{ "Event": { "published": true, "date": "2025-01-14", "threat_level_id": 2, "info": "URLhaus IOCs for 2025-01-14", "timestamp": 1736899394, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "7a9e7172-44f9-4138-98b0-f99386a75aa2", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef35a48b-d20a-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736812987, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812987, "uuid": "7c8dbaf0-4818-4890-aa6f-6f43e183256e", "comment": "Malware payload", "value": "84e08c58e019f352e5ed58b4b625c35a", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812987, "uuid": "8138381c-11a2-4eb7-ab9a-3350b840bf99", "comment": "Malware payload", "value": "382d4db78d154a8c67764c86fc6a9cebc60574a843c882dee199ae9ebd7a070b", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812987, "uuid": "10c8db79-7dab-482b-8b60-32a3cf925afe", "value": "T19534F0771F9905A0E3359C13622E589DEE0D0A4EF8E82C9BECB331577AD1847F9062", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812987, "uuid": "0ae74f03-94fc-46be-9f7d-259b02522b0b", "value": "6144:/B56DsgHzFxL3B87YVpqVAy8z0vSNlc/iaNXhZmfEL8B:qHxxzBEYzqVA5OulyXh8c8B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736812987, "uuid": "e462b757-2d47-4689-a991-c1e3b1a3840e", "value": 247894, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812987, "uuid": "4c670ecc-173e-4d74-bd9f-6b0b4875fbbd", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1736812988, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812988, "uuid": "a889a345-e19f-4fde-89e1-878f57bfefb5", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812988, "uuid": "05a29ad4-570d-4351-a9d3-d5fb68afc38d", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812988, "uuid": "4554c61f-9971-483a-9fb9-3e84dc8ad461", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812988, "uuid": "1a07cc83-a220-439a-a4b5-9e4e95b67ea1", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736812988, "uuid": "989d7018-deb8-4249-8bda-09c886767b9e", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f07b078f-d20a-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736812989, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812989, "uuid": "a6685656-4221-4acb-8d12-76fd6b4dc876", "comment": "Malware payload", "value": "885ec5a823953733463cf52dea650300", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812989, "uuid": "f190623d-0ca8-4a74-ac3e-240e05e1ada3", "comment": "Malware payload", "value": "aceaf1e09c7488ea577f7e5dfac610b7f245566169476bb555485710954bce80", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812989, "uuid": "77668437-d1cf-414a-8d26-d2cb60e693be", "value": "T11624AD18CE0227C9CA51649C4FF9296774CD768A254AF8E711EEBE672460C1F8EE07", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812989, "uuid": "2fcc9e89-81c2-440c-89f5-c28682eb7a09", "value": "6144:eC2jt1VUuyaciZ6FokrB1uX9NLTPEICY5h:InnT6NnwXp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736812989, "uuid": "329d8d35-dcd3-4e42-bc42-f9ccc391ead1", "value": 223312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812989, "uuid": "d979c8e8-ac97-4d9f-b34b-4d47e001d900", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f093e31a-d20a-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736812989, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812989, "uuid": "ce1d0292-df1a-4d7e-9fee-79492a96a7d6", "comment": "Malware payload", "value": "a85b9709a70884fb44f01958b2435038", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812989, "uuid": "5d9cb38e-b265-45ef-a409-c9ab2b30e80b", "comment": "Malware payload", "value": "d6ba4e227188d3a4140dedb58a6ef051510a40202425b7fc0473c06336041a90", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812989, "uuid": "f789a426-01d3-48ba-ae97-39bd15344f8a", "value": "T16334CFA461F832716125A27DCED4D48FBA74AC4A405A37BFCB52B6C0E2684691D43F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812989, "uuid": "7363a1a9-2a91-4d9f-a21a-6c38f5f8af6f", "value": "6144:/WRvYJssBoswWYEPQyhuZJ6povn06perwoRVRFG1W8n:/WRmssWLqhuZspSnNoBFGQA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736812989, "uuid": "a93451f4-8ea9-40bc-9022-1446d373d1aa", "value": 239694, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812989, "uuid": "32046061-87d2-41c3-aa8a-f5800b3cd9f2", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f09c572b-d20a-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736812990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812990, "uuid": "7ce7ef52-062a-466f-92ca-d4e1338a2e07", "comment": "Malware payload", "value": "08b2c7e13593c46bb8f107a9d9ba69f5", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812990, "uuid": "43f4d2ea-813c-40ac-b238-d3a753697cff", "comment": "Malware payload", "value": "803355669fbd5b6d67aa7f6ef07144ed2ec587e4476981386e9127d792ac6ed6", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812990, "uuid": "0dde6d7a-d16c-44be-85a7-055e0bd7fd81", "value": "T1FA24E0BD29E02F6580E492FD9654F85E44361520334CAF3E735861F76C387496AFBC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812990, "uuid": "15944c15-e1b9-4efb-9fa9-5666d4ea664d", "value": "3072:zioP2SmKXuunLIJyoNoMIC1GfGMAcPJ/FFCUhBxCGqEITH1+WO4kAsqF:z935VLSyJCGtHIaBxC7RMqF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736812990, "uuid": "ea6f0a06-e507-4e7f-8d17-e989628908a2", "value": 213063, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812990, "uuid": "d18376a3-11ea-406d-9abc-b59a674886ec", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a05aa6-d20a-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736812990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812990, "uuid": "d548a798-ec01-4162-911e-e0ed51c3ca10", "comment": "Malware