payload (SimpleHelp)", "value": "847d93d3bd2e2f175eee7567fcfe8e36", "object_relation": "md5", "Tag": [ { "name": "SimpleHelp", "colour": "#C609B5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772020638, "uuid": "d3666005-1252-439d-b0cc-98218b25a15b", "comment": "Malware payload (SimpleHelp)", "value": "173f22e43c4e0a07815b433eca140f4ade7514ab29a8b9fdd27132553c5dcb6d", "object_relation": "sha256", "Tag": [ { "name": "SimpleHelp", "colour": "#C609B5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772020638, "uuid": "4ccc89ac-2fbf-419d-ac23-a35813a6b069", "value": "T19C87331AF39599FBDE33D0FCC0854447EA9678E54381422717F085EA4E606E98A2FF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772020638, "uuid": "5864f906-0d93-4f79-85b3-8088444fb8ab", "value": "da7539752d4292fc084c7d813366cc8b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772020638, "uuid": "a4018c9c-f7c0-4d0d-972a-a6b78b3c63d7", "value": "786432:/rKU6DT0ucbTbMv22zAeV/X+0tdshTc3XyPteDeCOdeuKF1b+:/uRf+nAu2FuQd73XyFeDMnKT+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772020638, "uuid": "9bdb13df-09bb-4dc2-830d-e85c1cbb969f", "value": 38833672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772020638, "uuid": "3e36d270-b6fd-46ca-bf15-e75fdd11878a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e169aa27-1244-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772022247, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772022247, "uuid": "d030d8c6-9fd7-46c4-8d49-df5447db9906", "comment": "Malware payload", "value": "14ef1b9d03086a9df22ba6cdcd6e6122", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772022247, "uuid": "11c5f03c-a2b5-4fa2-8867-f5ed049ddfc3", "comment": "Malware payload", "value": "746606fab5d813716c079f6103ae654ba8bb39bcf6bb7f2b0385e0980deb9e7d", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772022247, "uuid": "549eb388-5e50-4792-aa35-436a323c182c", "value": "T1CA3412B009DB3F5550754248FBE20EF0D556726EB49BBC2E2F6C9F9B0779520FA218", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772022247, "uuid": "00cceeac-f3b2-49a4-ad28-09f566e5aae4", "value": "6144:mIYOs2Lci7vzbFST+7WK0e+bH9J3rT6JyV4wZveG:7raI9STJK0ZbHX3rT6YV4wpeG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772022247, "uuid": "011974f0-976e-4b42-aaa1-2a95f40437c9", "value": 244800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772022247, "uuid": "6ff2ebb5-20f2-43dc-8dc4-58485c41f20c", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e19639d6-1244-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772022247, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772022247, "uuid": "4ac62e02-2923-44c8-a036-a5f0fe8f14e8", "comment": "Malware payload", "value": "fa7d93a8f4e580b09f915f50b61de6b4", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772022247, "uuid": "382aec05-9706-4810-9c41-08ce46539cde", "comment": "Malware payload", "value": "ee9f7a29e2644dd151799c06403683216ed5149fa7898f2765f5c61453560d06", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772022247, "uuid": "5ca2fc8c-f891-4bcd-941d-93ce52d034f9", "value": "T1ADB423E83E039795F4ED0AE240C16186981B33718DA9B67B30275B339E2BCD67549F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772022247, "uuid": "949b87e9-4aa2-46b2-b291-d9183cd22332", "value": "12288:m5DDvV3EO1cxgSvONl/cb22OE0qSFvWYn7jhMfg+ojAcLVSsw:m5PV392ONl0K2sqYnfR+os0k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772022247, "uuid": "6b836635-2861-4fbb-b826-7c282e8b83d6", "value": 528448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772022247, "uuid": "e50c7e92-bf2f-4268-be6c-957967d80809", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07ac653a-1245-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772022311, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772022311, "uuid": "e0dbc3b4-47e9-4498-9e4e-91f05c372185", "comment": "Malware payload", "value": "81baa1a8c59635e983fffa428b826e43", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772022311, "uuid": "d0a3f773-f2e8-49fe-9e09-f4e72aeac8da", "comment": "Malware payload", "value": "e630f6734197d1d182c9ba8cb629295ff3c1fb89fd3c5d4d3f1e3f5b775bea95", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772022311, "uuid": "b214e5cf-013b-4264-b73e-4dc5d18baea6", "value": "T1033412308133D5B4AC4826C3E92AE73D7B5AC30987E6C0DD56275FE1DB23C626E65B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772022311, "uuid": "c741279d-1726-4374-8511-7fd1950af691", "value": "6144:bjJ6WD/14Wc1778uZu4vOXQ+32IVkhaVyExxvO7U:z7yR778K5Og+3HkKyExxvX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772022311, "uuid": "23b188d8-53ab-4a86-a188-e97c055e9cd1", "value": 244800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772022311, "uuid": "a6581238-fb83-4d93-8b1e-e4ff2392f3c3", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52043ddc-124c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772025442, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772025442, "uuid": "02e762f1-e9ca-481e-8d02-307ad08be811", "comment": "Malware payload", "value": "6b20fd11a6ef679db3272652e1a4a9b3", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772025442, "uuid": "317d9921-fecc-4144-9284-e41a3bc72f61", "comment": "Malware payload", "value": "3d3a49ebbfeb9467d72b94448c8709d4eb616ec9bab5647122f0f98aa983f67f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772025442, "uuid": "538898c7-edc2-4186-b39a-015b044781b6", "value": "T1DC9633D8589724F6FAC9DFFA45DA8E2EE4277B03C5093209610FADBB87910CB70706", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772025442, "uuid": "e80589ab-5d60-4500-b84e-d84e08c411c9", "value": "35a81d16af9f2ba6d515f11152d0364b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772025442, "uuid": "18aa3490-36f0-4877-8ffe-a6eabef95fbb", "value": "196608:shhwWuHTAYhnVDMKmjnmxMTvjU9kpAt5sh3Dc:mkAwMK4dU9wAtqD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772025442, "uuid": "074b9340-17ae-4b7c-ae98-a8eb8e5262d9", "value": 8725400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772025442, "uuid": "400f6217-2c01-4f4c-add4-fa2e628b21a8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad9507a8-124c-11f1-8369-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1772025596, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772025596, "uuid": "6c6fcb3d-c8a2-4167-9dd5-cea16db90e2a", "comment": "Malware payload (AsyncRAT)", "value": "c4075cc4bc0bfb318eb086f9eef71986", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772025596, "uuid": "c3c2720d-c639-4396-a552-e993ddb00648", "comment": "Malware payload (AsyncRAT)", "value": "ca243e16148289b90bcb2aee876d54f7eeed997ed08578f99d3b0fd5245c2a55", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772025596, "uuid": "6219d91e-5e40-4ad9-a4bb-cd6f9e42e598", "value": "T1481502586618C812C4665B381AB2F37917789EEEE902F3179FCCBEF7B956B154C042", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772025596, "uuid": "824752c8-57fd-45cd-9641-3e0f7a1c8a8b", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772025596, "uuid": "b2182cc2-e58e-4555-be47-07cbdc14d40c", "value": "12288:/jNiMwPeUP3jDdRMyCsuyBCWCPDFEGNMBvsaMPnjQd1EenBlLRNsn873eHl3nB5H:MFjZW5yjC+EaM/jGEEj1B73eD47", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772025596, "uuid": "ec3fc6d2-044a-4bd1-a57e-a05bf3aed1fd", "value": 877056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772025596, "uuid": "ed1e655e-5636-4751-a4c8-1921711a67d9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af54423f-124d-11f1-8369-82aee05be84a", "comment": "Malware payload (SimpleHelp)", "timestamp": 1772026028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772026028, "uuid": "029fa279-6327-4aae-ad8c-07cc7cd2a5b4", "comment": "Malware payload (SimpleHelp)", "value": "fb6eacf544740ee359cb647e62cc4842", "object_relation": "md5", "Tag": [ { "name": "SimpleHelp", "colour": "#C609B5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772026028, "uuid": "1612e6a9-fed0-47fd-ab44-497bcdc20cbe", "comment": "Malware payload (SimpleHelp)", "value": "e9431c3deecc137d04c87b1308a0ec2cb9bf35eddf862c6cd207b0fe7b5b1388", "object_relation": "sha256", "Tag": [ { "name": "SimpleHelp", "colour": "#C609B5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772026028, "uuid": "0f7e0122-c410-43f5-8a0c-6ae3deb52328", "value": "T13987331AF39599FBDE33D0FCC0854447EA9678E54381422717F085EA4E606E98A2FF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772026028, "uuid": "d9536389-d18f-4a1a-8b1a-589680dd33b5", "value": "da7539752d4292fc084c7d813366cc8b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772026028, "uuid": "872f6f6e-e8dc-427a-9a73-62c81c5bdd04", "value": "786432:/rKU6DT0ucbTbMv22zAeV/X+0tdshTc3XyPteDeCOdeuKF1bV:/uRf+nAu2FuQd73XyFeDMnKTV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772026028, "uuid": "bd3b1868-6b31-4f94-ac24-f365b3632f3a", "value": 38833672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772026028, "uuid": "47d093b1-a1df-4b1b-977e-6418891b214d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33006bd0-1250-11f1-8369-82aee05be84a", "comment": "Malware payload (PhantomStealer)", "timestamp": 1772027108, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772027108, "uuid": "0faf1633-c226-422f-8cf8-2cf5eb6c06cb", "comment": "Malware payload (PhantomStealer)", "value": "47fddf718295946a2d1ab53f01ccd334", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772027108, "uuid": "b8fe4f7f-405a-463c-b7c1-cef6cca16082", "comment": "Malware payload (PhantomStealer)", "value": "5f7f0c5c9aef6352a28e58882f571f249dfb451daf00a0261d7a7bbb9e551d74", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772027108, "uuid": "bfa3786a-bcfa-4723-ab3b-4b10f0ea130c", "value": "T1B67522682651C913C556573816B2F2B917788EEEB921E3139FDCBEFB7C22B551C082", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772027108, "uuid": "bb397410-d121-4fa7-9583-aa401da029de", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772027108, "uuid": "ca114130-5675-4c73-8f59-d7b500010b98", "value": "24576:CI8oz/XaMQCmGUAlk5tMCxSXXWnNldPLvxYs6VmGxEcQ3JcG/2j:IoWvCmZAlk5t5xS2NljGzxEDcGuj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772027108, "uuid": "45d831a7-5a09-43d8-a6a9-8ad69bd9ba01", "value": 1597440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772027108, "uuid": "2a275bbe-501e-4d18-b60f-a6a8337be21b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "609e7a2b-1250-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772027185, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772027185, "uuid": "4296e7c8-812a-499f-a52b-67fd63c75b22", "comment": "Malware payload", "value": "d96d8fa88fa446f56dddd8fe11f86d09", "object_relation": "md5", "Tag": [ { "name": "BABADEDA", "colour": "#c25d29", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772027185, "uuid": "988c5ef8-d481-4070-b657-f2f50d89d034", "comment": "Malware payload", "value": "ea33418e5ff8a0bab6cf0455ce466cea1c2f81715980ac66e0822425c73a7d6c", "object_relation": "sha256", "Tag": [ { "name": "BABADEDA", "colour": "#c25d29", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772027185, "uuid": "4313ddfe-35f3-41d8-b8fc-b3979a4b0805", "value": "T1D7C53322FA4671DEC1B06B34DF59817A8C5DDBEBF48014B3BADB2114EAC7618C5487", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772027185, "uuid": "fda25b90-9338-41c2-a81d-8e75bdbe7601", "value": "a50e815adb2cfe3e58d388c791946db8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772027185, "uuid": "2db67672-eed6-40e7-9c63-d8416f3ef711", "value": "49152:ufqSxkRGQ+XHA/DVT3F4udGLgoBtY41f/xjB/qNbMjU/2Rd4+5:WvxkRPpTuudqgGfCRMY/8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772027185, "uuid": "d3eb8460-6156-4230-8fce-7d6f094536e2", "value": 2633728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772027185, "uuid": "778a3f63-438c-4fb8-b9b6-cebd40ddfde3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "304cd225-1257-11f1-8369-82aee05be84a", "comment": "Malware payload (a310Logger)", "timestamp": 1772030110, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772030110, "uuid": "41cb550f-a7f3-4160-8aff-54025a2a1cb2", "comment": "Malware payload (a310Logger)", "value": "cbfbbda9c5f9abb566637d9447dc40ee", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772030110, "uuid": "7431e04a-0ac1-4260-9cae-91eeddbce3a0", "comment": "Malware payload (a310Logger)", "value": "99c6a7cffb112b1e7317601acbe137d21df605b662ae35f3d81806278e33285f", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772030110, "uuid": "b339d353-c0af-47b0-a3c1-f16fe8c057e9", "value": "T12E4512985516C903CA584B742AB2F2B417785EEEE402D317AFDCBEFB7972A550C483", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772030110, "uuid": "932ebf4d-18b0-418b-b313-9df66b34fdef", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772030110, "uuid": "0370b1da-95c3-47aa-9178-655e3dbc5620", "value": "24576:nqj6fCHzbS1RBD0+zQn2SmS5mOWc8HocBTukHMLAq4YF:qj6KHfS9D8n2PSaDBTukn/Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772030110, "uuid": "6cbe3f03-cb42-48a4-8f5f-a8d2711eb6b7", "value": 1275392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772030110, "uuid": "4418e8e3-b343-4732-80ae-28f87839d15a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7855c87e-1258-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772030661, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772030661, "uuid": "9049693e-0d8e-42f7-b935-3740bdbe68c6", "comment": "Malware payload", "value": "f0144b65c8b782ff96720b0491aef236", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772030661, "uuid": "5b8856fe-c3af-4753-b7b7-1aff2f0ab39f", "comment": "Malware payload", "value": "44884744b8be7030c6ddb9a6ddcf92984d6fdc5113726d57b51a7565e77163d2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772030661, "uuid": "35a21b01-3636-429d-8fd0-13f8eeb56752", "value": "T17B8308327589582A210B028FD263336C70EFD8E2D611E5B6F6F922344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772030661, "uuid": "f3c0cf29-30a9-48a8-a67c-ac4ef6cbdb69", "value": "1536:XJyp/QdMqpYJKNoCtpxD3t2ZSDXpdyr2pbnaWazVN/:XEKltp9t2SX/yr2pbaW6VN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772030661, "uuid": "788fe99f-8fd0-4e3a-b8e1-5b88dccbbde9", "value": 85051, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772030661, "uuid": "4b3860f1-7c8e-46d1-9f9d-9f18729f14b5", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a447743-1259-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772030932, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772030932, "uuid": "a29a86a0-5cd0-42d5-a93f-0195f457c701", "comment": "Malware payload", "value": "8bcf009b548f85f45040069722ef1186", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772030932, "uuid": "173d2984-11f4-4632-ad2f-260b4f66dd00", "comment": "Malware payload", "value": "3a7244650a1fbd610ccf30d5e15cb7cc77519cbab1f5da839202ab6496d71e08", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772030932, "uuid": "070d41f7-1062-4a91-88a2-869ad966853e", "value": "T15934F1211172FAA12E2D6F6C84B3508CA0146645FF5DDEFD023B287246DFFE518366", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772030932, "uuid": "5dff19c2-84d8-4355-847f-aa209994cf20", "value": "6144:+epQZ7NVXUD17O33JF7Mpu0S6MybrXJtXY38IkTHDcVe3C:+eAx6pC3nQpuGM8rXa8IkTHD8ey", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772030932, "uuid": "153c560a-3871-439c-a35c-83c43c0ae02c", "value": 247894, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772030932, "uuid": "1eff0496-5e00-4d35-9843-5873225ab89e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8cb8f979-1259-11f1-8369-82aee05be84a", "comment": "Malware payload (QuasarRAT)", "timestamp": 1772031124, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772031124, "uuid": "d7bd78c9-928a-435d-946a-85d16037624d", "comment": "Malware payload (QuasarRAT)", "value": "905426cbc53f5a127addb0352997e974", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772031124, "uuid": "2c14351a-55a6-4f28-a730-147586e79e03", "comment": "Malware payload (QuasarRAT)", "value": "a46bec2031259cff4135b985d533e9c0bdb175603d61f031c227103bbb002a7b", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772031124, "uuid": "54558e6c-af4c-45bd-9482-b5b339763de6", "value": "T1C31633682200C202C419567D95B1F7B8037C8DFFA911E227CFD4BCB7BABAB251E592", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772031124, "uuid": "7da59b77-c0b6-45ec-9e6b-2e01fc27a618", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772031124, "uuid": "95b76191-7123-4fc6-b937-18589a07b355", "value": "98304:vjcADthjqXlbIaYs3da4986oss7ZE6bA2WmPIuQVsrb3h9LnXoSr:bbDthjkkaL3dae8TfEQopVsrLjYS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772031124, "uuid": "859062f5-51aa-4de6-958f-8cc782f6e0df", "value": 4154880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772031124, "uuid": "336b50aa-d378-486b-8359-3f1763ab9a96", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3ea0263-1a77-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1772033829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772033829, "uuid": "dad4076a-f287-487d-8046-bda9ff7a3ae0", "comment": "Malware payload", "value": "567d3249dbe60fa9478a424a69c2c535", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772033829, "uuid": "a5997f4d-940d-40e6-8674-84512c2cedec", "comment": "Malware payload", "value": "ff70c53dd6e9806c588d8f78ee35d406db0879bf5419a18a87c7982c79e3e9bb", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772033829, "uuid": "23530759-eeda-4e63-8810-145d8a1bc33a", "value": "T19F05E184F5E01E67E487813F9B8246720266ED5FB34AC317574876BBB4BEA34EB153", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772033829, "uuid": "ce56d016-ae59-442a-b0f0-838f58ecdb67", "value": "12288:BZpdDbfRWxSYOkwVcqcMFT5G1z6EtYOyDIGOnd7w4bLvVc:BHlb/KwiqcMFUzYP8GU7PvVc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772033829, "uuid": "6740edd1-15b1-4032-abb4-2388404610b3", "value": 848048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772033829, "uuid": "ab171f97-f653-4306-a568-ebd987b027ae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772033829, "uuid": "49c7d687-c4d8-4ed0-9d70-6fab98f1fb9a", "value": "t189217143a83f9f3ad5a2d8b0dc6a0725512b5702b4f9e7109f3ca9d06c7a016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "040523a8-e5c0-11ee-b38b-82aee05be84a", "comment": "Malware payload", "timestamp": 1772033829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772033829, "uuid": "61d13bb4-77fc-4676-93d3-62879d2ba70e", "comment": "Malware payload", "value": "724f25e7f93eae0ae54a80142e11b7ef", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772033829, "uuid": "6b2b896e-7251-40fd-bb8b-146f8d1bf804", "comment": "Malware payload", "value": "ab69ef32017a5365ee0e7faca03e1352382865c5672e989d99d2d77ec91c33ef", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772033829, "uuid": "2757953c-addf-479e-82a1-d06b2a4738f6", "value": "T16D356D56F9808EA2C5D8177BB75DC35833534B78D7DEB102CD08672877AB94A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772033829, "uuid": "7c9bfb9b-819b-4270-8507-be268a748f3e", "value": "12288:00Bw2wHeeJgR3asIAksAi0uObzkzOgFr1qwRcFjV1D7a9KbsaKjpeFmz4T28bLv:00BnRED/TwOjX0a5xTdv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772033829, "uuid": "8d2f750a-fa75-4e6b-9f6d-3209a25f41b5", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772033829, "uuid": "8588017f-13db-45fd-bdfd-74b5d2ece5f8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772033829, "uuid": "fbee9b5d-556e-4124-ab09-fee05fb4594a", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cae4e4b-16ee-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1772033829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772033829, "uuid": "6aabe203-2688-40af-b287-fd4cb4d1c59a", "comment": "Malware payload", "value": "936b35bfee8232f437bf6b46e88401dd", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772033829, "uuid": "41582452-5e44-4c9e-b411-f2232852516c", "comment": "Malware payload", "value": "de9a5647bdf02fa2b927566c78e54d5931e25c9f07d2ab884e135766815d53cf", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772033829, "uuid": "6226aa42-b833-42a7-b476-e7a5f341ffc0", "value": "T1B9356D56F9808EA2C5D8177BF75D835833134B78D7DEB102CD08672877AB95A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772033829, "uuid": "b343bb2d-bc82-4d24-be34-da9b0ec30d31", "value": "12288:E8dASOYRNCAJump208iJftl7zmnSrlcaUxQ5TVFQGl9eLtRajZa6ZTxIVD7bLv:E8dbbsO38+TfgRinIVvv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772033829, "uuid": "aa4427b7-e3e8-42c7-8ef3-197ae63add70", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772033829, "uuid": "e0ee46c3-271d-4cee-ac11-9a8ecdf25736", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772033829, "uuid": "cc4850aa-5061-4011-9bd8-a1f6b7fc5573", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f75e950-1260-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772033947, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772033947, "uuid": "1d8ea1ca-51e1-4ba4-9237-96e8d8601fe2", "comment": "Malware payload", "value": "8040a0c4b1bbfc10f3accb1058d12548", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772033947, "uuid": "1ceb0fe2-611f-4bc1-94ed-1bb1540f705a", "comment": "Malware payload", "value": "44c4efc9ad302c8ad94092e7f73492215b48d3a1a3f725b9f450e45881bb8463", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772033947, "uuid": "3de027ef-8bc5-4fe6-b95e-2a0ba1e240e4", "value": "T18934F12B26624A8C9D431D57A9E45F874B13C5C8461A7DBACDFEB4D032A24DBCF3D4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772033947, "uuid": "8d9da5f5-b1db-4b9a-92e2-b590aa17c114", "value": "6144:wzj5n9Zid+VQugLG6afILq1okAbOSSp+zMm5MsKV9nMwgq0Yk:wDZW+VSLcfILqok8OSl58ATFh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772033947, "uuid": "fe3a9598-81d1-43c9-8c53-173593cc157b", "value": 247879, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772033947, "uuid": "89ba73ce-4496-490f-bf68-d705116d4192", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1fdfea80-1260-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772033948, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772033948, "uuid": "616c2ddf-37f8-4f9f-933a-a021266d6745", "comment": "Malware payload", "value": "efdbc06cd7e4f85addd6f7da2f90392b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772033948, "uuid": "17b873af-95d3-482f-872f-e99508876322", "comment": "Malware payload", "value": "bcb4177071578032a9f9f09738391323be784e5f55d043886a7c2a2f431db4f4", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772033948, "uuid": "011ba216-beb1-42ed-b312-03376662d7f8", "value": "T16634EF0B586EDADDA3078E17D8AC02274B6DCE2534CAD8924EC79A528707AF702F47", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772033948, "uuid": "db2e3250-8d5e-4fb9-930a-b2ae7572af57", "value": "6144:ucJNFBxqnFo8iYsRGnSvrfnhHkyem83VDp:uAdxq7iFGnmhEyem8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772033948, "uuid": "0830d47e-d86a-4638-b2f6-2494b719b9e8", "value": 247874, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772033948, "uuid": "2ce3a715-f39f-46f4-8db9-75278bb4eecc", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19f92b2b-1261-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772034368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034368, "uuid": "ad6a9441-855d-44a5-a1ab-b716907b2a54", "comment": "Malware payload (Mirai)", "value": "1d7573d8d0902a180580592a742791d4", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034368, "uuid": "199e9102-172c-4a11-a830-76942138389f", "comment": "Malware payload (Mirai)", "value": "5f4f937cfaab23ad7bf56c75782ddc21d1fca4397cef230c526186b461a160cd", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034368, "uuid": "112d4adb-3e64-47fa-87d6-226559b26182", "value": "T14FF2E851B8854727C2E4137AB6AE5A8E377077EC92CBB627D8224B203BC591F1D63F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034368, "uuid": "f31ad206-ef01-494d-9525-e906b91ec086", "value": "768:NxEOIXqioG5M1IuBHGapwm3ipteV5La9hKFvl3RyzXpocntqwn:NaqpG5MJxGaWt6aUtBOX7n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772034368, "uuid": "43e4a472-aa1a-408c-b87b-47ee6cd297bc", "value": 