payload", "value": "99fb7adc00bc8a895c8e9101a48343c4", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812990, "uuid": "40e3b14c-9da4-44f6-a4f2-292fbfc5341d", "comment": "Malware payload", "value": "e59e77ddb1b9840210791978b86408222e8baf01052b151155edd7c87d97b92b", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812990, "uuid": "aa0ed0d7-6d38-4cb0-bef9-bbdb11d4acaf", "value": "T1C314DF04B6E268FAAD27DD1F192AC311FB7644A45E9CDF3622087CDB15E88C5374E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812990, "uuid": "12d11120-2bdb-488a-bac5-0e73d8a4b7c2", "value": "3072:P23eAN8wc8MQ1UIAwS6lHKsgVm+7Bu9qQHyTFojFzUoy9CUQV9VAm:P231ewc8bRAz4cm7puSzPu29R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736812990, "uuid": "0ba54960-5e7b-4658-b8b4-15a67b524ec6", "value": 208970, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812990, "uuid": "46f9d61d-795a-447d-ade9-a90e1b3bb5b5", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a7a502-d20a-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736812990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812990, "uuid": "943e7917-62e4-4b30-889c-7afe620bfc92", "comment": "Malware payload", "value": "b1d36d3ec44717365908797640590e1f", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812990, "uuid": "6b4442ca-b1a6-4a0d-a9f7-3a8d796b596e", "comment": "Malware payload", "value": "f1a268ad804674b634dbb353f5ab5dad4af7bf87a7cdcdf78843a2b54b308ad0", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812990, "uuid": "9d97e591-6ab6-463a-a64a-363daffcd43e", "value": "T14934E06C9681E4BECFDDE1A535842BFD0A412DC6E7CBDB664B3A30F5452431E9E803", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812990, "uuid": "19005065-825c-496b-9f31-9471ade634b3", "value": "3072:Pk8C7zFb8ZL7Off7vy16v1Y+gw0L/ERDjacBh/19MCk33u+xmAWNF//r/rLwYBx+:PN6lvJrixqhHO3xmLNNTO/hnvY7e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736812990, "uuid": "4aaf4aa3-8367-4565-ab1b-9516c57bb959", "value": 247887, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812990, "uuid": "bb1b3450-6914-4e78-a08e-687fe3e9353a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0b29df9-d20a-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736812990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812990, "uuid": "da4d44eb-c30f-4290-89c2-5a7ef1bd3df8", "comment": "Malware payload", "value": "80b6522e901f4f6ce248c6e1b8bfce37", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812990, "uuid": "7e9e0774-6f2b-483c-b5e2-851049f8fd46", "comment": "Malware payload", "value": "d65643a072fa94ff862b70c20816501a8ca11675bd761027a59d45dce8382301", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812990, "uuid": "965922a5-94ea-4e58-a2a2-b74ed2b7858e", "value": "T10324D01F8146ED0A31C50D188691D8CCA5B3320DFDB4670E314A056EEB46BFADEDE6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812990, "uuid": "780a3b6e-10a8-4e45-9a46-4460d6bc702e", "value": "6144:m85+akhcYZMKMeh7OkXKjfscsVunghn//sPloCcuR/Wmx9kerU3:CaWLWKHh7Ok6jUcden/eloLuR/Xm0Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736812990, "uuid": "a462f878-0628-4c91-bd90-46a102476a9f", "value": 213078, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812990, "uuid": "b1d0a1af-9f1c-44bf-9fc6-7d2251cab1d3", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0be71e5-d20a-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736812990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812990, "uuid": "ac4552d4-67a4-418f-a809-476355b31039", "comment": "Malware payload", "value": "34465f037ab844289d614311515d79dc", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812990, "uuid": "991e8cbb-8de8-4011-9912-32edb68d472e", "comment": "Malware payload", "value": "1d86f09474fe988bd4d5c1978be6f11fd7a45e8a0fffd6bd6019e561ab4a067e", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812990, "uuid": "99741523-a02a-44a9-bcf1-7f67eb0a7b7b", "value": "T18424CE670061F6990D860E26BCAF2652AC513F8C492B8946CC9D5908F64DBFBFF4F3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812990, "uuid": "2be12b97-3314-42c4-987d-77ceac37c69b", "value": "3072:Ei4EPAJCLhHElea9BFGdDp0iP4VLV8HOrei4dKC5EKCpPk9ePjId8h:EiDPREga9BFGdDQVLVTaiKWKJT8h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736812990, "uuid": "10fd3413-8fc9-47c2-b409-6e693d26e705", "value": 213591, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812990, "uuid": "a54b451b-68ce-42e8-a54a-de01dd98ce50", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0bebf50-d20a-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736812990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812990, "uuid": "ebb48c60-caa2-491b-a514-30d68331f87c", "comment": "Malware payload", "value": "6a2a88024e232a35c22e97c36dfb6512", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812990, "uuid": "1ce1db81-1841-4a08-bb81-2b82390793b9", "comment": "Malware payload", "value": "bbf768882ef0002c31baf39723792b21caaac8b88e6ba20e3c586fafac0f816e", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812990, "uuid": "a0220988-9cb5-487d-903f-df00f13a3bca", "value": "T14D34E01D48A9004B92C9CB06959FBB4DD5047CB9FBEF052606CB36F18AD14B2CF679", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812990, "uuid": "328faf27-ee61-43ca-89d2-c7627a26128b", "value": "3072:qwmMZHLb+obH7OSs19Dvzrelt2Pqs1aXa/cknaiwxzq75OOGIV2dn85B8Vff2Tr2:5JLrSSs1lzreXOq0ugdN1V0zyczTe2X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736812990, "uuid": "b523370e-7b9e-471c-8478-8831cf7eac48", "value": 247896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812990, "uuid": "b2ca8baa-b153-4969-a5b4-26946fb390a2", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0c73a6f-d20a-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736812990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812990, "uuid": "ba035a5e-cc09-4e71-9d25-e24a449baecf", "comment": "Malware payload", "value": "b705eee7bc32e1afeff55fd93052728f", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812990, "uuid": "b8102dbf-e0fb-49c2-b3e4-a677164cb878", "comment": "Malware payload", "value": "2c8ebe73189c33d01f815058e6f3cad8b88750e76ec749678aba8759474f96f3", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812990, "uuid": "b915902b-4a2d-4f57-a183-2227e0b1a851", "value": "T11634CE0D8F6EE1FF230B5B50B64D88493805F909BBF891A2D6BB45D4A0E139B738B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812990, "uuid": "e675cc54-cf7c-4f18-a445-b738205fbea0", "value": "6144:BP/qUBaqRxfOuywebNqGVDLZ96ik+Q/XLoXsh:BPiUBT/9eRqGV76ikt/Xth", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736812990, "uuid": "bcb1fed3-43cc-4b64-8706-0f40b18a8979", "value": 239678, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812990, "uuid": "c2a0bdfa-f71d-4ef3-87c5-1a4cc7d5cfb6", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0c7f0dd-d20a-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736812990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812990, "uuid": "77806808-6cec-4931-a171-3a8e57cda95b", "comment": "Malware payload", "value": "c8a6134b60e78882ebefc854ef768e4a", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812990, "uuid": "85b3dd4d-1087-4579-9efe-194de1e98fe9", "comment": "Malware payload", "value": "62abbbb3238309b221da40062fd85f3a8d664e195acb7f91eec6533c75bbcb20", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812990, "uuid": "4c42b683-dfa5-44c3-8b13-e4360846580e", "value": "T1E314CEF548F98DCE34C992810FC4754823BE73E110BD5A7DEAA17F6795283C7A21AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812990, "uuid": "da2d1219-3026-499f-b602-9f565c0c0b2a", "value": "3072:Kqlmr8Qbr6IbPDzbHLIsZ8xLf7VTbk0H/Aq6a//wGEWxf1WUuhVlippKf:Kqsr86r6gDzXI1f7tbk6IG5xf1M5ipQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736812990, "uuid": "8c3b8dea-0153-48df-b8bc-922e7d399793", "value": 208962, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812990, "uuid": "557a5121-1efb-42d4-9efd-846489e670a1", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0c8b300-d20a-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736812990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812990, "uuid": "4f74d981-ef13-4c7e-baac-6939738fd1fa", "comment": "Malware payload", "value": "660314a900fd5331acbfebcdbee342cd", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812990, "uuid": "ce2dc6b0-0ed4-4a72-991a-efdd79fc85b5", "comment": "Malware payload", "value": "2ba9b293a38f32a311ac010165dd8f427d4437836c99460e1b16c237486471c2", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812990, "uuid": "95c4fb96-9d05-41cd-b1ac-e72f731b2007", "value": "T14734E0BDABD5182129CDD4F228074504FAA8A68FA76344AF60CAEF54D319777E4CB0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812990, "uuid": "d6cececa-4688-476b-8b66-ed9712ebf5a3", "value": "6144:Fc0oEyrMW7jJ5SUpi2z5BxiZ1LClXXHUHBG6FSGXo/0lJD:FSzJSUp5LOwlXXHUQKXo/0l9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736812990, "uuid": "a5a8d79f-68d7-4560-8595-a09557fbf8b7", "value": 247881, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812990, "uuid": "84bbbacf-6f60-4478-83de-db734d386079", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0d32785-d20a-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736812990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812990, "uuid": "4444be14-3f20-499d-abce-15364d5f9e3c", "comment": "Malware payload", "value": "1c80604483e829cb0312aafe32ee8280", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812990, "uuid": "0f7a8cbb-d636-4307-a35e-16fca0ff9820", "comment": "Malware payload", "value": "577af270b3b8b3cf7ef9699d8aeb109882a8a73d63d5d205b85f29de6e64dde3", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812990, "uuid": "f5d51b30-1cb6-4976-884d-7557105875f0", "value": "T11324CEBAB052354134291F2E94A04DD8840B233F41BA7FFB476E9CA650B14B3ADF97", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812990, "uuid": "ce1ec0c4-7180-42bd-b617-211280a672b2", "value": "6144:hfdprrpqNeLKZT15k+OnaNn7jjjjj3WWgA8a9:/hpBaWapGWgA8s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736812990, "uuid": "6057f304-bcf1-4d88-bad0-7296ca00e609", "value": 223324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812990, "uuid": "3535ea88-ae3c-495d-9043-0945c274f24b", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0dbcc16-d20a-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736812990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812990, "uuid": "a0a3bd98-377d-477c-9c6c-745f0ab58c3c", "comment": "Malware payload", "value": "dd6edc93c458bbd9d862e499f89514a9", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812990, "uuid": "83dc5103-69e8-4bc6-aa40-737ca79d99db", "comment": "Malware