34872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034368, "uuid": "fb8b2976-01ce-47b4-a5b0-3c2423d96de9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19fdb82e-1261-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772034368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034368, "uuid": "d752cb3b-d992-4b5c-b153-de3153805415", "comment": "Malware payload (Mirai)", "value": "6d8aa39cdb3bc3836a2b84004b34e473", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034368, "uuid": "981f11ce-8a8c-4943-9ee8-53ba452f82ed", "comment": "Malware payload (Mirai)", "value": "1dcbb4600ad02b9cc5767fbdf8e3021fc8833a4e18ad6a7f398b155c7a88884c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034368, "uuid": "e0324ff4-7caa-4fe9-8e1c-4532df85496e", "value": "T129334AC4F643DAF9EC4705701177FB339A32F5E51229E743C3A99A32AC52602A906E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034368, "uuid": "05234195-91c4-4827-8c44-20feff8a7ed4", "value": "1536:GWa2d5sf1Gg+ya+nlQ5FmbLv5XfwVsp3MSfCYf:Gt2d5sf1GCammrm/xPMW3dCYf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772034368, "uuid": "05fe3e8e-627b-4130-84ad-be629b55ed50", "value": 50256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034368, "uuid": "5b14efcf-5600-49e7-8a0f-f85bc5c6e904", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19fe02e5-1261-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772034368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034368, "uuid": "de098300-1b9c-4e4e-a27c-a34107aa79f2", "comment": "Malware payload (Mirai)", "value": "ecaad7cf57175b5d44beb0c543137527", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034368, "uuid": "b21d73c0-8a23-4b86-a3f4-b916c7286d65", "comment": "Malware payload (Mirai)", "value": "23cf63aab69f8f6588784339bc700c4eae87be678c48b0843081b7124c6c23ed", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034368, "uuid": "470e87a1-9bbc-4aa3-8c57-0323af91ae3a", "value": "T179434941F8819623C6D1127BF66E468D3B2613E8E2DBB3079E225F2037C686B0D77E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034368, "uuid": "8e4facab-825e-4956-8fbe-e2b4d9290907", "value": "1536:RjjQg6zvAqEkVaPU+klQTm9TliCs5Xvinf:RjoI/kqTGB9qinf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772034368, "uuid": "1c6f187b-96a4-48df-92e6-362f123a92ea", "value": 59648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034368, "uuid": "51171e43-9c94-40d5-bf2b-a3da9943f826", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a00c9b1-1261-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772034368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034368, "uuid": "cbbd5279-effc-494a-a25d-4410415b60d1", "comment": "Malware payload (Mirai)", "value": "de387a90044ccf4cb9850493f9834aa4", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034368, "uuid": "2f7181b8-bdcb-4360-a085-77819160501c", "comment": "Malware payload (Mirai)", "value": "392f7308571f57b19099c03353c02bd41a57a00a1345fa7b1e98b4c794052e00", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034368, "uuid": "1b5c5342-a51f-4a1f-8a9e-b56b6489d52c", "value": "T1F6330907F681C0FDC49AC174476BBA3AD93771ED0238F2A67BE4EA223D95E611D19C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034368, "uuid": "27f16fd5-22d6-4abf-95ce-8d153b54ab58", "value": "1536:Ru31CxXVpHlCrxsNnVfvj56+H62r4DaEXzd0OCUjCYb:Y1sXV5lCKNVfvj51a0GaEDOVUjCYb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772034368, "uuid": "9ccae1a1-0719-4811-8170-a9cfd40e8898", "value": 55104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034368, "uuid": "0221efe3-1bfa-490b-8b8c-d72dbbc8bb48", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a027497-1261-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772034368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034368, "uuid": "ebc33dc4-10d1-4477-b8ae-cd6cb8542b3f", "comment": "Malware payload (Mirai)", "value": "784760d549282600c8a4437e947d2737", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034368, "uuid": "cc74ecda-df40-402e-8e1f-02e1e6ba39ba", "comment": "Malware payload (Mirai)", "value": "7c89a27d2077d008598d0aa1a3f26a5b4f8f17ae7f727ea3fa62622661c40193", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034368, "uuid": "909bc598-1fdc-43c7-9fa8-d11db58ab4f9", "value": "T11D73C61AFF620FF7DC6BCD3745A8170239CC554A12A47B3A7934D828B65B24B49E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034368, "uuid": "1db92afe-48ae-47fd-b9ad-dbbc30c9ebba", "value": "768:K3sJmkq/lhWHgJvd8p6Et5Des4ReDB2wJ2iwgugBI2ZpMIXi5Ij7+eOcIoJhwnjS:KcJmkC1u5B4RcBvC8W2ZpMe7+pcI3nj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772034368, "uuid": "5b3b592f-0b81-4887-8028-6ff7f9a7e8c6", "value": 73796, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034368, "uuid": "badf2fcd-1d5d-4d5e-8bd0-729b1b2ddb33", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a0291a5-1261-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772034368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034368, "uuid": "fc03482d-8bac-4270-8108-0b7bf58f211f", "comment": "Malware payload (Mirai)", "value": "fec62e2124873a3caa15e24506e54171", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034368, "uuid": "55d6d90c-9707-4ecc-96c2-397376037d6d", "comment": "Malware payload (Mirai)", "value": "c39c15d74ff5b95a2bd1a257a131a0afe37d432f37564f9df07ec88cf21f04d7", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034368, "uuid": "0ecf9183-0679-4ca3-91ad-d6b5c9368adf", "value": "T190D32A56E7408B13C0D61775B6EF42453323ABA4A3DB73069928AFF43F8279B0E639", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034368, "uuid": "9739f491-f4ef-4fc2-989f-008b6270231e", "value": "3072:tS6VGvn5uacAFEsHYoPNqE4wxGnzR+SQkM/9CH:tS6VcuacAFEs4SNlgnzR+SDM/9CH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772034368, "uuid": "c7ddbad1-b54b-4324-9f4c-4360fab9ed45", "value": 140758, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034368, "uuid": "925ffb40-cc38-4d1d-9950-3b96f50bfc25", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a086065-1261-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772034368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034368, "uuid": "c1865b6c-1b6b-4384-85d4-8e6734b3ac8d", "comment": "Malware payload (Mirai)", "value": "f0c2ab1b15d93681e596e29a70d5e76a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034368, "uuid": "b2f2b9b1-29ce-4062-bce0-a4db896f23e8", "comment": "Malware payload (Mirai)", "value": "5be1f5f771b224e2683f3eb044f74dab4b32e352f8243903ef4c06d25af81979", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034368, "uuid": "cee37faf-4061-408d-8fad-cf3daa7f08f3", "value": "T14331F74F03628EB1D76C48A5A79B9695DA034153101CCE09F79DAB8CBF74158F88D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034368, "uuid": "9ff04561-959e-49b1-80ac-50b52f932f53", "value": "48:ceSLRCBMdQb9AAXNq4mLJL8LrLzpYlcDs79szNuU4wh:6LRvaDXNqLLJL8LrLlYlSsyzFV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772034368, "uuid": "b2033cb1-f88b-4632-a0ea-3fa2e760d0fc", "value": 1669, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034368, "uuid": "aa5894d9-f186-4e3a-90f1-9b94dc5ae7d2", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a092faa-1261-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772034368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034368, "uuid": "6780062a-0a65-4ea1-9cf3-ac786462ab37", "comment": "Malware payload (Mirai)", "value": "624cdea9d4039b2357f5f0f9c9ccc90b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034368, "uuid": "20814e35-fb6e-4c3f-9909-5b025d1fd80a", "comment": "Malware payload (Mirai)", "value": "e16bf3a40902e28dc7822ab3b16371dbc9b2177dfa5218b0c1be694711a722e5", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034368, "uuid": "8ba35283-6329-4e9d-803a-30c00af658c1", "value": "T1E363B61A6E628FBDFB59833447B78E21AB5823D527D1D641E25CD6002F6034E681FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034368, "uuid": "e903d499-b24e-4ab3-98b0-69fad8268c5a", "value": "768:bPWek0n4CjdGQKKWxmg0EhFkFkeYA+Qo1dXyApGqFDjOZ2uyyQ5NeNTP4wnbIZ:bj/hSmmjAo1Fym2Uu6eBPZnbq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772034368, "uuid": "0359976e-4635-4dc7-84dd-3a3c2d2dad9b", "value": 72628, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034368, "uuid": "5e035e17-3716-461f-b2f8-e1188fbdeef6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a111a70-1261-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772034368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034368, "uuid": "4aa98764-f2ab-4871-b7d7-bbb29f950853", "comment": "Malware payload (Mirai)", "value": "28bfcf919875f58f6d226283d434482e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034368, "uuid": "f87f2ee2-ea48-431c-b768-725d142b318b", "comment": "Malware payload (Mirai)", "value": "ccad12231dfe7feeec242d1ee5b30c24b9a6a9e20fc60c623457ae5689136d01", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034368, "uuid": "8f0c5d47-131d-4e9e-8bd4-b0180105e5c4", "value": "T176532B9AF801CE7DF85BD77B4457090AB631A3D112831B3623ABB993BC731991D23E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034368, "uuid": "d409c647-dd2c-43a6-a515-23c117551fcc", "value": "1536:KU4gDtK+jO48P6Py+c+pL7DPDGdi4a1c8Yf9:KUFDtljOt4ckLfGT8Yf9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772034368, "uuid": "5fe78ae1-47b1-42a2-ba02-44d0c3605301", "value": 61712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034368, "uuid": "04096f07-637a-4e89-9b14-e5b80257670b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a125aa6-1261-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772034368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034368, "uuid": "6f567f64-40c7-4237-ab7a-6d38a529907a", "comment": "Malware payload (Mirai)", "value": "322d913c1791fc36f592f338f6405762", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034368, "uuid": "4dfdd629-5811-4086-9e11-93e3b5ff5fbb", "comment": "Malware payload (Mirai)", "value": "e19bf7bfc98173716d48e3d1c5c5a0e1cf9800ef545ff56f83936072a36bfc37", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034368, "uuid": "9b6e4d58-fd59-4bf7-ba04-654ee67826a4", "value": "T14F630856F8818B22C5D5027AF92E118E332357FCE3DEB2229D206B2077C696B0E76D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034368, "uuid": "3c18a290-786a-4122-9040-d2fea9d359dd", "value": "1536:tpnqh/sOR5YbAP+uppI4NEgeaanA1z2ITiE8p2+lhyS5bYona:K/9R5MEffam8p2+lhySRBna", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772034368, "uuid": "5351045b-f821-4cb7-ba2a-0b1b929b07cc", "value": 70964, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034368, "uuid": "e1db7605-f896-43c4-9daa-37414002c8fd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a16b65f-1261-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772034368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034368, "uuid": "f8594069-2925-494f-ab76-c2f795dc430f", "comment": "Malware payload (Mirai)", "value": "786c2904b4f9c12610f776c0f120957a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034368, "uuid": "15cb2eba-4774-46fa-a997-b763b3a8de9d", "comment": "Malware payload (Mirai)", "value": "6e63c766c70ca762c554241a0b0ba5a944381c4cdf403a59ac3098504ec762b1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034368, "uuid": "0ad9a73e-fd61-4da8-a00d-a6db697aac13", "value": "T1CE337B77E46A1E94C086817075649F351F23F1C893832EBB26EAC2755483EACF509F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034368, "uuid": "04d11d86-278a-4312-b7ec-33a2c34683b8", "value": "1536:waaf6/EDG4TFGjcKAlOWDsNKCVQZlnfE:wNf6CG40DANsNKZlnf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772034368, "uuid": "37d2635a-0c58-4e9f-b100-7eebc864e9c0", "value": 50588, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034368, "uuid": "69107821-6be7-4b73-b563-ec834c2c7b26", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a17a412-1261-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772034368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034368, "uuid": "afcb9f13-fd2a-4f27-8545-6be1a4942675", "comment": "Malware payload (Mirai)", "value": "2bb5a88cc018ee6cb9ee52e0b64f62a3", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034368, "uuid": "86531933-de46-4b20-94d7-894ea3c563b4", "comment": "Malware payload (Mirai)", "value": "43f4b1d07d97d930d30a11ff6cba36fe5d6cd7dbf8594b88c73b12f7996eb57f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034368, "uuid": "69650430-aa59-49cd-bc3c-61951d31dc24", "value": "T1B5433B31BA760E27C0D1A8B661EB4B24B2F547DE26E8CA0B3D710D9EBF715402553A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034368, "uuid": "cd114d83-3466-4d04-93c6-d9dde33c61f9", "value": "1536:/fPucFQm4/g1We/ubY0qBQpu75nta1NNw:fucSb5uVaNNw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772034368, "uuid": "bea3ac75-5423-4a29-a3af-f2ebc5fd1cdd", "value": 59872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034368, "uuid": "d18308f2-7dc1-4755-b1e9-659383f6de16", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3fa80ffd-1261-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772034431, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034431, "uuid": "2210d89b-bb5a-4305-829b-282e03f83ee1", "comment": "Malware payload (Mirai)", "value": "b32b3da8fe4cdf7554c349a6b89d09ac", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034431, "uuid": "0345413d-2926-4074-8539-0c4996410d94", "comment": "Malware payload (Mirai)", "value": "4b86c581f24729193a63c16fa2b3c165a0d9f1bf15b7761b36d2bf7b5dfb6d6c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034431, "uuid": "c34d0aee-ca77-4c31-a6e3-2b6d3f21ae6f", "value": "T15C436DC6D143D8F6E80B0570602BE72BAE71E8EA2219FF47C7689631FC86641A517D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034431, "uuid": "5bf7c410-fc56-4d0f-a696-2150376cc29c", "value": "1536:DIqD1xfYqyDgZtmYX38pJWplcl2jUY5ts0Aj+ISeWYeRu:DIqDXfYqykZ4YX3IJWp++UytzG+MWYes", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772034431, "uuid": "3fb338e3-fc66-4534-a54e-5bf24af94adc", "value": 60080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034431, "uuid": "3089c53a-59d5-4078-bb50-d1f37496312d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3fc82ee2-1261-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772034431, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034431, "uuid": "37ea7fae-e3a7-403e-9e67-a9a602581bf8", "comment": "Malware payload (Mirai)", "value": "fa81c7459645d7cf4c9e577a18e38da6", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034431, "uuid": "750b907e-43b4-40e2-a99f-56afabf79adf", "comment": "Malware payload (Mirai)", "value": "654d0c2b2beaafc4d3a30337aed412fbf6cb5e7fba0b42898b2923a58b95415a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034431, "uuid": "83d21f84-d050-4ff3-9d0c-da3b6ac0072e", "value": "T159434A02B31C0E47C0A31A74263F5BD1D7BEE5D022E4F688252E9B9A9671E375486F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034431, "uuid": "e08e1766-fed3-42c1-94ef-48fbe9fa3983", "value": "768:4KbHwx7Ehfi0CRZ+RlQQ0sqFewDLHZdUUF9mmSuWn9jRlwQgp2sFRxtQSewn/Iq:fHuSDqbDL522mi6PlwQgcQxq2n/t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772034431, "uuid": "a1350dea-f323-4854-b339-065f29373d0a", "value": 55168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034431, "uuid": "660ac766-b227-42e9-b4fd-fb14c8b945d3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "56db8f1d-1263-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772035329, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035329, "uuid": "ae37caf6-03b7-4a93-a124-507f3a2d2e85", "comment": "Malware payload (Mirai)", "value": "d091ec777dcc4c521a40611cbaa7a01f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035329, "uuid": "bbe7637a-7390-4933-ae09-1b4b6fb6aad0", "comment": "Malware payload (Mirai)", "value": "0be23ed97ba78bd78fd81f727aab2eeaeadde933b04e300deab0bb78d00562c8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035329, "uuid": "ae279694-d4e1-4ae6-8981-200ed4088922", "value": "T1F031E2E0A266C861FF4A1A28AE1831D6448A3D1DE77F34FCDCC7D9C4961D98CA315D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035329, "uuid": "ad7feacb-a942-481b-85d5-7a7547adc5fb", "value": "24:TX+GBYAJmVcpWHKkwFLCbL+wJq2fmqm94P:6Wd8VcpWHHwFLCb6npx9M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772035329, "uuid": "651576aa-eb48-4eda-9411-cf32b1ed074b", "value": 1623, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035329, "uuid": "9de561d3-d2cc-41ea-b74f-7aaeea8adc5b", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "56fa8ba4-1263-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772035329, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035329, "uuid": "deb03082-14eb-49e9-aac2-74fd96f4fa57", "comment": "Malware payload (Mirai)", "value": "3b9e26bec950448642b93d70d555deb7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035329, "uuid": "fea4e9d5-07a8-4be4-98ba-be1053f76392", "comment": "Malware payload (Mirai)", "value": "629f25fb0e7eb5886ec05675a283d9aab3b397bc841ce2b363fcf57b7f99a6cd", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035329, "uuid": "3327ff55-b26d-4413-b8eb-2032d7704f86", "value": "T17A415C8613610E302FE29E2A35AAD498F1D8B4CBEDE19F0584DE3CFDA54DF082545E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035329, "uuid": "fc7506e9-bc8b-4410-8804-952718e22547", "value": "24:vHROSbwOSOOSkOS6GOSrOSuOSTjOSzPAOSrHOSGOST6Ol:vxR8RORkR6GRrRuRTjRzoRrRGRT6e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772035329, "uuid": "86875b50-6373-40c3-876f-a51fca0296aa", "value": 2136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035329, "uuid": "ad998e02-f6b4-40b2-a6aa-971dff9184fa", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "570231c5-1263-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772035329, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035329, "uuid": "8acf4638-bb9a-4662-b9ea-b357b4e1ec5d", "comment": "Malware payload (Mirai)", "value": "68b4f152889ba02f2674748c56e3e7b6", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035329, "uuid": "dcc4e334-2494-4d0a-b5b7-dbd605f853c1", "comment": "Malware payload (Mirai)", "value": "f9e43bdcfa7d2abf93680403026e13ad0a15a35a5191dc4a94c5565245e3e417", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035329, "uuid": "1f99785a-7bfb-40e5-b653-6f0295a4d63b", "value": "T18EA53304BD6684DD98010EC8F70EDAD7A5081B8EC3E04DAB4CB64E4FB18EA572DD7D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035329, "uuid": "d5d5dcdb-8bd5-4b77-ac1e-d3b9d5d18fce", "value": "49152:MAT9QObu21iDRky5OXmAq/1UfCvAFmW+om///x8aky:MARQObbCLqmAq/eqvypm3/xky", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772035329, "uuid": "de29d2ef-b6b6-4412-b74d-0aa251d09150", "value": 2128464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035329, "uuid": "a6bdba3c-d608-49e8-9ca6-f607e3aa2402", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5805600e-1263-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772035331, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035331, "uuid": "42d94088-f962-4e02-907f-5dd6329e73a7", "comment": "Malware payload (Mirai)", "value": "33cfc14250e11eca98d506447f173f36", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035331, "uuid": "be9722e9-e3f0-4c11-8948-daacef4ad733", "comment": "Malware payload (Mirai)", "value": "bf5f070536080f3e403d4beaaccb2115a32b10514a0953c6f29d97a0bc221e91", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035331, "uuid": "371f19fd-b14b-4eec-aba7-27de8af4cbf2", "value": "T19FA53382027ED10CD8DB8FAC4E96C58F687D2DB4BADB3645006CDB1EED854E81B45F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035331, "uuid": "bbae52e8-2cc2-432c-9a94-e2e27843ba3e", "value": "49152:uqepZuOz5prUMQBBty6zNTOLBIfGhy0Bt4alDPi3X3X3SE:TervzrUMQjTB4BIehy0flri3XT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772035331, "uuid": "cdfd43df-1f43-41fb-83a0-b585c762360d", "value": 2096256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035331, "uuid": "ddd985eb-4164-4b00-83f6-40046f2c5336", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58290108-1263-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772035331, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035331, "uuid": "cee0d4b2-1904-4d08-99f6-1229f23e2e8b", "comment": "Malware payload (Mirai)", "value": "2cc2a034575dab050e764895d9424361", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035331, "uuid": "99e27df1-9f5e-41ce-8c09-dd3410b9f42e", "comment": "Malware payload (Mirai)", "value": "20f951a1a8340db67379c9ace359ac4ff0dbf8e0e6f09b6b864310e61330736e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035331, "uuid": "a74014aa-4f59-408f-9c8c-1b56c53cb96f", "value": "T116A533B912B763159C128F3C37AE227242CDFA85ADC260A0724D7C516A9FF3D710E5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035331, "uuid": "7122881d-6038-4af0-93b0-d88319efbf53", "value": "49152:YDxMx8VnLLqjGWjyUkjR+6RLA2xXC0NEaIA7:YDxfFLqxNO82pC0/7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772035331, "uuid": "0f158fa2-75f0-456b-8bf9-dca1456da737", "value": 2178248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035331, "uuid": "f0f16f4a-a254-48bc-8eb1-a7cb477c4393", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "584b620e-1263-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772035331, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035331, "uuid": "7837281d-667d-476e-8e71-21c7086428b0", "comment": "Malware payload (Mirai)", "value": "b0a60b07381787a79524ae7bc48bbbe0", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035331, "uuid": "1744da34-9b60-4f12-b716-8610d0e3eb8a", "comment": "Malware payload (Mirai)", "value": "273d0221dc2565e9db2c66c0a817db6f97422456c451db8f478e68861e9ccefa", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035331, "uuid": "6906b221-acc1-4a6f-a626-559583cef96f", "value": "T1DCA53352B9CB1554D4D6CF9BE9BC90FAF0504D98964D129DADCFCBB2726E0A20C9CC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035331, "uuid": "e298f1ef-f82f-46cb-ba28-bbcbdd3a151e", "value": "49152:503NJc37/eVNm+rxADpS5GtEHVv4BKSX5XPYJJ/ANdwwFlgdqoDwoe+Q:509ur/e3m8SpS5jVwhX52J/A1lRonQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772035331, "uuid": "64faa7e7-415c-4f4e-bcb1-4285788748f3", "value": 2115280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035331, "uuid": "12bb6d25-2b87-4b4b-83d1-b1054d271c54", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58b6ce7f-1263-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772035332, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035332, "uuid": "a38ecab0-e99d-4296-86c8-57568e2e42aa", "comment": "Malware payload (Mirai)", "value": "cf288f4a4054730a80708d7468fdb002", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035332, "uuid": "f334fbcd-cad9-4360-9590-2bdcdeb4e70f", "comment": "Malware payload (Mirai)", "value": "70b782c4667e4a27403dc4581ccd90d1a0998a6d2f8da124ad3646f871b2d8aa", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035332, "uuid": "32763057-0ebe-4445-9b8b-0d475b99d55c", "value": "T1F0A533292406BEFB6D41DE2302C333E3672DD39A27BF499752FAA457C823D87D9012", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035332, "uuid": "f3f86756-07a9-4c37-a0dd-4633ca624ca8", "value": "49152:+o4SgkpMcyU1HX8WILtly3+pRO1Ttr6xiObkaIEAL/csr:L42pMXqtILB8JtCBXAL/ci", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772035332, "uuid": "1cc1d38f-96b0-4bd1-995f-09e9f5318664", "value": 2264064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035332, "uuid": "e09af457-1906-4978-9f31-f75a7b99afb4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58d3b493-1263-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772035332, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035332, "uuid": "a8104a1b-6ab0-4a09-af8d-e6c94227fdb5", "comment": "Malware payload", "value": "c4f0b0be305efaccb24baaf35908cd9e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035332, "uuid": "be02e5b1-dc67-4e65-9bac-b570f1488b40", "comment": "Malware