payload", "value": "5b34dacda7f055716e3cb0814c26f716338bfeba948ccd6cbce1d49647b85b10", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812990, "uuid": "25b33497-7ff2-4466-9fd9-a150f0d4358c", "value": "T1B834E1A132D52C7233C17C4DB94D22E6936E947366B4242F9609097D7F3E3E41AA6F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812990, "uuid": "0f671be0-2720-46d1-a09c-5bb17c73e183", "value": "3072:vot7mtvi4rAU/McRjtC7jjFcgPbz1PTDiIJfU3rroYIHylpfzoepUuVg+A0/whe:w8tHr7/MOjt4SY1TRSbKYfpxVg+n/ue", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736812990, "uuid": "e68b6983-59b0-4a7d-b0b0-dba38172e8ae", "value": 247875, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812990, "uuid": "e405fa14-f94d-4d00-8377-67ad267b4705", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f96594fb-d208-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736812992, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812992, "uuid": "268a1457-078b-449e-926a-68c6096d7fae", "comment": "Malware payload", "value": "ba881a7bf6bc84bbf398c8b81072c960", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "TgToxic", "colour": "#55a911", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812992, "uuid": "92f615f2-d891-489e-bece-903ed15feed5", "comment": "Malware payload", "value": "f9db77416f17886f6f72b87c49c3c84473c4afb3ecf4176fc79684b09974e4ee", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "TgToxic", "colour": "#55a911", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812992, "uuid": "364e3199-c568-4f13-a13f-d01f1d10fc70", "value": "T13336DF46F34496ADC4FAA73A8CB94D762106ACA15B83C6E37C04BBAC1DF71D40E45A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812992, "uuid": "8ab5b28e-2801-443e-97c1-a14e94dcf1e6", "value": "98304:h3mUMdkaoLKauocENCmu3eBmOSWg9Fa4M:h3mUEpauoccCmXBAFa4M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736812992, "uuid": "b649c1ae-7c21-4bf7-afef-3e63f6e94a7a", "value": 4928185, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812992, "uuid": "611794c9-55f8-4542-913c-1bf2f4cbd356", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1736813048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813048, "uuid": "a469304f-6ab1-48e7-99b5-5e3f932c8e97", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813048, "uuid": "b56c64bb-7d0b-4dfd-9766-f2e78166d762", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813048, "uuid": "8e13acc2-60da-4202-934c-5cd9cf0b424c", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813048, "uuid": "9d840d33-8057-4344-9e80-8e92ed0970b0", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736813048, "uuid": "679535c3-5eac-48e1-94e8-fc95a672c822", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1736813466, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813466, "uuid": "b6d6879c-e7b4-44db-af5a-4473c64a82ef", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813466, "uuid": "a4048845-8772-4446-aaf9-f9582ba3da3c", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813466, "uuid": "ed241128-4a10-4e50-bcff-b1c3b3b587c2", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813466, "uuid": "01429eed-feb7-445f-82a5-647e39d8e8a7", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736813466, "uuid": "073f5574-cb8f-4039-b412-b5af93c6efa3", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ea62c77-d208-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736813576, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813576, "uuid": "91660239-f80f-4d77-931a-e203a4e95555", "comment": "Malware payload", "value": "f15c4740394119e0a51d5a3ed7e5d33a", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "TgToxic", "colour": "#55a911", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813576, "uuid": "b972eb98-d5ce-4911-8a89-92b5f5b7c6de", "comment": "Malware payload", "value": "8f9e14b3fb6b2175984b5c6a870a6690cf6129c75f934224aea1a947b50470b2", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "TgToxic", "colour": "#55a911", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813576, "uuid": "75d0630b-1154-4b37-98de-1950726fb2ec", "value": "T14106BE4A7B868A5EFC7A00B24DCE5333D24B5C4A9D8382D76904F38E14B75949F8B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813576, "uuid": "876e782c-a42e-48f9-ab22-c6924bc553be", "value": "49152:pgWjwiy8VlJ1mZtso1BOM1duFr/nNebPXoLmJj+1fOGnRnJzzvv/7cj00o/2L:D1y8VlJ8B5XoIiOUfLDcjz7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736813576, "uuid": "634a4c9a-7eb8-4102-9e33-aa288ff222d5", "value": 3672588, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813576, "uuid": "563a0bfa-1f32-4db1-a2dc-d42aded4a503", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "659a869a-d209-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736813645, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813645, "uuid": "f8f0f599-5d16-44d4-84c3-f6a883bbbe39", "comment": "Malware payload", "value": "b914326be41cc3e1bc7199e525271e00", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813645, "uuid": "27dad821-06c0-436f-a5e5-1f004b13e42b", "comment": "Malware payload", "value": "d88f36319001361fa9bff2969d30e2bef7590842c32df72b47325c5f86a5e2e4", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813645, "uuid": "fc9c584b-065f-4916-8fc0-2359bdd7005f", "value": "T1C9157C8B8B72A228D5304034EDD9477531B4ACCC9C999B0A94DEF47178871F93EC9A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813645, "uuid": "fe716200-51ad-4fc8-b2a7-ac69ed6fab35", "value": "12288:205K9KVKSKhKmKkKvKXKGWYKTKtTQagKDuU:+E8n4L1yaNJW1XR6U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736813645, "uuid": "d0449fc7-7394-4365-8549-2005c56e8db4", "value": 927406, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813645, "uuid": "13ec2b01-bb46-44bd-9642-d98f39a8d29a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1736814670, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736814670, "uuid": "e375c86e-f11c-422d-9589-957064571957", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736814670, "uuid": "9c9eebe2-b383-47b1-b27f-6c5c395de150", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736814670, "uuid": "4d1cc8ff-bebd-4a62-962f-666e48be8657", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736814670, "uuid": "f399b330-1278-4558-9b2f-530f1ef4ca6e", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736814670, "uuid": "5bcdb167-ce6c-4ec4-9bbd-f1512a371cb4", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16862a84-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1736814751, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736814751, "uuid": "b481302e-b1bf-482e-9bc7-a2b3648607c2", "comment": "Malware payload", "value": "3f5605d15ff19e86b136c29857d93101", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736814751, "uuid": "aeed47b1-3ce4-4589-b129-f920ab7c5477", "comment": "Malware payload", "value": "6d1a5e0ef0615180c6cfc9e2194a82c32b7992a3ec3073547170797515422eff", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736814751, "uuid": "4ddac526-ef21-47a7-ab46-284e9b931fc6", "value": "5473121623A92971627146F1E7FE6F8CE10D3A688FF16C247C217C68B93236E5CD8519", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736814751, "uuid": "3dca01a1-5f5b-48cc-af5e-c7f96454993a", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3O:yYI0ARqw1qAEv7UIFM8oJorFquyjkRkE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736814751, "uuid": "b84b373d-f2a1-4df1-9fe4-7048c7d52d6e", "value": 73848, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6183e94d-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1736815746, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736815746, "uuid": "19441c47-a613-478d-a0db-12310d0c5fb4", "comment": "Malware payload", "value": "dbc520ea1518748fec9fcfcf29755c30", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736815746, "uuid": "ea9bcf01-75d8-423d-b134-6f6729adef1f", "comment": "Malware payload", "value": "c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736815746, "uuid": "d81aacb5-471f-4e07-9d1d-3445a55a4d3c", "value": "D2D3128AA536ED54F11B9AF11B3B99907DF5659E82F4D4A4A2CF634312CC343FA4070B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736815746, "uuid": "8bf84ddc-9bad-429f-8bcb-769928eebc5c", "value": "3072:Nc4i0agsmw3Py5CP5HM8EVLUuYtgB5H6oz:Nc/0aNPy54EVAhOae", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736815746, "uuid": "55031d72-2e49-401c-8044-49a6750652c1", "value": 132860, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e89a3634-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1736816031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736816031, "uuid": "916c162e-9401-4a7a-bffe-31ad2ce55635", "comment": "Malware payload", "value": "70af65a13a14e5deb73c31c8829dd998", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736816031, "uuid": "9bab8779-1e40-483d-aa87-25d415f077b1", "comment": "Malware payload", "value": "feacba94918d32a51ff751ae4b98e9ec5823aedd525ad283ed99653b3f23545a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736816031, "uuid": "c49669b9-3f95-4615-9dc5-ab0e3151e3ca", "value": "5923028623A63F72D52148F5D7FCEF85A14A7E94AFE5180E7C113698B07035C28C8C1E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736816031, "uuid": "2610b069-485e-41f7-98ce-72f114c1c6db", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTzEsDm1Xo0Wh:yYI0ARqw1qAEW67UIWi7M8gmfmJo0Wh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736816031, "uuid": "2827a5e2-6329-48f4-bc25-d89fe9e4a565", "value": 47784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cd1d20da-d213-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736816795, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736816795, "uuid": "8c004cf8-0a17-4215-beef-c404a14c2db2", "comment": "Malware payload", "value": "595d1d59f1e92ff57442051a2936e040", "object_relation": "md5", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736816795, "uuid": "cec0de50-92b3-42de-945e-1ed492abea2f", "comment": "Malware payload", "value": "49589af90d7b34a958ef0fca6532b49c5bf2a735b811edaff89a07f081f6b4b3", "object_relation": "sha256", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736816795, "uuid": "580fe25e-b037-4f19-9f04-aa422261784c", "value": "T10D953392ACE947DAE5BF4F7013894754317D9B4A92429F81AA4FF160CE0B0EDFDD2A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736816795, "uuid": "77d0e0f0-99e2-4954-9deb-8c3f5b44c245", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736816795, "uuid": "762977dc-a9e8-46cc-bff4-2291b7f54d29", "value": "49152:7eUC957e9efXtgkdjbPBaspGaf9SfYf28Rp8kUOT53:76n7GequjbZV19+8PXUOTV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736816795, "uuid": "0fdca2e8-b021-459f-9448-ea2b28f767c3", "value": 1907200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736816795, "uuid": "0678a110-13b6-4243-92a3-fdaa7514de3a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "def9d1a3-d213-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736816825, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736816825, "uuid": "1278f926-3665-4236-8f7d-92236f5ca727", "comment": "Malware payload", "value": "e1a3ddd863e974dce15be83ee9ec0a1e", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "PrivateLoader", "colour": "#969637", "exportable": true, "hide_tag": false }, { "name": "Rhadamanthys", "colour": "#f4ae28", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736816825, "uuid": "dfe1b9ad-97be-4b8f-82d2-3009c5e4f49c", "comment": "Malware