payload", "value": "72f11243ceebf8033cf5c20fdd21bd8e567dd091f2d1af3c9d19b2b49cebcedb", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035332, "uuid": "f39d3c21-90d8-417f-a840-0fb787072f05", "value": "T1E8A533E2F738E3DEDFA9C19078F4415D0B17FB804DA3C3816D0A6F46A6A6A5726950", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035332, "uuid": "bfdc38e6-8d22-4c24-b44a-25ecdf6cf0ff", "value": "49152:wXUbf9QDyDt8XESQ5hfPAo0bGqqwf1ucpmkeBCiRdkDyYlRa:tbfoyDpSQ7oRGNwf4HAikQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772035332, "uuid": "2589554f-302e-45c4-9de9-4bea8ffc417b", "value": 2123996, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035332, "uuid": "08d4a172-7b0f-4bf4-bfd6-2223305e85a4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a157568-1263-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772035334, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035334, "uuid": "ee27c5f3-4b02-4f97-9070-bc4348648d6b", "comment": "Malware payload", "value": "b8a04bd450a0e75ef46c11ba49a5f354", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035334, "uuid": "85e114d4-a1bd-4b0a-8c86-35147f95bdb8", "comment": "Malware payload", "value": "df1765629fd2968e5dab6530712477ed728a56a59310ad225d25eb046fdf357c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035334, "uuid": "6589e62e-a269-497b-8aef-0ff52def18f6", "value": "T199B533341E0131ABEF3F704A6A2E86DA7A45FEC3345CAA38484317AF5105B914ED5F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035334, "uuid": "86fca6e3-a740-4f07-94db-acd9a6a543b5", "value": "49152:kvPZwgMyltjd0cxCGz3vq9QceT7UbsDxFdrs6+RGz:kvqgTTjNkyTHDxbr9rz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772035334, "uuid": "daebcc2c-096d-4a2c-b82b-eb1e0f4c7fe1", "value": 2450924, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035334, "uuid": "bd3dd9ce-7eec-4a8b-8655-d078ae7642ed", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ab03a72-1263-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772035335, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035335, "uuid": "dfca9f31-f756-47de-9792-2db1927c6f0a", "comment": "Malware payload", "value": "a7704e7b445c90c16f2709ccc6c5d23c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035335, "uuid": "13a0150f-a8e6-4f9e-9a79-eba822672d1f", "comment": "Malware payload", "value": "a14e2c9ce324d6506cc0b0e49b3a5b98d8da16ee34b969ed847da668f2534f4e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035335, "uuid": "c41490e1-60e0-4185-8a96-d90767fe757e", "value": "T176A5339C21D333E3C4A0E8A59541876380B9E59228B9F2E567FB6181CF5B109DDD3B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035335, "uuid": "9901450a-cbef-47b2-8cff-32ef24f3fec6", "value": "49152:TEqTE4FE7pJpzyOhLbJ2M4ZnqbRa0fTvlQ8:QLpjP92Gb8w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772035335, "uuid": "c386bd97-956a-402e-9016-3cecc5038d44", "value": 2121160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035335, "uuid": "04c210ae-8610-4526-bd40-ffc946247376", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5accc1a1-1263-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772035335, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035335, "uuid": "86585aa5-72f2-43c5-9acf-a829ebbc37d6", "comment": "Malware payload (Mirai)", "value": "a25a3ca96b3643172578b16d8a11fe41", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035335, "uuid": "4b0956b6-0dd4-41ed-9dfa-fd5b7e3a1508", "comment": "Malware payload (Mirai)", "value": "4ad3fd9edd64bf2417309e8edc9104199f6cb62abd80f05ca2ceaf533776ae4a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035335, "uuid": "21973f4c-2ee0-439b-9828-34a6f27c9386", "value": "T179A53314F2FF9CCAB326F9B924F51389CE23D049A44653D7F6BD0A84CF071A5056B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035335, "uuid": "cedbc901-3d37-4c7c-ae77-30c21a856f13", "value": "49152:dx0crz6k79sSSrYj/Wg2xwFK2WiboHjUfDmFPu0FRN:YcrzD5sbg2xwFKvUfS1uERN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772035335, "uuid": "128905ae-b750-446b-828a-143d570bbc6c", "value": 2131136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035335, "uuid": "462f537b-cb9c-4f1f-a921-5bba64490d8b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b3e402a-1263-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772035336, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035336, "uuid": "166e8fc2-5748-4f2e-90b0-3093c206ead6", "comment": "Malware payload (Mirai)", "value": "67126810c0594838dbddcbe3366c2851", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035336, "uuid": "81a7a9ee-d572-4f98-899d-b1a747f58d5c", "comment": "Malware payload (Mirai)", "value": "86490006aeb6706694c1b51ae60abfd4069e6ff5d86fdb76c3b09650fbbb0ff7", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035336, "uuid": "6f34775e-bb30-4ece-a6b5-23486aff3c35", "value": "T18E9533CD507ED1F2DDADB8BFCAFA0270CD61E729850F385958C9B6263606418BD0B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035336, "uuid": "39e27d51-c0af-4c7f-8e51-39fce572561d", "value": "49152:Ug1jGKMvRIHGI8FGDWCOxz51Vrtdr4YyzUlBnwn:31j2+R8dCOxzVrbcYuUlRa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772035336, "uuid": "e297a18b-2ad5-4d06-a066-a2394bb4c905", "value": 2059244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035336, "uuid": "072491d7-474e-4dfd-8f44-3d37bcb52341", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c7fe6f6-1263-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772035338, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035338, "uuid": "889c75c2-6d94-481b-8803-82fd53cd3eb0", "comment": "Malware payload (Mirai)", "value": "f61abdc248517c83647d601b40d068c4", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035338, "uuid": "d1c38747-6941-4025-9b70-490e663e1712", "comment": "Malware payload (Mirai)", "value": "7a98c448020b89db9ffc4b1cc5176949fe714d927cadf4b3c42936d923c901c4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035338, "uuid": "9a92bda5-eed0-40d5-8135-945e62303e06", "value": "T18C960811AE862F67C1DC077440ED62A672A43F455B91432323A4EBEC3E7773DAF568", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035338, "uuid": "0a69423d-2eba-4d1d-940c-71b7b8347f9f", "value": "49152:KTEpCkLT66sPl2lT3U/EYHRYyqCjTT78lWYZu+GbpvKE3Wam5EJ:wYD/1sPlOTy5LdvWEJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772035338, "uuid": "b6a0e62f-4d99-445c-8ff1-94acc9cae832", "value": 9175188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035338, "uuid": "81b1b6ec-fc00-4c2f-aa4b-ca813102324b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d34fe1d-1263-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772035340, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035340, "uuid": "64bddbe4-84e2-45e6-b010-915007237031", "comment": "Malware payload (Mirai)", "value": "043349a9ccbdac98bd05a671ab3bb2b4", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035340, "uuid": "85173ec9-547c-4299-94c6-38c2866b217b", "comment": "Malware payload (Mirai)", "value": "7aefff4c9866f16a8073f78d1a0c922da2f9cbbd4b51d2fa8928497ce6451c1b", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035340, "uuid": "28019333-4963-4547-b4cc-a953fa060bd5", "value": "T19E961A62BF98DE1FD2A431358AB6C23833D53D0182A061379612F7192FBE2B59D17D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035340, "uuid": "2f839a3f-f298-4139-beec-5238ea6a42a4", "value": "98304:ANLEr8160kEFpidehzwMBYkea0Pvsj9cDRgA/1ojkkzAP1ovbRHMzVKlXjBqCluF:gq87Rod", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772035340, "uuid": "d8b7eed2-b3f6-42a4-9000-05797a24b033", "value": 9175188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035340, "uuid": "2fc221de-babc-465a-944d-051ea3ef01a3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d6ed34b-1263-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772035340, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035340, "uuid": "348da81b-c172-4209-b2f5-cea40389d3d6", "comment": "Malware payload (Mirai)", "value": "a1081b75c46c604f6ddd60f717f89193", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035340, "uuid": "16a2d71c-6c2f-48f5-921f-06718c0c3f7e", "comment": "Malware payload (Mirai)", "value": "f5407c4ca46a9ae10ade4ade365d0850c01ae6ea3dcd1a816e5cbbb2eb95342f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035340, "uuid": "159e9897-c190-4924-95d8-278cbfa0252e", "value": "T1A6865C0EFE558B62C6A4067789F911982331AD026FCB4707A324F73CFCB66D4EE466", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035340, "uuid": "8335caa0-a003-499f-9ef4-90e0e233ffed", "value": "98304:LMa/nEjNNdsybk9gP4xxJPKET/x3YgMYEG:Aa/ANNdsf6G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772035340, "uuid": "7e73e6ca-7e4e-45ae-99ec-3e5e8501f057", "value": 8061076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035340, "uuid": "b1febd20-2a46-4e8e-9921-629af1fc56f4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e1d2a3c-1263-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772035341, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035341, "uuid": "fa786668-9426-4ba1-bad4-eb61e613eecd", "comment": "Malware payload (Mirai)", "value": "5a442c288a58d9eb10c6f1aad2d02186", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035341, "uuid": "d32d599a-b477-459d-a2d4-433d29f8d989", "comment": "Malware payload (Mirai)", "value": "ab880037ebe477c1043ccee499c418644aa0247b93d50c95bf4f1b60c4ef5f6a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035341, "uuid": "0aed64bf-44b1-48af-a745-30b5d5772954", "value": "T1E49618C1E891D28AC63C6D31EFD5EFE8E26B2E315D88994AD9C8F33E58B315480F55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035341, "uuid": "4a80311d-4f20-452a-9606-d295d6404274", "value": "98304:bJqEt+wWOjJeX7Girk0zBo9yTedqHN0k69GoURgjEN:+wyTX0XUXRrN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772035341, "uuid": "7d9904bd-db12-4ff7-a8b8-44757a61ae24", "value": 8781972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035341, "uuid": "658d0115-f3af-4b5a-b596-c731c9bc17f7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5dae1e13-1264-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772035770, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035770, "uuid": "1352a1e6-1866-48ac-bdbb-be68823475b7", "comment": "Malware payload (Mirai)", "value": "998c7e271432a9405051ddd1d778cac7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035770, "uuid": "3547d395-7ecc-4285-b72c-bcce81111e4e", "comment": "Malware payload (Mirai)", "value": "61a093eba0b6f69662b6c385ebbb3566f483d90a1000f27cc62674fa1cb67bc4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035770, "uuid": "555d35e3-cd5d-4f19-b61b-6d7bd08a9080", "value": "T144534B17B54280FDC09AC1744B2BBA3AD93775FD0378B2A67BD0EB262CA6D211E1DD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035770, "uuid": "f4f0981e-215f-45ad-91d4-d8be2a55e4bd", "value": "1536:dpmbSQ6U3q7cCBT/lZsK/0DiQNLiKimfFoktCe3fYRMY:WShU3q7cEDlCK/0DV9i8Fok06fYRP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772035770, "uuid": "2e85ea27-25e7-4a36-be90-92786384c90c", "value": 63296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772035770, "uuid": "c69cfb88-526d-4b40-a253-9bcdc551c846", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25753f0e-1267-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772036964, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772036964, "uuid": "09a74e7a-cc27-46f3-9f96-26ec34a32856", "comment": "Malware payload (Mirai)", "value": "a53a4562413a863be84ac7264d9f29ab", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772036964, "uuid": "dfa01a2d-9d41-4a57-a5f1-2de87ca3e03f", "comment": "Malware payload (Mirai)", "value": "7cdf9b7eb8e2e7d3348c078254983128382e292b94fc93ddc34ec57ff171b506", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772036964, "uuid": "c80f424f-79c8-4111-9e47-b9fde323b1ec", "value": "T1A203F751BC829A77C2E1137AB6AE4A8D336163E8C2CF7217DD214B607AD651F0D23F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772036964, "uuid": "4cbd5026-a8c1-489f-88f6-9d2840cb6323", "value": "768:AgA/wMCbXsG5f0OJnlUlcOlF5AdwAAb9XDWd2v+bAq77TEXoTN/NMwWY:AfWb8G5fblUlfbgeaUv+fE6HWY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772036964, "uuid": "b66518b8-e673-49a9-9866-70c3e7ea096a", "value": 40752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772036964, "uuid": "2a6df8e1-865e-40cc-8566-5424dfd783f8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4e45401-1272-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772041929, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772041929, "uuid": "ee04be5a-551d-4e13-9024-58fb5ae0a601", "comment": "Malware payload", "value": "d9c983aba87abc3d87b4f7c651048d0d", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772041929, "uuid": "75246a4a-fec4-4c31-b0e3-7fc67166a1eb", "comment": "Malware payload", "value": "28d27457ede18bb400086fb71b25787f72257a489ccbea6aaefb73dfbfa8f6e6", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772041929, "uuid": "aecee78a-e419-44d7-ae62-833cb00f6007", "value": "T1E1D633A0A6E815FBF9EA933DCC619492C99A76663B49C1C3C3F8C5A12C733C4653E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772041929, "uuid": "cb010011-e35e-4ed8-8a3e-fc5bffbe93d6", "value": "dcaf48c1f10b0efa0a4472200f3850ed", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772041929, "uuid": "d6ee19c7-f463-4966-8f65-74ecfdac6b4e", "value": "196608:114oWUoB9qLZBFslHl7dZgnRMWF3y99TisLkuor0eyAurH/P/XRLSq2KKeF:114FSsFl7dCR1C99/Lku9IuDX8W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772041929, "uuid": "6b365ed2-6a9c-48b8-9915-90bde758b3e2", "value": 13415511, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772041929, "uuid": "26c0252c-3d6d-4e68-8acb-5c6e2cfe920a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b964bda2-1272-11f1-8369-82aee05be84a", "comment": "Malware payload (NetSupport)", "timestamp": 1772041937, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772041937, "uuid": "960a05ea-6448-4d39-aeaf-93ba498960a9", "comment": "Malware payload (NetSupport)", "value": "c5894b3aac979077f6f05cc12569220d", "object_relation": "md5", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772041937, "uuid": "0a8acd9c-acf8-409b-964d-e71c4c0c3a2e", "comment": "Malware payload (NetSupport)", "value": "92748a3d9b11ce9290270f72147a25250d17d37697fbef8795af06f4f649f4ea", "object_relation": "sha256", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772041937, "uuid": "78666e79-793b-4081-88a2-8ac8d10b60c4", "value": "T146D633A0A6E811FFF9EAD33DC8519491C99675AA3B8AC183D3B8D1B12C733C4597E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772041937, "uuid": "c1ab0781-812e-4d6a-945c-5ab044cc956a", "value": "dcaf48c1f10b0efa0a4472200f3850ed", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772041937, "uuid": "2cd1da43-935d-4de1-89ec-9497a347097b", "value": "196608:K14oWUoB9qLZBFslHl7dZgnRMWF3y99TisLkuort3urH/P/XRLSq2KKeF:K14FSsFl7dCR1C99/LkuGuDX8W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772041937, "uuid": "c96911a7-8447-4c70-bab5-d0525043cd5c", "value": 13412505, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772041937, "uuid": "dfc4c6a4-c4f7-435d-9c4d-e92120051e6b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd894fae-1272-11f1-8369-82aee05be84a", "comment": "Malware payload (NetSupport)", "timestamp": 1772041944, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772041944, "uuid": "6bbd75dc-f46f-4894-81c6-1b6a85443a0c", "comment": "Malware payload (NetSupport)", "value": "5e9b7349fcabc7cb34c3a4d5c3468641", "object_relation": "md5", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772041944, "uuid": "ac213a24-f76e-4df2-9058-d75ae31b6c5d", "comment": "Malware payload (NetSupport)", "value": "28c2426e93130038b7470e3b9ce5d6a531bb17b427aea61064157417c5ce6666", "object_relation": "sha256", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772041944, "uuid": "ee49d2fa-ad8d-4d51-a7e3-c00049043b75", "value": "T133D633A4A6E811FBF9AF933DC862D992C59675663B49C183D3F8C1A12C733C4693E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772041944, "uuid": "3271b4d0-e9bb-46e5-895f-a3ae0494236e", "value": "dcaf48c1f10b0efa0a4472200f3850ed", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772041944, "uuid": "34df6670-56d4-4cc3-ac1f-f3b54e971a2b", "value": "196608:J14oWUoB9qLZBFslHl7dZgnRMWF3y99TisLkuorDurH/P/XRLSq2KKeF:J14FSsFl7dCR1C99/Lku+uDX8W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772041944, "uuid": "a0dce292-c4ed-4381-9f7a-34fb196c6f7e", "value": 13413159, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772041944, "uuid": "c5a4215d-be28-448d-91bb-096da2d39e30", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd904933-1272-11f1-8369-82aee05be84a", "comment": "Malware payload (NetSupport)", "timestamp": 1772041944, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772041944, "uuid": "15f1a18b-122f-468f-ae8e-f1864f868fc4", "comment": "Malware payload (NetSupport)", "value": "92a7af63722cb3465e68fb84e4e799e1", "object_relation": "md5", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772041944, "uuid": "694946e9-6651-4417-8d51-8957a2a8344d", "comment": "Malware payload (NetSupport)", "value": "f1727b9da4055014e15f70f3b4c36029cd3ef02cc42a39ada315255493323758", "object_relation": "sha256", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772041944, "uuid": "a651dbd2-c906-49d9-9e11-ec35d5113eb4", "value": "T1F3D633A0A6E811FFF9EE933DC86295A1C89675663B49C183C3F8C5A12C733C4697E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772041944, "uuid": "94b1255c-519b-4da3-8952-3baf1ac901e2", "value": "dcaf48c1f10b0efa0a4472200f3850ed", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772041944, "uuid": "8b612257-c770-4204-89e0-25559bf7b307", "value": "196608:gB14oWUoB9qLZBFslHl7dZgnRMWF3y99TisLkuorAz2urH/P/XRLSq2KKeF:gB14FSsFl7dCR1C99/LkueuDX8W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772041944, "uuid": "4aac0600-188a-4a7f-90b2-da6f3addd555", "value": 13413705, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772041944, "uuid": "32958091-8dd4-4a7b-9460-17c90ebf6753", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bdb9b9c4-1272-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772041944, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772041944, "uuid": "51c1db08-9329-4742-b0d8-b49034e11f11", "comment": "Malware payload", "value": "cf71e12f1aa603d79e0265f8bf55ea65", "object_relation": "md5", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772041944, "uuid": "7301f55d-ae6a-42da-8eb7-ba14e1b8ec7f", "comment": "Malware payload", "value": "dea72dc7dc729c0f9f6ff009863726be9894c66d478632fd71b3592c97c5db87", "object_relation": "sha256", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772041944, "uuid": "01e606fe-6fcc-4107-a508-74af7a60c709", "value": "T1FBD633A0A6E821EFF9EAD33DC85199A1C59675673B4AC093C3F8C1A12C737C4663E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772041944, "uuid": "42193faa-b3c2-404f-bc10-60522bfee340", "value": "dcaf48c1f10b0efa0a4472200f3850ed", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772041944, "uuid": "a7ae021e-7f5e-402d-b37d-c47e9e3bc3ed", "value": "196608:V14oWUoB9qLZBFslHl7dZgnRMWF3y99TisLkuorL2AbCPurH/P/XRLSq2KKeF:V14FSsFl7dCR1C99/LkuRNPuDX8W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772041944, "uuid": "2eefdcb6-1eed-4634-b793-a22b30f50952", "value": 13415358, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772041944, "uuid": "229e7bb2-9bd3-4e93-9c13-2d31d29ba86b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d8d961ff-1272-11f1-8369-82aee05be84a", "comment": "Malware payload (NetSupport)", "timestamp": 1772041989, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772041989, "uuid": "f434561b-de82-49c2-8022-2de9fadcb614", "comment": "Malware payload (NetSupport)", "value": "4319c8385f7f9181d9f8989a0e182800", "object_relation": "md5", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772041989, "uuid": "433d18b3-a1d5-42f2-9248-291d95dd7446", "comment": "Malware payload (NetSupport)", "value": "bdf9f680afda4aceaf89e106136f14472adc17d7264648f82880d4a247cd5b5b", "object_relation": "sha256", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772041989, "uuid": "0751316f-1461-43bd-9c4d-0b29ec2ad462", "value": "T103D633A0A6E811FBF9EA933DC85199A2C89A35763B49C183C3F8D1E12D737C4593E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772041989, "uuid": "38686871-c3cb-4fe9-9bca-7c338f71b64b", "value": "dcaf48c1f10b0efa0a4472200f3850ed", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772041989, "uuid": "39a67ad9-e5fd-4676-95c4-f5e9c810c449", "value": "196608:v14oWUoB9qLZBFslHl7dZgnRMWF3y99TisLkuorijdTrmLurH/P/XRLSq2KKeF:v14FSsFl7dCR1C99/LkuhjdTqLuDX8W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772041989, "uuid": "c6923ab1-806d-44f7-b4ab-f819b7a19dff", "value": 13415451, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772041989, "uuid": "35593302-8813-40ed-9194-299efcb6b513", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d9469715-1272-11f1-8369-82aee05be84a", "comment": "Malware payload (NetSupport)", "timestamp": 1772041990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772041990, "uuid": "653dfb2f-79ba-4b6e-be9e-d075224480cc", "comment": "Malware payload (NetSupport)", "value": "201351412e893f1292a60ad593371aad", "object_relation": "md5", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772041990, "uuid": "407e9cad-8263-4280-8e09-7f3a5373661e", "comment": "Malware payload (NetSupport)", "value": "dd164d18a4a99d1093608402931f06903e96f6aa30841ef60dc3be335946d0a6", "object_relation": "sha256", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772041990, "uuid": "8511d10f-53c5-4bc0-9db4-32a593e7d7e7", "value": "T1BED633A0A6E815FBF9EE933DCD529992C99676662B49C193C3F8D0B02C733C4653E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772041990, "uuid": "e56f4364-c0cc-4520-87fe-54c2c026ec3e", "value": "dcaf48c1f10b0efa0a4472200f3850ed", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772041990, "uuid": "c80dc6fa-9ba4-461a-b1a6-7f97d397ec04", "value": "196608:M14oWUoB9qLZBFslHl7dZgnRMWF3y99TisLkuor7G6JCurH/P/XRLSq2KKeF:M14FSsFl7dCR1C99/LkuUJCuDX8W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772041990, "uuid": "89a28fd1-3c42-40eb-815d-6348f822b8fa", "value": 13414054, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772041990, "uuid": "6f53ab88-f3ce-48f9-b1bb-edc6af00de4d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b08daa4b-1277-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772044069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772044069, "uuid": "eebf6b20-7ac8-4eb5-9cfa-d88b6d5f10eb", "comment": "Malware payload (Mirai)", "value": "000344c68880129e90ceae22a1709701", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772044069, "uuid": "e597d6fc-bab6-499a-aefb-fca22650449f", "comment": "Malware payload (Mirai)", "value": "284beacfb87f61dc15d3558bab24ffc9a07181d7345295f58e79080610452605", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772044069, "uuid": "f6fc930b-eca3-47ff-809d-0ecb5f0ad1a5", "value": "T1EE438C37E96E1E74C04641B074748EB56F23B5C883972EB61AAAC2795483E9CF504F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772044069, "uuid": "0fd0b152-2913-46c0-966f-c0ad76e74009", "value": "1536:Vaa0brW/Od9hlCR3KJwKYXwKEpPDCMC2+WP:Vv0brWGd9X5JXYypPDL+a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772044069, "uuid": "86e8bd90-eb60-4466-bf98-e6f8ce237783", "value": 58740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772044069, "uuid": "a3886c08-cd0f-4786-818e-5443ff9345c5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3140f567-9af8-11ef-afe5-82aee05be84a", "comment": "Malware payload (Formbook)", "timestamp": 1772044250, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772044250, "uuid": "d6b7144f-6ada-45d8-960c-de2292f619f3", "comment": "Malware payload (Formbook)", "value": "b7759166a0f1807b202b45f510c2172e", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "gootkit", "colour": "#020754", "exportable": true, "hide_tag": false }, { "name": "GootLoader", "colour": "#2b08dd", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "KongTuke", "colour": "#A5AEAB", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772044250, "uuid": "5a8f8096-03ba-4786-a01c-46b4255b5fc5", "comment": "Malware payload (Formbook)", "value": "825eb1a627f34c3d1fad85cb5904b5ac0fded65f677c5a85fa992e42c450fd99", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "gootkit", "colour": "#020754", "exportable": true, "hide_tag": false }, { "name": "GootLoader", "colour": "#2b08dd", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "KongTuke", "colour": "#A5AEAB", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772044250, "uuid": "8c072c81-d4d6-47b1-996e-567b75dfb1b4", "value": "T1C632C41E9268386F11EB5195F777B3EC503A4878C060028DB07F5929A257A93EA235", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772044250, "uuid": "807b44ff-a1d9-4275-9f8c-a56f4ed7e48d", "value": "192:OO0vOM7R1YehNAKU3IEjHmaq44BG0wK5FhYg/4fT0Cmlz+S+CVy+g/S:OV6KU3IEq44BG0wK5FhYg/Q0Cmlz7+C7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772044250, "uuid": "600f1cae-4db6-4135-b507-5e107e613b4e", "value": 11694, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772044250, "uuid": "8bf59f03-3d20-431b-bc04-c6cafff4630d", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b119c9fc-127a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772045359, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045359, "uuid": "fe39a6b3-963e-43e1-a412-e8c8887b5291", "comment": "Malware payload (Mirai)", "value": "3039e9e64d78fdcbf56481bebbcb9eff", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045359, "uuid": "984eabea-31ab-4e2b-8d4b-4281e8e244ec", "comment": "Malware payload (Mirai)", "value": "1803910980685646cd1903858ddb5445dc1285800ca3af8a0c7f074ab8942cab", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772045359, "uuid": "a8f7b627-1168-4c44-a957-cf2119b5afba", "value": "T192732931BA760E27C4C1A4B621F74B25F2F243CA26ACCA1A3DB10E5DBF716502517A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772045359, "uuid": "3c610fd5-8b8e-42ce-ab8d-285f19b003cc", "value": "1536:senZA+YFqLywGgWgU2UJdUKbVQJtWc75StJepVcc:7ZsCpAukcVbVcc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772045359, "uuid": "d56c51ca-e5bd-4259-ba87-4317e1ad00dd", "value": 76704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772045359, "uuid": "a31b5ed4-7f6c-4470-8c75-4b69444e0949", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b12fe7a5-127a-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772045359, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045359, "uuid": "9f9a2803-a4e3-4cbf-8538-483352a2dfa6", "comment": "Malware payload", "value": "9fb9ec403b4ef2f8ab7e5c57f78fbf6a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045359, "uuid": "762c19e4-2fed-4d12-ac9c-875e6a3d8718", "comment": "Malware payload", "value": "f6100a591568c2a0c68c8cd9b9d62481e391407feea416de19abd63926dc37ec", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772045359, "uuid": "b96f20d0-ffa9-4998-a7ae-be70cdf792fe", "value": "T1CFD32902B31C0947D1A32EB03A3F27E193EFAAC121E8F641755F9A8A9271D375585E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772045359, "uuid": "5fa90789-076a-41b5-8145-87550f3b00ec", "value": "1536:l6efD0MC6+RoB8Bwwx7b3mxFVkRFuwuZ3i6oAj/Z+dvADdZGaVKjp+qDIy+uB1Lh:AGwI+RoBm7CxIuRi6b/1DOl1Lh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772045359, "uuid": "2df94d3e-ae0d-4953-b682-47e5165a5559", "value": 142040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772045359, "uuid": "98729412-df21-441c-aa47-4a4f47255a04", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1413597-127a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772045359, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045359, "uuid": "752d9ed2-e40b-4685-9dd4-8ca44b0eb4ac", "comment": "Malware payload (Mirai)", "value": "ff18cc44d8ec72d8010d3b9af7208690", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045359, "uuid": "58f6ec6c-bd8c-445d-b09f-6c6cf0bbe773", "comment": "Malware payload (Mirai)", "value": "61b15f7287c7569bd3da8a7d7da1a27a39637b7001e3af91045b7566d50c59b4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772045359, "uuid": "43a9439c-9771-4159-9c9c-fa325293a82c", "value": "T1B113F751F842463BC2E0177AB6AF5A8D336563E9C2DBB21BD9218B103F8651F0D67F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772045359, "uuid": "5cd56e1e-f762-40ac-9b9d-b0fcfad92fd7", "value": "768:dCW2LfdqM45LVBA0G5J2CPH3zyLrKJCc5Bol9AURmfZZKg8VBoGeuyw1K:4v9413G5JtPX4GT8FSwXVeuL1K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772045359, "uuid": "315a0392-4007-4c51-a381-a111d5c93488", "value": 44824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772045359, "uuid": "be512cc2-66a6-4705-8161-bd04b3831d10", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1448846-127a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772045359, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045359, "uuid": "527bcfd5-983b-43b4-97b6-973cbd386266", "comment": "Malware payload (Mirai)", "value": "048ac98c7d60b6f237a1818bdbfe5ddb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045359, "uuid": "dc0d306e-563d-4e4f-807e-b67c2602ec82", "comment": "Malware payload (Mirai)", "value": "9e46fbfaa3baa10e3f83babd6858c851a6f0c300e269ff760b64d954d7451f62", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772045359, "uuid": "ea597da2-e690-4f72-b9ed-c99aeefaf67e", "value": "T199D30A45F8414B23C6D512BBFB5E428D372A17E9D2EE7207DD255F203B8686B0E3B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772045359, "uuid": "18b9036f-9179-4207-bb3e-905ff9567fa4", "value": "3072:K52ZIkT3Uh0JofYwjCIyHEzt8lez83412:K52SkTGGofYwjnykztN83412", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772045359, "uuid": "7834adf0-3c37-4ed7-8d27-57207a260178", "value": 141920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772045359, "uuid": "8cc18c86-1266-46d4-92be-733150142187", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b150621c-127a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772045359, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045359, "uuid": "e0203c53-e5e3-4dc9-8654-8564ed0566cd", "comment": "Malware payload (Mirai)", "value": "4bac103d26a560d9725c1409491893ef", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045359, "uuid": "eb06fa99-e914-4954-9b30-c2805a31b25c", "comment": "Malware payload (Mirai)", "value": "deac67016555e26f43638b47f0eddb61337a33583555e1b4e0f4aa91202988a1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772045359, "uuid": "80ca7b65-adf5-4e57-af14-fe922cb54f7d", "value": "T12FA35CC4F643E4F5E85305B1103BE7365B32E0B9112AF643D379AE32AC92652DB16B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772045359, "uuid": "6941ff61-e703-4fee-af3f-ddecf834b289", "value": "3072:YqRrQraDHgi2NVsgH+EaBtZ9XDPpEWYJ:YqhfDgi2NmNxEbJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772045359, "uuid": "60425fb5-00ed-46f3-a855-715c6ee224ef", "value": 99432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772045359, "uuid": "c013e6b1-9561-4dd5-a57a-97a8e5d422db", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b150d416-127a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772045359, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045359, "uuid": "e2949d18-3128-4201-ac7e-1bacf7f50611", "comment": "Malware payload (Mirai)", "value": "3f14f70fb436d9e653f67155a2ab286c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045359, "uuid": "e39864bb-7b48-448c-84e9-3a0ba281204f", "comment": "Malware payload (Mirai)", "value": "519fd8d2deaa7fe789bdaf93961364ef34d499a2bb85577bc5e2de36244afa00", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772045359, "uuid": "7f5d81a5-1c28-4ee1-a97b-fce0c1ef4e1d", "value": "T1D304961E6E228F7EF668873547B74E24975833D627E1D684E1ACC1106E6038E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772045359, "uuid": "72247ba0-e23e-4fc8-8ea8-6507f3a85eea", "value": "3072:NkZ4LL6auDHYeqrJAefp70uxy9PSfJy7tsqzk+dAKRDDQWTIJzk1l2Z:6ZcLDuDHY9JAefp7dxy9A8ZBRdtDNIJX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772045359, "uuid": "77dd3b47-7030-4da2-9449-e32b2b6910f7", "value": 185848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772045359, "uuid": "3a9b04c7-d178-4728-8a09-ee2b13718ffa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1575b03-127a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772045359, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045359, "uuid": "29e332ea-43bf-474a-9f71-23fb96170e21", "comment": "Malware payload (Mirai)", "value": "a3a01ad05fa10b42409b9f6b48e40e5d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045359, "uuid": "1c60d016-a586-4200-861b-8dd231713103", "comment": "Malware payload (Mirai)", "value": "28fc7f9f1587e43c90368c8257295bbb7dd3b053b16f5b19c1c8c2f0b5849f3f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772045359, "uuid": "9702b085-826c-46b9-8154-ab124f2a8612", "value": "T156E31A56F8818B15C5C111BAFE1D128E37231BB8E2DE72129D246F707B8A97B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772045359, "uuid": "c23bbcc6-2779-4d6f-80bc-699b9d7cfb2d", "value": "3072:TcFkrqwVxUMCbBqthVK3z8avWtOUaf0hzjp1b:TukrqsPiqtDK3waqM0hXp1b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772045359, "uuid": "ef3eb0cc-2527-4e83-adf8-c650e5f994d7", "value": 152444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772045359, "uuid": "b2ea120f-847d-41c3-8383-7874757b3505", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b15e5db8-127a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772045359, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045359, "uuid": "543ad563-0255-49bb-bf74-176efcfbee5c", "comment": "Malware payload (Mirai)", "value": "bb5b79c8bb2fe12a3a67ffedfbd2b0fd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045359, "uuid": "92266ec1-0d52-4339-bedd-b84729051f4b", "comment": "Malware payload (Mirai)", "value": "95306150b2d778a66b13daa5e016e225e6eed6d812e81ad4fe8f702eeaccecb8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772045359, "uuid": "94adb6d8-f644-495a-ad74-9a0363e5632f", "value": "T12EC35973C8166F68C565A570B0A08F782F53E59492431FBE6CABC2B48483D8DF605B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772045359, "uuid": "f02c4f9c-3454-47d6-a47d-52c89504916e", "value": "3072:D0hbbqpvMeFXphS8sVFos46Hx3WpP6Ei12:whHuvMgLxsVF1ZxGpyEi12", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772045359, "uuid": "3df7abf4-be34-462c-9530-6d9243dd6578", "value": 125600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772045359, "uuid": "235e5669-d829-40f7-8087-67d90d079bc8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a71bf72-127f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772047307, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772047307, "uuid": "776b4aab-3ee7-406c-9f91-ae68eaa2da26", "comment": "Malware payload (Mirai)", "value": "8076e5367e53a39c5b29585367850e4b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772047307, "uuid": "b481053b-09f9-4816-8408-b0be93602440", "comment": "Malware payload (Mirai)", "value": "c3ef7574153f0c3bf9dd4d75f4526b2f1600e7163c312eebc31090b2546dafcb", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772047307, "uuid": "0d101eec-6058-402f-85d0-dcbac390304e", "value": "T1C7436BC4F643D8F5EC8705702077FB379B72E1E922A8D643D3B4DA32AC52651E606A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772047307, "uuid": "faa007c7-b360-49c4-b66d-dc57a57f4d01", "value": "1536:JeESt/basV2rcZhG6ySN7naLlSR9zWOIaEjrqMZs:JeESt/basVTgS7naLQRVtXESi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772047307, "uuid": "d814ec50-3f5a-4a26-b8b3-73d05d264a44", "value": 55632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772047307, "uuid": "31157fe1-d1b2-45cb-9223-690fe3abc0b5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7788f4b5-1281-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772048269, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772048269, "uuid": "204a59a3-a6e1-4ac6-865d-4525344df2bc", "comment": "Malware payload (Mirai)", "value": "1c3699a91ac0bdc769c517be614e28d6", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772048269, "uuid": "d2944957-80fa-4726-8df4-2a47fba19d41", "comment": "Malware payload (Mirai)", "value": "93d61719977e8fa9079eb13a5e3d6d15c0cce2a5209fbbb40c07433d5c9665f9", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772048269, "uuid": "01826b18-ab26-4da4-a87e-bde4df88a19c", "value": "T1F5534B02B31C0E07D0A31AB0253F5BD197BEEAD022F4F684656F979A9671E361181F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772048269, "uuid": "e5dcae46-1df7-4e4d-bb8f-93fbd1ee886f", "value": "768:SEE5hjcoCkhVRGfRnbmX7/mG1nhG5UmtTy5EMXd/p9OyDQvSFRMNYL6FV+tg6wWH:+5HAdOmGyNtTAdtOyUaFRMNae+aTWIO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772048269, "uuid": "a1ab97a3-4381-4bd4-a097-28f392bfda50", "value": 62996, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772048269, "uuid": "f03b9c8e-1813-45c5-8baf-b49dee68f8e5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772057586, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772057586, "uuid": "ab5cd142-da73-4415-a590-17fbd096eca8", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772057586, "uuid": "3c31b7af-a626-41a2-952b-ec4143bdf12c", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772057586, "uuid": "a5c3a70b-bf64-4e68-9bac-88e970f51df0", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772057586, "uuid": "5ce2069f-b9fc-428b-b782-2a06c720f82c", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772057586, "uuid": "fe5ac1e4-aec9-4058-bdfa-3ecfd6e4575c", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771977919, "uuid": "abe78039-11dd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.38.84:33420/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771977971, "uuid": "caeeef31-11dd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.10.44:55828/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771978148, "uuid": "3486b268-11de-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/2038862353/5o1vzUb.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771978278, "uuid": "821965de-11de-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.14.231:34795/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771978279, "uuid": "8274b515-11de-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.216.126:35444/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771978524, "uuid": "14908164-11df-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.211.47.170:33438/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771978636, "uuid": "57230300-11df-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.218.243:49815/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771978636, "uuid": "573c0fb2-11df-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.10.44:55828/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771980078, "uuid": "b2e2e403-11e2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.211.47.170:33438/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771980507, "uuid": "b2b4228e-11e3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.196.245:60477/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771981815, "uuid": "be382089-11e6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.24.19:35089/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771981881, "uuid": "e579d12f-11e6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.196.245:60477/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771982067, "uuid": "5441958a-11e7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.244.110:58465/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771982251, "uuid": "c218397f-11e7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.79.144:37761/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771982907, "uuid": "48d8740d-11e9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.133.78:54543/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771982969, "uuid": "6dd881b8-11e9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.153.87:51465/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771983260, "uuid": "1b584f30-11ea-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.21:34616/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771983384, "uuid": "656a2847-11ea-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.141.3:49020/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771983495, "uuid": "a79faa90-11ea-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.8.118.17:42948/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771983560, "uuid": "ce5c6eaf-11ea-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.126.43:37090/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771983851, "uuid": "7b6482f0-11eb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.79.144:37761/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771983974, "uuid": "c52b1dfe-11eb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.183.77:60638/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771984266, "uuid": "7300a3b3-11ec-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.159/s.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771984702, "uuid": "770b8bbf-11ed-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.183.77:60638/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771985011, "uuid": "2f141742-11ee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.221.174:44663/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771985121, "uuid": "70b83e05-11ee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.8.118.17:42948/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771985301, "uuid": "dc10de0d-11ee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.141.3:49020/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771985424, "uuid": "254587f1-11ef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.161.179:48657/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771987209, "uuid": "4d1c6401-11f3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/1773787694/RMnsgES.bat", "Tag": [ { "name": "donutloader", "colour": "#4b5532", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771988287, "uuid": "cfafe617-11f5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/1773787694/RMnsgES.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771989136, "uuid": "c9e86630-11f7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.109.198.12:41345/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771989246, "uuid": "0b927218-11f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.177.87:53387/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771989247, "uuid": "0be41190-11f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.71.100:35880/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771989435, "uuid": "7c487a08-11f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.220.93.215:46724/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771990038, "uuid": "e3491d01-11f9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.204.79:39005/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771990097, "uuid": "06a947f4-11fa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.22.172:51175/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771990098, "uuid": "074c0bce-11fa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.115.228.198:58759/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771990510, "uuid": "fcde5674-11fa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.44.17:33831/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771990878, "uuid": "d816e30b-11fb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.202.90.139:33705/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771990942, "uuid": "fe4b7e24-11fb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.109.198.12:41345/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771990998, "uuid": "1f6b6fc8-11fc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.202.90.139:33705/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771991190, "uuid": "9250ee27-11fc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.87.181:49727/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771991589, "uuid": "8017e6ee-11fd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.231.184:36183/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771991653, "uuid": "a5d82f8f-11fd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.142.107.217/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771991653, "uuid": "a5dc83c7-11fd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.142.107.217/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771991653, "uuid": "a5e01a0c-11fd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.142.107.217/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771991653, "uuid": "a5e13a87-11fd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.142.107.217/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771991653, "uuid": "a5e14264-11fd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.142.107.217/i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771991653, "uuid": "a5e22b95-11fd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.142.107.217/armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771991653, "uuid": "a5e43daf-11fd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.142.107.217/sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771991653, "uuid": "a5f167db-11fd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.142.107.217/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771991717, "uuid": "cc57d441-11fd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.142.107.217/i586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771991717, "uuid": "cc5812e4-11fd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.142.107.217/armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771991717, "uuid": "cc60633b-11fd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.142.107.217/armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771991776, "uuid": "ef700a9e-11fd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.115.228.198:58759/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771991833, "uuid": "112eb33c-11fe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.52.113:45069/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771992669, "uuid": "0354559d-1200-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.231.184:36183/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771992675, "uuid": "06ee8ade-1200-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.224.117:55684/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771992789, "uuid": "4b508c05-1200-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.135.153.63:38293/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771993469, "uuid": "e08056c4-1201-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.119.220:37364/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771993750, "uuid": "87d91831-1202-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.232.190:59657/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771993928, "uuid": "f1e1ceeb-1202-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.135.153.63:38293/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771994298, "uuid": "ce825a70-1203-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.120.159:39128/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771994658, "uuid": "a5535ebc-1204-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.22.210:51783/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771994711, "uuid": "c4ddc42f-1204-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.96.88.244:48614/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771994837, "uuid": "0fbdd23e-1205-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.39.44:44626/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771995191, "uuid": "e2fab9ca-1205-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.73.65:35876/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771995250, "uuid": "05d46468-1206-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.39.44:44626/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771995437, "uuid": "75847edd-1206-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.119.220:37364/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771995980, "uuid": "b914dbf1-1207-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.129.194:39679/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771996028, "uuid": "d5800a3c-1207-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.22.210:51783/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771996097, "uuid": "fe9c2767-1207-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.92.39:42288/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771996753, "uuid": "85ddcecf-1209-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.73.65:35876/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771996937, "uuid": "f35152fc-1209-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.101.213.127:39088/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771996951, "uuid": "fc2afef9-1209-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.103.155:35289/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771997054, "uuid": "38fbebed-120a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.226.182.42:49705/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771997076, "uuid": "46a490be-120a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.101.213.127:39088/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771998140, "uuid": "c0afe806-120c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.89.3:36242/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771998570, "uuid": "c0df1a6e-120d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.103.155:35289/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771998737, "uuid": "242431b3-120e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.162.235:59928/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771998858, "uuid": "6c51e81c-120e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.31.174:50261/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771999398, "uuid": "ae255b32-120f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.236.7:43173/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771999640, "uuid": "3eee8b02-1210-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.199.219.57/cat.