payload", "value": "3a1b1e4152955ee2ae1155ba9b2af549bd0a576c92e8aaa27fe1308339e3c748", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "PrivateLoader", "colour": "#969637", "exportable": true, "hide_tag": false }, { "name": "Rhadamanthys", "colour": "#f4ae28", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736816825, "uuid": "827beb2f-cde5-4bef-9541-b6524a81f1f6", "value": "T13C853327AFFDF133E96589BB9463A63CFCA4467C45AD526DA00F81744E13EA6391C2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736816825, "uuid": "eaf8b6cb-6d7c-4374-8883-1c782119884b", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736816825, "uuid": "9d99b627-8228-45b3-926f-7237d2be2d74", "value": "49152:ANXQDMppKEQQ+9ztuauU9PEYdlFTJuz6dJ:GXQDo+X9tH1PEKlNf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736816825, "uuid": "ef0e44ad-a86e-4d06-9fd0-e231772c65d6", "value": 1831424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736816825, "uuid": "7d0780fd-04be-44cf-93c7-9d5ba92f1800", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98e6a210-d214-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736817137, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736817137, "uuid": "466996b0-2355-445f-b25e-6585f3f362b4", "comment": "Malware payload", "value": "cd3231e33a7f22c97812445f1a3a9698", "object_relation": "md5", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736817137, "uuid": "cec75253-9a4d-410c-a6f3-cbf2618cf5ec", "comment": "Malware payload", "value": "4ab2782f84caa288c6f0709384665cc7e28c0845e27d413d1e1196e6ab1b8a12", "object_relation": "sha256", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736817137, "uuid": "98797012-fa14-40ac-abd5-91efe82d7a39", "value": "T1A81633DB61F9553FD8608131406BC92EDC366A790DE8686CB25C4EBF2E3A650E7C27", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736817137, "uuid": "838a6d85-7f32-4f60-bdf3-a12ec7491d49", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736817137, "uuid": "b5e402dd-c171-4d63-9a27-b92ca32f62f5", "value": "98304:4cJuskrDyHNZF6BouNpk9VJT7v9tkVtdhgXZ/pAC0Rqi8:eItZQHNp5VOACP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736817137, "uuid": "fb5c93c7-54e7-495f-a2a9-0786736d87b1", "value": 4094173, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736817137, "uuid": "cb125bba-560d-47f7-9daa-d196ff8af6fb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "390add50-d1ec-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736817546, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736817546, "uuid": "b73a20c9-8d68-41eb-8941-08035f632d10", "comment": "Malware payload (Mirai)", "value": "d9d2b893f3d44071466dc9236593c741", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736817546, "uuid": "21b14639-d1ac-489d-a311-af7fd7784fd0", "comment": "Malware payload (Mirai)", "value": "df415fe941b1e2ea56f4845363f49024496ab38c73cd0974d1aeaa0f0257741f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736817546, "uuid": "09601ace-589a-4ab5-a822-4ec2f891ebec", "value": "T110116C9D6190541D04ECCD0C32AD1A109E7FC2C9B8A18F19DDB5483754A96A9BF6CF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736817546, "uuid": "a571539e-3ad0-427d-9225-f0d26f380d02", "value": "12:GBj+p3Xw+nNIBSkA+soKSu+/xH0KA+PuQlaq+3l9E+J9oE+hF3lqj+LTxyMA+Z3j:GBmtNIIAKSFTVuqa3l9/9sqG/PVeu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736817546, "uuid": "6e204801-5e84-4985-8917-acd1766af125", "value": 1081, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736817546, "uuid": "3371d6bd-0d1e-4f53-98ed-6bbdaa982d62", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f55e939-d196-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736817975, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736817975, "uuid": "62c9f25d-5aed-49f6-89b3-0618e9c05dd6", "comment": "Malware payload", "value": "660dbebef2a69ca9e6351e1b95baa28c", "object_relation": "md5", "Tag": [ { "name": "android", "colour": "#0e449a", "exportable": true, "hide_tag": false }, { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "Wapron", "colour": "#d9200c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736817975, "uuid": "9d76376e-46aa-4c89-82b5-d28cacf050d3", "comment": "Malware payload", "value": "df2acded3f912576dd190a470b70a561e32daf7780ef80e374917bdb86306b77", "object_relation": "sha256", "Tag": [ { "name": "android", "colour": "#0e449a", "exportable": true, "hide_tag": false }, { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "Wapron", "colour": "#d9200c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736817975, "uuid": "7c481858-f66c-4906-89b1-845a3653e564", "value": "T106960146F36CE92FC877A0338E7A136251994C509A42D7532A1DBA1C69F7AD04F4EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736817975, "uuid": "514e9b0f-77c3-443f-8e96-1713e0265c78", "value": "196608:Dz0a0KZ8Crp9y3Du7Rn/UuTTsQAu8TMXz0pKIv:Dz0Cr9yzCRn/UuTQik", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736817975, "uuid": "f331c268-8fcd-4d73-8ea2-3a158e951462", "value": 8618519, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736817975, "uuid": "6fa394ae-94d3-462c-aeab-9027a23f6156", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c03874b-d216-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736817975, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736817975, "uuid": "8d568ad9-944f-4f9b-aa9f-87826ed19020", "comment": "Malware payload", "value": "10507e6ff92b9b1dd73e46aef6a24fb6", "object_relation": "md5", "Tag": [ { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736817975, "uuid": "089d3c04-0490-4413-abd2-526cd57aa9cb", "comment": "Malware payload", "value": "f97738b0fa6dc6c4c2f29fcdc7535c679da6ddbe2fffed841cc81d1dd91f9a5c", "object_relation": "sha256", "Tag": [ { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736817975, "uuid": "775b7131-2ce4-4607-b97a-23994634dbea", "value": "T189519C7EEE75FCC043BE3084546A2D5B21C06772CBB15E68D5220AA82E3975DDF2A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736817975, "uuid": "a85fb8a8-cbec-4245-af77-8cda1d7d0ce3", "value": "48:5fNHt8Lbg5c0r8KfU0isOxTGo+kqKnoRW0eGTgdMOgkvioa0WPEIRA:5fN6k+4csSGo+kkgz6gd5vvadTRA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736817975, "uuid": "e0d6960f-cc28-4240-8d57-09b2828fec1a", "value": 2697, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736817975, "uuid": "bf5a164f-5111-4bac-90a3-9bd3050cd1d7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6bd72309-d217-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736818350, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736818350, "uuid": "c0a2c842-e0cb-46be-acf0-f5aa710d947e", "comment": "Malware payload", "value": "9fc6218cee397ac319e944db0b0cda44", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736818350, "uuid": "bf6a1498-cff9-41a5-b3ae-3262c3fb91d9", "comment": "Malware payload", "value": "3f10a3b2212382880ea9fbd2c88b063f45ac123f1270bbdc17fcafe25278df18", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736818350, "uuid": "9637c646-0522-4b95-b1ef-4564856dbddb", "value": "T1C6E5BF72D4BAF711D2AA243BB746E1F1360D1F04E8BA460BDD1DFA2F1F716402A6B1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736818350, "uuid": "988c5f75-1dd8-4b8d-b0ac-1bb8fd767900", "value": "eef76cf2087230a5c13f900c0c3308c2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736818350, "uuid": "a4fcab4d-c494-40dd-a3a3-f5b45d042b0e", "value": "49152:78KtnG2BwMninueOcnSezikng1cKq+HMasKJKk6JXluguL0pyN:Vmr5C/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736818350, "uuid": "565aec8f-ae79-4069-909f-5501a3fdc750", "value": 3106304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736818350, "uuid": "d0249ca7-df5c-46df-a14f-5d5e9c97819d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "26fc4eef-d224-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736823818, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736823818, "uuid": "0c63bcbc-cd27-47b7-8ebb-293b95ee977f", "comment": "Malware payload", "value": "490fc91a6e44d34ca186fc2542dff9cb", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736823818, "uuid": "a159c5e2-3d74-4ed7-9629-6cc27b6a5d3c", "comment": "Malware payload", "value": "0ce37e80d456539076d9f05bd2683537d0247bbc0e514bc4dd74d74c87c2a0a0", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736823818, "uuid": "dff619c2-5e12-4dce-99d0-6badb7bfe305", "value": "T16034BD24DAA23A2019205FBBE574A7CD9A47F44582333752E35DD3AD8371CF40F2E8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736823818, "uuid": "5ee922f3-a15f-45a6-b06b-75b770ba5b08", "value": "6144:OFZOKHNF65XVlACNIjim3ITJkEZdajTZMHKSkr5J:mZOKnQcOMOHOTZMHEJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736823818, "uuid": "41c9ddd6-093b-4bff-be59-85af326c090e", "value": 239689, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736823818, "uuid": "eb88d01c-0bd2-4d27-8da4-9125b2697ab6", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a8d2feef-d224-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736824036, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736824036, "uuid": "cb4c8287-52eb-431c-a52a-c5a290e16743", "comment": "Malware payload", "value": "38b0fb4d61172132d9d7f6195197289e", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736824036, "uuid": "8e390363-28eb-484f-b2b9-acf67f36bde0", "comment": "Malware payload", "value": "e3465b20313d4c713e4ba273ecbbd36ed76a6746ed5ba4cffc08871f2abbf91e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736824036, "uuid": "0f2733af-64a7-4486-aa93-670f63ec933a", "value": "T1D474BFE076F18025FEFB5B347930D6940A7BBCA36A75818F3294365F0D33690AA617", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736824036, "uuid": "e195472c-dfcf-4a79-a29c-bf117045a744", "value": "c35d462d72dd10c59809eb33a06718b3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736824036, "uuid": "2fbf3e27-5699-476b-9d4a-c2627b1a11fb", "value": "6144:e10yfz0X6Y1bDg8T49f3FEhJVXVOHXzICwviX0if0:VlB3U9f1EbVXVlD6X0i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736824036, "uuid": "fbffce11-3c8c-4659-9330-d2ea841d5242", "value": 370176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736824036, "uuid": "ad4467d2-d79a-4fe1-ae22-b8a9bd7810de", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ea3f73b-d225-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736824314, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736824314, "uuid": "2db9f6ca-ccff-4182-bfe5-422d93051552", "comment": "Malware payload (Mirai)", "value": "a84322e22795675d9d33efc728c79558", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736824314, "uuid": "ebdfbae5-49f5-4600-be06-a94555e580a5", "comment": "Malware payload (Mirai)", "value": "d66438e78071a9d599f6c85127e7cdd693afb6315d741118a849ccd2620a4c65", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736824314, "uuid": "49f0657c-42cd-49d2-8771-1b2cfa56e0de", "value": "T1CF733999B4029E7CF94BDABD54164E0EE821678152830F27A7BBFD933C731A5AD03C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736824314, "uuid": "735ada41-03fc-4d4f-9e7d-6b2a5172b150", "value": "1536:OwUvSHdufBYf3s/gblSk+Z1E5jK02o18W8VwieZYbnOFwZCcMrBJCrWXpdxs8q6o:0SigblSk+Z1E5jK02jW8VneZynOFwZC4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736824314, "uuid": "4f1c3c4b-3980-4d20-ba97-bd19f969aafb", "value": 