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771999642, "uuid": "3fd276b1-1210-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.89.3:36242/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771999649, "uuid": "440fc2b2-1210-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.89.52.41/ep9TS2/ndt.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771999884, "uuid": "d007fc88-1210-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.70.173:40219/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771999989, "uuid": "0eb48ec8-1211-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.199.219.57/iran.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771999989, "uuid": "0ef33607-1211-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.199.219.57/iran.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771999990, "uuid": "0f0311aa-1211-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.199.219.57/iran.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771999990, "uuid": "0f034294-1211-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.199.219.57/iran.armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771999990, "uuid": "0f035b7d-1211-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.199.219.57/iran.aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771999990, "uuid": "0f0366de-1211-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.199.219.57/iran.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771999990, "uuid": "0f04859a-1211-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.199.219.57/iran.armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771999990, "uuid": "0f061ef7-1211-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.199.219.57/iran.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771999990, "uuid": "0f064f55-1211-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.199.219.57/iran.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771999990, "uuid": "0f0915b1-1211-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.199.219.57/iran.powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771999990, "uuid": "0f0abd8e-1211-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.199.219.57/iran.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771999990, "uuid": "0f0d5c4d-1211-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.199.219.57/iran.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771999997, "uuid": "133b78d1-1211-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.199.219.57/iran.armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771999997, "uuid": "138501f8-1211-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.199.219.57/iran.armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772000359, "uuid": "eaf97ca6-1211-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.87.233:60487/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772000373, "uuid": "f37d4ecd-1211-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.236.7:43173/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772000475, "uuid": "307433c1-1212-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.232.137.101:40562/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772001496, "uuid": "90a94438-1214-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.70.173:40219/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002220, "uuid": "4097bd3d-1216-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.32.230:35019/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002345, "uuid": "8aa7f1a7-1216-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.215.10:46502/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002390, "uuid": "a5cf9b0f-1216-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.174.174:35255/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002507, "uuid": "eb66626b-1216-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.16:6767/ez_nigger.aarch64", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002507, "uuid": "eb673136-1216-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.16:6767/ez_nigger.armv6l", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002507, "uuid": "eb9b08f8-1216-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.16:6767/ez_nigger.powerpc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002507, "uuid": "eb9e1afc-1216-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.16:6767/ez_nigger.armv7l", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002508, "uuid": "ebddbe16-1216-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.16:6767/ez_nigger.armv4l", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002508, "uuid": "ebe5ff79-1216-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.16:6767/ez_nigger.sparc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002509, "uuid": "eca4aef3-1216-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.16:6767/ez_nigger.x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002509, "uuid": "eca8bfaf-1216-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.16:6767/ez_nigger.m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002509, "uuid": "ecbab965-1216-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.16:6767/ez_nigger.i486", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002509, "uuid": "ecbe720b-1216-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.16:6767/ez_nigger.i686", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002509, "uuid": "ecd7b8cf-1216-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.16:6767/ez_nigger.mipsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002509, "uuid": "ecd7c304-1216-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.16:6767/ez_nigger.sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002509, "uuid": "ecda4a28-1216-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.16:6767/ez_nigger.ppc440", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002509, "uuid": "eced98c3-1216-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.16:6767/ez_nigger.armv5l", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002509, "uuid": "ecf53cd9-1216-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.16:6767/ez_nigger.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002509, "uuid": "ecfa9383-1216-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.16:6767/ez_nigger.ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002510, "uuid": "ed09228d-1216-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.16:6767/ez_nigger.arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002510, "uuid": "ed0b0db6-1216-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.9/ohshit.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002510, "uuid": "ed1ad515-1216-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.16:6767/ez_nigger.arc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002566, "uuid": "0ead3ea3-1217-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.16:6767/ez_nigger.x86_32", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772002631, "uuid": "356bdf96-1217-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.87.233:60487/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772003419, "uuid": "0ad74d64-1219-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.238.165:53773/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772003911, "uuid": "308bea45-121a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.59.171:43262/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772003925, "uuid": "38b3545a-121a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.221.204:56635/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772004158, "uuid": "c39aef91-121a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.28.207:49400/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772004384, "uuid": "4a257a14-121b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.55.92:43213/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772004503, "uuid": "9112082e-121b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.55.92:43213/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772004573, "uuid": "bad3e022-121b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.221.204:56635/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772004812, "uuid": "495d2da0-121c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.215.10:46502/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772005058, "uuid": "dc3c132f-121c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.27.211:38554/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772005106, "uuid": "f8dbd6ad-121c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.150.154:50754/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772005172, "uuid": "1ff6f957-121d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.6.22:50081/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772005227, "uuid": "408ed355-121d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.39.89:54585/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772006005, "uuid": "107adc19-121f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.91.124:41527/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772006127, "uuid": "5928322e-121f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.183.203:55565/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772006245, "uuid": "9fa78a56-121f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.183.203:55565/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772007090, "uuid": "96eefc92-1221-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.91.124:41527/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772007314, "uuid": "1c9c1c38-1222-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.228.61:48386/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772007745, "uuid": "1dc9e00d-1223-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.39.89:54585/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772007802, "uuid": "3f9cd275-1223-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.222.255:33631/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772008343, "uuid": "823bcbc8-1224-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.222.255:33631/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772008464, "uuid": "ca35ec1b-1224-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.13.233.65:39972/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772008762, "uuid": "7bbf4385-1225-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.225.239:33150/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772009775, "uuid": "d74b63ff-1227-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.79.48:44050/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772010310, "uuid": "16992913-1229-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8041470462/hRABpeR.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772010608, "uuid": "c7fd11ef-1229-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/satish-ss/Roblox-Matcha/raw/refs/heads/master/bacula/Matcha-Roblox-v3.9-beta.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772010788, "uuid": "33a17842-122a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.28.207:49400/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772011213, "uuid": "307b7a83-122b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.114.178:44147/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772011397, "uuid": "9e16efdc-122b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.79.48:44050/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772011509, "uuid": "e118791c-122b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/CARLOSOLIVER606/zips/raw/refs/heads/main/Application.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772011514, "uuid": "e45d0d0e-122b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.114.178:44147/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772012771, "uuid": "d16456c0-122e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.61.38.75:33771/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772013079, "uuid": "892728cd-122f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.41.15:36084/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772013249, "uuid": "ee74b44b-122f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.62.157:59313/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772013617, "uuid": "c9c25feb-1230-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.101.204:43753/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772013967, "uuid": "9a477fd3-1231-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7782139129/SoSph86.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772014101, "uuid": "e9cc627b-1231-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.108.247:60023/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772014158, "uuid": "0bfac1d6-1232-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.108.247:60023/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772014393, "uuid": "98280eec-1232-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.101.204:43753/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772014450, "uuid": "ba227679-1232-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.42.91.26:56735/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772014700, "uuid": "4f53f347-1233-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.62.157:59313/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772014868, "uuid": "b2fb2fbb-1233-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/CJorrr/Roblox-Ronin/raw/refs/heads/master/devour/Roblox-Ronin-2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772015482, "uuid": "20f2483a-1235-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.169.199:37529/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772015527, "uuid": "3bc08c73-1235-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/jasoncraigberry/mockd/raw/refs/heads/main/tests/e2e/Software-3.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772015718, "uuid": "adddbab8-1235-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.69.79:51344/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016069, "uuid": "7f167f58-1236-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/GungSatt/Gunfight-Arena/raw/refs/heads/main/image/Gunfight_Arena_1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016138, "uuid": "a8701547-1236-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.41.15:36084/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016188, "uuid": "c627e784-1236-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Matsuzaka-U/Facial-Unification/main/Content/Facial_Unification_v2.6-beta.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016366, "uuid": "30480a0a-1237-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/makodany/decomp/raw/refs/heads/main/sz.txt", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016486, "uuid": "77e6cd1d-1237-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/nasernazem/TInjector_Symbi/master/stub/Injector_Symbi_T_v3.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016621, "uuid": "c80c46d3-1237-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.239.111:46036/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016802, "uuid": "33d28a69-1238-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.126.43:37090/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016804, "uuid": "34e8a8ff-1238-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.230.17:43436/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016975, "uuid": "9b1b14da-1238-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.9/hiddenbin/boatnet.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016975, "uuid": "9b1b4d82-1238-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.9/hiddenbin/boatnet.i468", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016975, "uuid": "9b254738-1238-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.9/hiddenbin/boatnet.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016978, "uuid": "9cde83bb-1238-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.9/hiddenbin/boatnet.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016978, "uuid": "9cdea183-1238-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.9/hiddenbin/boatnet.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016978, "uuid": "9cdeffb4-1238-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.9/hiddenbin/boatnet.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016978, "uuid": "9ce8f767-1238-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.9/hiddenbin/boatnet.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016978, "uuid": "9cf0c9c9-1238-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.9/hiddenbin/boatnet.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016978, "uuid": "9cf0d02e-1238-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.9/hiddenbin/boatnet.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016978, "uuid": "9cf1ba56-1238-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.9/hiddenbin/boatnet.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016978, "uuid": "9cfa0e36-1238-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.9/hiddenbin/boatnet.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016978, "uuid": "9cfe58ba-1238-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.9/hiddenbin/boatnet.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772016978, "uuid": "9cffc15b-1238-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.9/hiddenbin/boatnet.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772017029, "uuid": "bb6bb5ea-1238-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/blackwall0220/roblox-discord-status-bot/raw/refs/heads/master/Pelodytes/status-roblox-discord-bot-v2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772017032, "uuid": "bce8ac28-1238-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.9/hiddenbin/boatnet.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772017034, "uuid": "be29248e-1238-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.9/hiddenbin/boatnet.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772017160, "uuid": "09155a1e-1239-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.169.199:37529/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772017208, "uuid": "26189de3-1239-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/likith1201/Roblox-Ronin/master/leucorrhea/Roblox_Ronin_v1.5-beta.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772017329, "uuid": "6ddd7ad5-1239-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.230.17:43436/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772017568, "uuid": "fcd2cd48-1239-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/hassan-be/Pet-Simulator-99-Dupe-GUI/raw/refs/heads/main/Canichanan/Simulator-Pet-GUI-Dupe-1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772017579, "uuid": "03086b87-123a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.42.91.26:56735/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772017986, "uuid": "f5b63f2d-123a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/kotobubu/roblox-executor/main/tertiarian/roblox_executor_1.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772018053, "uuid": "1da8f22c-123b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.139.77:52913/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772018125, "uuid": "48952a20-123b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.142.107.217/powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772018291, "uuid": "ab9696c8-123b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.167.251.101:58778/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772018835, "uuid": "efadd9ce-123c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/oluwadamilare777/app/raw/refs/heads/main/Launcher.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772019129, "uuid": "9ebd5d61-123d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/kidkaitou121212/Roblox-Executor-Injector-2025/raw/refs/heads/main/imaginableness/Injector_Executor_Roblox_2.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772019619, "uuid": "c2cb343b-123e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.236.255:50363/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772019858, "uuid": "51754378-123f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.236.255:50363/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772020630, "uuid": "1dd585bb-1241-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://aisramadan.pages.dev/ArafRamadanDays26.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772020637, "uuid": "21eaf98e-1241-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://7070-ppxcx-a1-3gg5ufwp666ee644-1300076834.tcb.qcloud.la/test/zcgo/go.exe", "Tag": [ { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772020640, "uuid": "23b884f0-1241-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://katz.adv.br/dhl/AWB-20022026.scr", "Tag": [ { "name": "SimpleHelp", "colour": "#C609B5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772020641, "uuid": "23f301d8-1241-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://esr.ro/DHL/doc389l47.scr", "Tag": [ { "name": "SimpleHelp", "colour": "#C609B5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772020642, "uuid": "24e54298-1241-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://kurulum.online/dhl/docs5647001.scr", "Tag": [ { "name": "SimpleHelp", "colour": "#C609B5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772020644, "uuid": "25f203f6-1241-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://7070-ppxcx-a1-3gg5ufwp666ee644-1300076834.tcb.qcloud.la/test/zcgo/zcgo1.vbs", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772020868, "uuid": "abb09295-1241-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.139.77:52913/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772021117, "uuid": "4003684c-1242-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.163.137.29:55868/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772021288, "uuid": "a5caf365-1242-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.68.239:53791/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772021288, "uuid": "a5cfdcba-1242-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.68.239:53791/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772022011, "uuid": "54d579d9-1244-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.mediafire.com/file/444c7egfdwr678p/Middagenes78.msi/file", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772022247, "uuid": "e171cc6c-1244-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.95.24/dLiaNGOBtwC70.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772022247, "uuid": "e19d64af-1244-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.95.24/EImdfPd28.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772022311, "uuid": "07b676a7-1245-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.95.24/YIzjRhfAHzWIB71.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772022618, "uuid": "beb65ba2-1245-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.163.137.29:55868/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772022796, "uuid": "289d8ffa-1246-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.223.150:58781/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772025800, "uuid": "270764d8-124d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.223.55:47259/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772025867, "uuid": "4eee1401-124d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.178.23:56250/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772025926, "uuid": "7231c027-124d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.136.33.124:34952/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772026158, "uuid": "fc8a85ec-124d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.182.99:51590/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772026338, "uuid": "67c40443-124e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.182.99:51590/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772027363, "uuid": "cae32588-1250-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.103.0.102:37591/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772027538, "uuid": "32dc33b9-1251-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.226.123:33018/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772027597, "uuid": "5693a883-1251-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.47.149:51387/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772027658, "uuid": "7a9d8959-1251-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.47.149:51387/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772028203, "uuid": "bf4b8199-1252-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.252.233:59188/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772028367, "uuid": "215da8cf-1253-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.74.122:55484/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772028609, "uuid": "b15d8644-1253-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://6ut6sdn1.clearvertex.digital/?=check&&actmn=wnrcEtvGgvFBdJSm", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772028864, "uuid": "493fe870-1254-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.250.238.6:44580/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772029104, "uuid": "d8a15ab9-1254-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.226.123:33018/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772029336, "uuid": "62acd41d-1255-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.103.0.102:37591/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772030408, "uuid": "e216a338-1257-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.81.71:39276/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772030409, "uuid": "e221dddf-1257-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.74.122:55484/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772030409, "uuid": "e22834f1-1257-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.24.19:35089/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772032029, "uuid": "a8040d3c-125b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.182.8:51618/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772032149, "uuid": "efcfcfb4-125b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/fit075kmyvo3/assets/js/55vrn6yo1m?token=jukDt3BlreIW0LfiSuS5B2ERVrpsnL7w", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772032149, "uuid": "efcfd085-125b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/fit075kmyvo3/assets/js/0tupj6m8h3?token=jukDt3BlreIW0LfiSuS5B2ERVrpsnL7w", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772032149, "uuid": "efcfd66d-125b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/fit075kmyvo3/assets/js/gp3agts8a5?token=jukDt3BlreIW0LfiSuS5B2ERVrpsnL7w", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772032152, "uuid": "f146eff6-125b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.46.179:45429/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772032166, "uuid": "f95b7275-125b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.194.59:57095/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772032748, "uuid": "5499c7ba-125d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.109.219.240:57979/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772033416, "uuid": "e2c0da2d-125e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.26.141:39532/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772033827, "uuid": "d7d8aeb9-125f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.224.148.34/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772033829, "uuid": "d912461e-125f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.80.161.240/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772033829, "uuid": "d92256c8-125f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.13.214.114:91/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772033830, "uuid": "d9a4d74f-125f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.146.14.19:8084/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772033832, "uuid": "da7aee86-125f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.146.14.19:8083/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772033832, "uuid": "daa9071a-125f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.166.91.145:10004/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772033832, "uuid": "daab77fc-125f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.149.93.105:1483/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772033833, "uuid": "db6a1cb5-125f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://47.152.112.236:8105/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772033838, "uuid": "de4e76f0-125f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.96.104:2003/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772033848, "uuid": "e3fc94e3-125f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.174.245.185/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772033890, "uuid": "fd771e00-125f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://211.194.20.7:11550/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772033894, "uuid": "ff77f024-125f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.249.148.186:50268/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772033894, "uuid": "ffa3548c-125f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.28.107.131:47342/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772033894, "uuid": "ffeb388e-125f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.3.45.42:16245/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772033947, "uuid": "1f817eb0-1260-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://13.60.199.136:8888/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772033948, "uuid": "1fae70c3-1260-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.151.38/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772033951, "uuid": "21abecff-1260-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.246.233.154:9080/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772033952, "uuid": "22430704-1260-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.76.195.221:10000/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034019, "uuid": "4a53e86e-1260-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.27.240:49166/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034368, "uuid": "1a4082aa-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.174.195/x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034368, "uuid": "1a445d9e-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.174.195/arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034368, "uuid": "1a460c61-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.174.195/x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034368, "uuid": "1a48e2de-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.174.195/arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034368, "uuid": "1a48e483-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.174.195/spc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034368, "uuid": "1a52a4e9-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.174.195/mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034368, "uuid": "1a538b6a-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.174.195/arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034368, "uuid": "1a558a88-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.174.195/m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034368, "uuid": "1a5b7026-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.174.195/mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034368, "uuid": "1a5ee331-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.174.195/bash.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034368, "uuid": "1a5ee42d-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.174.195/sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034368, "uuid": "1a667cf6-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.174.195/arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034429, "uuid": "3e97db89-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://img.ipxxxx.com/spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034430, "uuid": "3eec2b16-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://img.ipxxxx.com/x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034430, "uuid": "3eed6c45-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://img.ipxxxx.com/mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034430, "uuid": "3f0607c2-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://img.ipxxxx.com/sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034430, "uuid": "3f2f2995-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://img.ipxxxx.com/mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034431, "uuid": "3f7ee2ec-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://img.ipxxxx.com/bash.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034431, "uuid": "3f7f2a05-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://img.ipxxxx.com/x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034431, "uuid": "3f83234d-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://img.ipxxxx.com/m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034431, "uuid": "3f910bd1-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://fenbushijujuefuwu.com/arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034431, "uuid": "3f9644c3-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://fenbushijujuefuwu.com/arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034431, "uuid": "3f965664-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://fenbushijujuefuwu.com/arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034431, "uuid": "3fa10e78-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://fenbushijujuefuwu.com/m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034431, "uuid": "3fa48341-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://fenbushijujuefuwu.com/sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034431, "uuid": "3fb95a4b-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://fenbushijujuefuwu.com/mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034431, "uuid": "3fbb6f8e-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.174.195/debug.dbg", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034431, "uuid": "3fc0b53d-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://fenbushijujuefuwu.com/x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034431, "uuid": "3fc83e4b-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://fenbushijujuefuwu.com/bash.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034431, "uuid": "3fd00411-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://fenbushijujuefuwu.com/spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034431, "uuid": "3fd35068-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://img.ipxxxx.com/arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034431, "uuid": "3fd3f908-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.174.195/ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034431, "uuid": "3fd46e96-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://img.ipxxxx.com/debug.dbg", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034431, "uuid": "3fe16989-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://img.ipxxxx.com/ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034431, "uuid": "3fe36257-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://fenbushijujuefuwu.com/arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034431, "uuid": "3fe7833a-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://fenbushijujuefuwu.com/x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034431, "uuid": "3fe7e9a1-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://fenbushijujuefuwu.com/ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034431, "uuid": "3fe8e3fc-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://fenbushijujuefuwu.com/debug.dbg", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034431, "uuid": "3feb918b-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://img.ipxxxx.com/arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034431, "uuid": "3fec6e7d-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://img.ipxxxx.com/arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772034431, "uuid": "3fed10d6-1261-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://img.ipxxxx.com/arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035329, "uuid": "56b7927e-1263-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://fenbushijujuefuwu.com/mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035329, "uuid": "570dd3c9-1263-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.236/sora.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035329, "uuid": "57224507-1263-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.236/bins/ARM6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035329, "uuid": "57286607-1263-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.95.235/w.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035331, "uuid": "583a3a00-1263-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.236/bins/MIPSLE", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035331, "uuid": "58546f9a-1263-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.236/bins/PPC64LE", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035331, "uuid": "58597e4d-1263-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.236/bins/ARM64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035332, "uuid": "58d22a0f-1263-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://proxyzabc.zabc.net/bins/ARM6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035332, "uuid": "58eddbba-1263-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://proxyzabc.zabc.net/sora.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035333, "uuid": "59370051-1263-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.236/bins/ARM7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035333, "uuid": "59377feb-1263-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.236/bins/x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035333, "uuid": "59708bf5-1263-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://proxyzabc.zabc.net/bins/ARM64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035335, "uuid": "5a3ee199-1263-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.236/bins/x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035335, "uuid": "5a431ba0-1263-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://proxyzabc.zabc.net/bins/ARM7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035336, "uuid": "5b2df93f-1263-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.236/bins/PPC64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035336, "uuid": "5b2f7ccc-1263-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.236/bins/ARM5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035337, "uuid": "5bab4b24-1263-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://proxyzabc.zabc.net/bins/PPC64LE", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035337, "uuid": "5bc27274-1263-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://proxyzabc.zabc.net/bins/MIPS", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035337, "uuid": "5bc295bf-1263-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://proxyzabc.zabc.net/bins/x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035337, "uuid": "5be81d04-1263-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://proxyzabc.zabc.net/bins/PPC64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035337, "uuid": "5bf6a2e1-1263-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://proxyzabc.zabc.net/bins/ARM5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035338, "uuid": "5c2fef01-1263-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://proxyzabc.zabc.net/bins/x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035338, "uuid": "5c338a57-1263-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://proxyzabc.zabc.net/bins/MIPSLE", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035338, "uuid": "5c86a34c-1263-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.26.141:39532/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035339, "uuid": "5cd7e13c-1263-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.236/bins/MIPS64LE", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035340, "uuid": "5d72a337-1263-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.236/bins/MIPS64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035341, "uuid": "5df5ff73-1263-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.236/bins/riscv64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035341, "uuid": "5e255d3c-1263-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.236/bins/s390x", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035341, "uuid": "5e33c14a-1263-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://proxyzabc.zabc.net/bins/riscv64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035341, "uuid": "5e33e08d-1263-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://proxyzabc.zabc.net/bins/MIPS64LE", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035341, "uuid": "5e4a81fc-1263-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://proxyzabc.zabc.net/bins/s390x", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035341, "uuid": "5e4ed145-1263-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://proxyzabc.zabc.net/bins/MIPS64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035386, "uuid": "78ad60f1-1263-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.248.236/bins/MIPS", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772035519, "uuid": "c8290f1d-1263-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.27.240:49166/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772036057, "uuid": "0920b9dd-1265-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.156.237:60196/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772036597, "uuid": "4a8771fc-1266-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.123.38.33:46854/Mozi.7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772037316, "uuid": "f76b2f48-1267-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.42.151:46888/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772037909, "uuid": "58dd1bbd-1269-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.156.237:60196/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772037911, "uuid": "59c64a49-1269-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.232.31:34864/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772037979, "uuid": "82803144-1269-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.148.160:35443/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772038927, "uuid": "b7b9bb9e-126b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.65.202:42087/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772039298, "uuid": "946b4eb9-126c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.42.151:46888/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772039298, "uuid": "947ea187-126c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.106.185:49208/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772039478, "uuid": "ffa5e06e-126c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.65.202:42087/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772039772, "uuid": "af09c27f-126d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.197.209:51502/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772039898, "uuid": "f9fcbda9-126d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.148.160:35443/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772040140, "uuid": "8ab4c764-126e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.197.209:51502/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772040795, "uuid": "11110426-1270-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.45.161:35796/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772041210, "uuid": "08188116-1271-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.45.161:35796/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772041345, "uuid": "58a5bc47-1271-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.85.20:59435/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772041398, "uuid": "7812baf2-1271-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.112.162:52039/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772041697, "uuid": "2a942d84-1272-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.73.110:37218/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772041867, "uuid": "8fee7bb0-1272-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://vxnrtubh.primefusion.digital/?=check&&actmn=IvaXiBkoJPPFJoae", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772041926, "uuid": "b2cdc21b-1272-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://allcheat.netlify.app/pmExecuter.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772041933, "uuid": "b70169bc-1272-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.176.79.188:8080/file/RateConf.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772041937, "uuid": "b96db864-1272-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.176.79.188:8080/file/Order.exe", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772041937, "uuid": "b979cfdc-1272-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.176.79.188:8080/file/usa.confirm.exe", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772041937, "uuid": "b9cdf00d-1272-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://lunts.hollower.sbs/LunX.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: lunex", "colour": "#cb4cba", "exportable": true, "hide_tag": false }, { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false }, { "name": "pw-lunex", "colour": "#A9A8CD", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772041944, "uuid": "bd92dd15-1272-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.176.79.188:8080/file/Confirm.support.exe", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772041944, "uuid": "bd974475-1272-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.176.79.188:8080/file/RateConfirm.exe", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772041944, "uuid": "bdc11fdd-1272-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.176.79.188:8080/file/us.gov.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772041989, "uuid": "d8e279ab-1272-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.176.79.188:8080/file/Net_view.exe", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772041990, "uuid": "d94fc155-1272-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.176.79.188:8080/file/RateConfirmation.exe", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772042001, "uuid": "dffab559-1272-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.112.26:51860/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772042831, "uuid": "ce5fc9f6-1274-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.36.105:41985/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772043091, "uuid": "697ec8b9-1275-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.1.254:43623/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772043316, "uuid": "ef90b52a-1275-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.193.219:38872/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772043436, "uuid": "373a92f2-1276-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.73.110:37218/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772043496, "uuid": "5acd23bb-1276-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.112.26:51860/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772043558, "uuid": "7f9dac78-1276-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.193.219:38872/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772043682, "uuid": "c9b8e012-1276-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.200.20:43929/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772043727, "uuid": "e47bd4d4-1276-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.66.116:40796/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772043727, "uuid": "e4ac4e92-1276-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.223.10:42693/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772043729, "uuid": "e5aa43af-1276-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.200.20:43929/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772043857, "uuid": "320c3b34-1277-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.223.10:42693/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772044038, "uuid": "9debe677-1277-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.8.112:33726/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772044576, "uuid": "ded965be-1278-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.113.141:53540/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772044638, "uuid": "03778d3b-1279-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.195.254:56402/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772044756, "uuid": "4a0215a0-1279-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.113.141:53540/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045122, "uuid": "240f0875-127a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.138.133.115:60052/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045302, "uuid": "8f9dde79-127a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://108.168.10.70:38707/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045359, "uuid": "b13b78ef-127a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.58.121/armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045359, "uuid": "b13cb66e-127a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.58.121/armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045359, "uuid": "b13cbcac-127a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.58.121/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045359, "uuid": "b13cbed5-127a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.58.121/i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045359, "uuid": "b13cc0f8-127a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.58.121/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045359, "uuid": "b13e96bf-127a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.58.121/armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045359, "uuid": "b13f5c86-127a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.58.121/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045359, "uuid": "b145f58c-127a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.58.121/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045359, "uuid": "b14eba6a-127a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.58.121/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045359, "uuid": "b14fe6ff-127a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.222.30.227/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045359, "uuid": "b1525d2b-127a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.222.30.227/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045359, "uuid": "b152a444-127a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.222.30.227/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045359, "uuid": "b15cd08d-127a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.58.121/i586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045359, "uuid": "b1602a6a-127a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.222.30.227/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045359, "uuid": "b1602e7f-127a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.222.30.227/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045359, "uuid": "b160731f-127a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.222.30.227/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045359, "uuid": "b162ca74-127a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.222.30.227/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045359, "uuid": "b167ee60-127a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.222.30.227/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045359, "uuid": "b1718140-127a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.222.30.227/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045410, "uuid": "cfde7465-127a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.58.58.121/powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045586, "uuid": "38c4cdd8-127b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.8.112:33726/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045719, "uuid": "87ae66ac-127b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.236.97:60119/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772045958, "uuid": "168ad541-127c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.236.97:60119/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772046068, "uuid": "57fb58fd-127c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.195.254:56402/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772046320, "uuid": "ee42671c-127c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.58.184:38797/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772046926, "uuid": "575c8923-127e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://108.168.10.70:38707/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772047350, "uuid": "53c37c68-127f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.247.138.83:56861/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772048424, "uuid": "d43192e9-1281-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.237.248:50400/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772048721, "uuid": "857e6a6e-1282-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.247.138.83:56861/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772048960, "uuid": "13ed6973-1283-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.63.56:59084/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772050032, "uuid": "92dac36f-1285-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8068616748/6EcOWEu.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772050267, "uuid": "1ee155f8-1286-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.196.41.180/x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772050386, "uuid": "65b5eb6b-1286-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8134698822/vFafkFr.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772050467, "uuid": "95b0e94b-1286-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.138.133.115:60052/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772050629, "uuid": "f62f1cf6-1286-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.89.97.23/bins/arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772050629, "uuid": "f6329056-1286-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.89.97.23/bins/arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772050629, "uuid": "f6331e8f-1286-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.89.97.23/bins/m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772050629, "uuid": "f633218a-1286-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.89.97.23/bins/sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772050629, "uuid": "f6332388-1286-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.89.97.23/bins/x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772050629, "uuid": "f63323c5-1286-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.89.97.23/bins/arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772050629, "uuid": "f63a1c9f-1286-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.89.97.23/bins/mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772050629, "uuid": "f63c815e-1286-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.89.97.23/bins/spc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772050629, "uuid": "f641e52c-1286-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.89.97.23/bins/mipsel", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772050629, "uuid": "f6513d25-1286-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.89.97.23/bins/arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772050629, "uuid": "f66433ed-1286-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.89.97.23/bins/ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772050686, "uuid": "18608de8-1287-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.89.97.23/bins/x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772050823, "uuid": "6a1ed61e-1287-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.63.56:59084/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772050867, "uuid": "845df093-1287-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://nmgm-nmm.vip/bins/arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772050867, "uuid": "8465c902-1287-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.235.116.139/bins/mipsel", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772050867, "uuid": "8465f7e7-1287-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.235.116.139/bins/x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772050867, "uuid": "8469ad16-1287-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://nmgm-nmm.vip/bins/arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772050867, "uuid": "8469b20c-1287-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://nmgm-nmm.vip/bins/arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772050867, "uuid": "8469bebe-1287-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://nmgm-nmm.vip/bins/mipsel", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772050867, "uuid": "8471d692-1287-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://nmgm-nmm.vip/bins/ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772050867, "uuid": "848a3314-1287-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://nmgm-nmm.vip/bins/x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772050869, "uuid": "85927ee4-1287-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://nmgm-nmm.vip/bins/mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772050869, "uuid": "85a2862b-1287-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://nmgm-nmm.vip/bins/spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772050869, "uuid": "85a28895-1287-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://nmgm-nmm.vip/bins/arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772050869, "uuid": "85a289b1-1287-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://nmgm-nmm.vip/bins/x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772050869, "uuid": "85ad7852-1287-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://nmgm-nmm.vip/bins/m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772050869, "uuid": "85b43623-1287-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://nmgm-nmm.vip/bins/s.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772050869, "uuid": "85bab7b6-1287-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://nmgm-nmm.vip/bins/sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772050988, "uuid": "ccb37940-1287-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.107.41.238:808/download.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772051029, "uuid": "e4da9d45-1287-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.107.41.238:808/linux_mipsel", "Tag": [ { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772051035, "uuid": "e86037d9-1287-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.107.41.238:808/linux_ppc64el", "Tag": [ { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772051036, "uuid": "e8f02f05-1287-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.107.41.238:808/linux_mips64el_softfloat", "Tag": [ { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772051036, "uuid": "e8f030e5-1287-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.107.41.238:808/linux_386", "Tag": [ { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772051037, "uuid": "e9e02661-1287-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.107.41.238:808/linux_amd64", "Tag": [ { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772051038, "uuid": "ea075771-1287-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.107.41.238:808/linux_mips64", "Tag": [ { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772051041, "uuid": "ebc1c56d-1287-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.107.41.238:808/linux_arm7", "Tag": [ { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772051042, "uuid": "ec5a790e-1287-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.107.41.238:808/linux_mips_softfloat", "Tag": [ { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772051042, "uuid": "ec5a9435-1287-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.107.41.238:808/linux_mips64el", "Tag": [ { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772051042, "uuid": "ec7df227-1287-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.107.41.238:808/linux_mips64_softfloat", "Tag": [ { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772051042, "uuid": "ec8546a7-1287-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.107.41.238:808/linux_arm5", "Tag": [ { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772051042, "uuid": "ec951fb3-1287-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.107.41.238:808/linux_ppc64", "Tag": [ { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772051042, "uuid": "ecb01653-1287-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.107.41.238:808/linux_arm64", "Tag": [ { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772051042, "uuid": "ecc6b41f-1287-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.107.41.238:808/linux_mips", "Tag": [ { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772051042, "uuid": "ece3ce09-1287-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.107.41.238:808/linux_arm6", "Tag": [ { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772051055, "uuid": "f455b901-1287-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.107.41.238:808/linux_mipsel_softfloat", "Tag": [ { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772051060, "uuid": "f7534666-1287-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.182.211:25196/el", "Tag": [ { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772053089, "uuid": "b0e7b0ec-128c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/st1xres/Xeno-Executor/raw/refs/heads/main/Xeno.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772053446, "uuid": "85780db1-128d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/kotobubu/kotobubu.github.io/raw/refs/heads/main/sinapic/kotobubu_github_io_gaud.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772053630, "uuid": "f3739681-128d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.203.228:42179/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772053630, "uuid": "f3783b6a-128d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.165.141:47408/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772055139, "uuid": "76b69cac-1291-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.165.141:47408/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772055309, "uuid": "dc314f1a-1291-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/szenoky/app/raw/refs/heads/main/Application.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772055851, "uuid": "1f27731f-1293-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.161.131:35367/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772055912, "uuid": "43766a5d-1293-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.191.111:45932/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772056454, "uuid": "86413524-1294-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.237.248:50400/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772056566, "uuid": "c964d20f-1294-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/zombieworldv3/tools/refs/heads/main/Application.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772056748, "uuid": "35d7e435-1295-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/kgssss7342/Launcher/raw/refs/heads/main/Application.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772056812, "uuid": "5bfabe1b-1295-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/utwb0/app/raw/refs/heads/main/Application.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772056866, "uuid": "7c34d7ec-1295-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7782139129/uGBzsmr.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772056934, "uuid": "a4494eaa-1295-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/bebasmaingta5-rgb/Load/releases/download/lol/loader.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772057165, "uuid": "2e3e66fa-1296-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://13nq2ksp.lunarbridge.digital/?=check&&actmn=eAgRfIrSvsPSjmzE", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772057229, "uuid": "545017c3-1296-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/flowwysh/Swift-Executor/raw/refs/heads/main/Swift.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772057414, "uuid": "c26f5315-1296-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.162.91:34858/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772057527, "uuid": "05e1a3ea-1297-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/alexandr300314-prog/subVerison_GTAV_Hack/raw/refs/heads/main/subVersion/d3d9/GTA_Verison_sub_Hack_2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772057527, "uuid": "0606ad08-1297-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7260582679/YOaxz85.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772057586, "uuid": "292a15b9-1297-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.191.111:45932/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772057592, "uuid": "2c8d941d-1297-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.242.7:35118/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772057707, "uuid": "715239c0-1297-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/LoicCabrel/YimMenuV2/raw/refs/heads/main/sighter/Yim_Menu_1.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772057826, "uuid": "b8746b64-1297-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Mohamed45508/yimmenu-v2/raw/refs/heads/main/potlike/yimmenu-v-v3.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772058067, "uuid": "47e6fcd6-1298-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/PrankHimJohn/gta-v-launcher/raw/refs/heads/main/naegates/launcher_gta_v_3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772058077, "uuid": "4e140c85-1298-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.161.142:51528/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772058444, "uuid": "2879e478-1299-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.201.105:49048/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772058560, "uuid": "6d99308e-1299-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/haver2000e/silent-gaming/releases/download/24-02-2026/Silent_Utility_v4.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772058790, "uuid": "f6c5e06d-1299-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/1059287883/h6hzsEK.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772059042, "uuid": "8cf58428-129a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.35.89:46489/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772059270, "uuid": "14b2d2c8-129b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.242.7:35118/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772059394, "uuid": "5f158d2c-129b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.35.89:46489/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772059450, "uuid": "80018f26-129b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/driptch/Silentum-Spoofer/raw/refs/heads/main/Silentum_Spoofer.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772059628, "uuid": "ea8053f2-129b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/hand1eey/Silentum-Spoofer/raw/refs/heads/main/Silentum_Spoofer.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772059691, "uuid": "0fa9c914-129c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.89.166:40270/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772059691, "uuid": "0fc0e6ea-129c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.221.11:46630/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772059691, "uuid": "0fef2879-129c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/rocketblow/Silentum-Spoofer/raw/refs/heads/main/Silentum_Spoofer.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772059808, "uuid": "55b052ad-129c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/imllm1sy/Silentum-Spoofer/raw/refs/heads/main/Silentum_Spoofer.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772059811, "uuid": "572a121b-129c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/sh1nneu/FiveM-Spoofer/raw/refs/heads/main/CFXBypass.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772059867, "uuid": "78959250-129c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.221.11:46630/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772060651, "uuid": "4bd94ab9-129e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/v1tterys/Silentum-Spoofer/raw/refs/heads/main/Silentum_Spoofer.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772060651, "uuid": "4c07dd1f-129e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://temp.sh/NVZYN/Pulsar-Client.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772060651, "uuid": "4c50455f-129e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/l1ssh/Silentum-Spoofer/raw/refs/heads/main/Silentum_Spoofer.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772060711, "uuid": "6fbb6818-129e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/en1lys/Silentum-Spoofer/raw/refs/heads/main/Silentum_Spoofer.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772060772, "uuid": "940243dc-129e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/l1nfitss/Silentum-Spoofer/raw/refs/heads/main/Silentum_Spoofer.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772060828, "uuid": "b5c7adc6-129e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/crann1ys/FiveM-Spoofer/raw/refs/heads/main/CFXBypass.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772060830, "uuid": "b673bee4-129e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/rtsh1/Silentum-Spoofer/raw/refs/heads/main/Silentum_Spoofer.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772060832, "uuid": "b7dcb944-129e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/hatass99/FiveM-Spoofer/raw/refs/heads/main/CFXBypass.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772060832, "uuid": "b7e1dbfa-129e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/t1llnigh/Silentum-Spoofer/raw/refs/heads/main/Silentum_Spoofer.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772060959, "uuid": "03dddec5-129f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.55.69:55385/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772061008, "uuid": "20f1b1e8-129f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/kailcee/Silentum-Spoofer/raw/refs/heads/main/Silentum_Spoofer.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772061011, "uuid": "22d8c65d-129f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/chamm1kl/FiveM-Spoofer/raw/refs/heads/main/CFXBypass.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772061065, "uuid": "42c4fec0-129f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/6260748665/9C541tm.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772061259, "uuid": "b64f7916-129f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.55.69:55385/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772061310, "uuid": "d4a80356-129f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/kotobubu/roblox-executor/raw/refs/heads/main/tertiarian/roblox_executor_1.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772061857, "uuid": "1ab81beb-12a1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.145.20:51822/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772061918, "uuid": "3f5c71fb-12a1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.222.146.126:46278/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772062097, "uuid": "aa16b7be-12a1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.145.20:51822/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772062456, "uuid": "7fce7576-12a2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.148.23:35468/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772062520, "uuid": "a6473517-12a2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.148.23:35468/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772062638, "uuid": "ec63b966-12a2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.222.146.126:46278/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772063119, "uuid": "0b38f98b-12a4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.130.227:41822/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772063590, "uuid": "23cec5d7-12a5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.242.56:39363/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772063658, "uuid": "4c4e8461-12a5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.188.172:34645/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771981806, "uuid": "b8f253b3-11e6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.225.24.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772033945, "uuid": "1e1ad0b7-1260-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "106.246.233.154", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772039764, "uuid": "aa976762-126d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.38.197.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772059685, "uuid": "0c219bef-129c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.38.221.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772043064, "uuid": "59262077-1275-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.1.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771996924, "uuid": "ec0ec584-1209-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.103.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772045105, "uuid": "19e9134e-127a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.138.133.115", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772033825, "uuid": "d6a15054-125f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.174.245.185", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772061906, "uuid": "37c9af7f-12a1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.222.146.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771989244, "uuid": "0a2502ea-11f8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.71.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772007785, "uuid": "35735af1-1223-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.222.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772053624, "uuid": "ef9fd2af-128d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.54.165.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772003885, "uuid": "20dc4cc2-121a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.59.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772044563, "uuid": "d70ae9b5-1278-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.113.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772061845, "uuid": "13b0b159-12a1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.145.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772037963, "uuid": "79050aa0-1269-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.148.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772041984, "uuid": "d5b3a5af-1272-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.112.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772041325, "uuid": "4cad0b3a-1271-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.85.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772042825, "uuid": "cafa83de-1274-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.36.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771994645, "uuid": "9d1b826c-1204-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.22.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772033825, "uuid": "d6a113c1-125f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.96.104", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771998125, "uuid": "b7711b9d-120c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.89.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771992665, "uuid": "00f39184-1200-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.224.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772025844, "uuid": "418b0bc6-124d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.178.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772050986, "uuid": "cb443c19-1287-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.107.41.238", "Tag": [ { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772028364, "uuid": "1fb212e4-1253-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.115.74.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772003406, "uuid": "034d8714-1219-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.179.238.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772015464, "uuid": "16b990c6-1235-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.185.169.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772033825, "uuid": "d6a1403c-125f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.149.93.105", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771991824, "uuid": "0bfa25d1-11fe-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.52.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772057584, "uuid": "27cb78dc-1297-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.242.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771982224, "uuid": "b22f2d76-11e7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.79.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772003885, "uuid": "20dc4820-121a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.221.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772057405, "uuid": "bd3f9afd-1296-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.131.162.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771992784, "uuid": "4831cc90-1200-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.135.153.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772016785, "uuid": "29f07b11-1238-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.230.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772033405, "uuid": "dc4ab4ef-125e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.42.26.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772037305, "uuid": "f0fbb2a3-1267-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.42.42.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772062445, "uuid": "79159266-12a2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.148.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772014084, "uuid": "e00caf7a-1231-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.108.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772048945, "uuid": "0a82ee15-1283-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.63.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772033945, "uuid": "1e1b1415-1260-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "13.60.199.136", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771999624, "uuid": "352d3feb-1210-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "134.199.219.57", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772057163, "uuid": "2d224207-1296-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "13nq2ksp.lunarbridge.digital" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772045344, "uuid": "a82cab81-127a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "154.222.30.227", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034364, "uuid": "17dfaf8e-1261-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "156.226.174.195", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772050625, "uuid": "f3fd44c4-1286-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "159.89.97.23", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771982884, "uuid": "3b5d8d46-11e9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.148.133.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772043665, "uuid": "bf5d98c1-1276-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.148.200.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772059685, "uuid": "0c218d33-129c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.149.89.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772041684, "uuid": "22a35177-1272-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.73.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772018285, "uuid": "a7bf91e7-123b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.167.251.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772039284, "uuid": "8c58370f-126c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.173.106.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772033884, "uuid": "f9e781a7-125f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.249.148.186", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771982944, "uuid": "5f50b800-11e9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.141.153.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771990084, "uuid": "ff17f138-11f9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.115.228.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772011206, "uuid": "2c9b53af-122b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.114.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771994824, "uuid": "082e7e2e-1205-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.39.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772013244, "uuid": "eb61ba53-122f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.62.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772048405, "uuid": "c90a73d1-1281-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.237.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772027584, "uuid": "4ec90efe-1251-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.47.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772047324, "uuid": "447cce97-127f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.247.138.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772033825, "uuid": "d6a139f0-125f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.166.91.145", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771994706, "uuid": "c17b973d-1204-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.96.88.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772041924, "uuid": "b21e55e9-1272-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "213.176.79.188", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772060945, "uuid": "fb033ed2-129e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.55.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771990863, "uuid": "cf28af00-11fb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.202.90.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772055906, "uuid": "3f9ccd92-1293-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.191.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772025907, "uuid": "670fb49e-124d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.136.33.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771983966, "uuid": "bffa4e1d-11eb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.183.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772045704, "uuid": "7f372173-127b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.236.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772032025, "uuid": "a57638bd-125b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.182.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772026144, "uuid": "f4499c29-124d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.182.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772006107, "uuid": "4d0ca808-121f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.183.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772009763, "uuid": "d077d187-1227-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.79.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772045344, "uuid": "a82dfdee-127a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.58.58.121", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772033945, "uuid": "1e1ae1cf-1260-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "38.76.195.221", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772012764, "uuid": "cd2813ed-122e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.61.38.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772033825, "uuid": "d6a05b99-125f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "41.146.14.19", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772032144, "uuid": "ecc0983f-125b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.194.59", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772044624, "uuid": "fb345cdd-1278-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.195.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772058424, "uuid": "1cc095b8-1299-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.201.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771995185, "uuid": "df124d34-1205-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.73.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772053624, "uuid": "ef9fde6c-128d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.203.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772063584, "uuid": "203efdec-12a5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.242.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002205, "uuid": "376cbd88-1216-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.32.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034006, "uuid": "424ba541-1260-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.27.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771990505, "uuid": "fa0b25ad-11fa-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.44.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771999865, "uuid": "c4acfa48-1210-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.70.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772037906, "uuid": "56b04d32-1269-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.232.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772055844, "uuid": "1b150970-1293-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.161.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772005144, "uuid": "0f9012be-121d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.53.39.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771995964, "uuid": "afc4acd6-1207-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.7.129.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771991644, "uuid": "a0b43df6-11fd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.142.107.217", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771999624, "uuid": "352d39c3-1210-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.89.52.41", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772033825, "uuid": "d6a0cc1a-125f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "47.152.112.236", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771996924, "uuid": "ec0ea0f5-1209-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.101.213.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771984985, "uuid": "1fb2bad0-11ee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.221.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772033884, "uuid": "f9e7ba0b-125f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.3.45.42", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772014445, "uuid": "b6fdc515-1232-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.42.91.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772018045, "uuid": "18d5a5ca-123b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.139.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771978506, "uuid": "09911776-11df-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.211.47.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771998724, "uuid": "1cd48818-120e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.162.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772019605, "uuid": "bac425d1-123e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.236.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772038925, "uuid": "b62a506e-126b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.65.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772005085, "uuid": "ebe4fa48-121c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.150.154", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771980484, "uuid": "a4ddb71d-11e3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.196.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772005985, "uuid": "04b2079f-121f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.91.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772028606, "uuid": "af86bdff-1253-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "6ut6sdn1.clearvertex.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772020626, "uuid": "1b193e65-1241-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "7070-ppxcx-a1-3gg5ufwp666ee644-1300076834.tcb.qcloud.la" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772002506, "uuid": "eaa18a15-1216-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.142.209.9", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772033825, "uuid": "d6a027ef-125f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.224.148.34", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772033945, "uuid": "1e1acb3e-1260-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.239.151.38", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772033825, "uuid": "d6a05549-125f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "88.13.214.114", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772033825, "uuid": "d6a1370f-125f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.80.161.240", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771989124, "uuid": "c2d1f6a2-11f7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "92.109.198.12", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772020624, "uuid": "1a4c3ccf-1241-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "aisramadan.pages.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772020624, "uuid": "1a6155b7-1241-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "esr.ro" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034425, "uuid": "3bfa9175-1261-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "fenbushijujuefuwu.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772034424, "uuid": "3bbb5f48-1261-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "img.ipxxxx.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772020626, "uuid": "1b280b99-1241-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "katz.adv.br" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772020625, "uuid": "1a862244-1241-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "kurulum.online" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772041928, "uuid": "b40dd137-1272-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "lunts.hollower.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772050865, "uuid": "830a3648-1287-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "nmgm-nmm.vip" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772041865, "uuid": "8ebc3a2b-1272-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "vxnrtubh.primefusion.digital" } ] } }