80024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736824314, "uuid": "79d34440-8112-40c5-bf4c-941b537bf9a5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1934a4c0-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1736824637, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736824637, "uuid": "98466e2e-5b1d-4bf9-a4ee-48c739901792", "comment": "Malware payload", "value": "1ff5a92a793b1503e1399bf2434ac5c8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736824637, "uuid": "65fba595-c857-476f-83db-03101c4bce62", "comment": "Malware payload", "value": "22eb75dfc037517fc0f62570c77379a708a8769fe654bb7c58177ecb17f3c2ee", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736824637, "uuid": "17e78f4f-716f-4464-a730-1d0aa8da6826", "value": "2213028237A53F72D52188F4D7BCEFCA614A7D94AFA9181BAC123698747135C28C981F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736824637, "uuid": "fa7fd994-9daf-4c31-a899-0684f1c1771b", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTzEsD9:yYI0ARqw1qAEW67UIWi7M8gmf9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736824637, "uuid": "2dc82ab1-4e9f-40cd-82b6-cce19edc64e7", "value": 44888, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4a87b97-d226-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736824942, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736824942, "uuid": "e5558e3d-f253-4ec7-ad40-3faf3d734ac7", "comment": "Malware payload", "value": "951c6097814ba11b9e28d857e931dc22", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736824942, "uuid": "6f0f3cca-dffb-4eb9-b02e-02ba01211c55", "comment": "Malware payload", "value": "a8c42bbc1ff6d2331b9e9a4e364396ebc12c04f8e2be6611bc0a7e5d89af474d", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736824942, "uuid": "9855bb33-4dbe-4b5e-ba33-0c717c035041", "value": "T1C034E1F359966FAE806724CD3D125431A92A1B2E382C991B3AEF0C7C7C89175117C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736824942, "uuid": "134aa951-44c5-48f2-952e-54726485d243", "value": "6144:0cFP8mVlxy9Lu/ZtJAE4HOO+1YnScVEn1v2Z:xPPfM9i0JHOv17cYC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736824942, "uuid": "301bdc7a-291e-491d-85d9-181be2e0ec03", "value": 247891, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736824942, "uuid": "b2527ea5-20bd-4e25-882d-243d93672429", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f1e4b26-d22b-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736826972, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736826972, "uuid": "a0135268-91fe-4eea-89c7-7a28aa05b046", "comment": "Malware payload", "value": "3fd8f4aacaec8b195c8a7c422ed2e865", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736826972, "uuid": "121e1770-5a26-4c79-9e0a-2d64e0df1863", "comment": "Malware payload", "value": "43821da44bdd38d9d2fe2dfb6497f7913f465172817e0eb4471351a1af26cb72", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736826972, "uuid": "8fe5d684-8ae5-4e76-80ab-92661787dc54", "value": "T1763633A4215E9028C82D9E71949EDE2B67B2A9632D32F76D35ADC5FDF07204333260", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736826972, "uuid": "137a1a5f-8553-47be-8c38-7d8651bb33ae", "value": "bbba45e6bef46cfa69958215f438468c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736826972, "uuid": "2dbb0c99-ec26-4a48-946c-add1115211b3", "value": "98304:neG7eCeJ08gWWxZ8pOURTSnUwhOtgNFe9MNjyiJ7Vu:n17et08gsplGyg6K4A7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736826972, "uuid": "1e1729d5-fae4-4a5a-b388-0fb4c03a5e85", "value": 4921344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736826972, "uuid": "cb94ab60-ee7e-4263-b5cb-d690935d0c06", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bde94ee0-d22b-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736827078, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736827078, "uuid": "4b45a140-b4d0-427e-9a24-9ab4a8f22157", "comment": "Malware payload", "value": "533300ddca42487425a576866f05960d", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736827078, "uuid": "c8352f3e-c331-42d4-b0df-3ea712118316", "comment": "Malware payload", "value": "149a40fd88d7697c8982b87ca6a0d7cc0f61fbe58700165eb8978a9c072fd452", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736827078, "uuid": "960fe1fd-ede2-4cd2-8c38-5a1ec81ef6d9", "value": "T1BAF423709AF7C641D2AA0E733E5B244D6746B08FB408ED06609C053C672E1976F7AB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736827078, "uuid": "ac03359b-729d-4430-abc3-ddc9d83ad0bd", "value": "987b6ca9dd5f926a72ce3178ed8a981d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736827078, "uuid": "c20b1ae4-6f95-4cd0-93d6-7f71932e99af", "value": "12288:6ZmkFwfOuiOnnUWGs3Ap6CUzk66QSxrm0WeZSaCkaBZWhiB3lPVaW9QC//1AXR/n:6ZhnknD3iRUYQZ16SaCFUA7pQC//WXRp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736827078, "uuid": "78a38edf-47d2-423c-9802-34384b2acf1d", "value": 734208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736827078, "uuid": "d96327b2-387f-403d-8359-848b486f21ca", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa558cec-d22d-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736828038, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736828038, "uuid": "3dc121e0-6fd6-4d49-b961-2838c3c8bc5a", "comment": "Malware payload", "value": "d4011e8a3e254e3e77a4d869be5c9d3e", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736828038, "uuid": "d1c08415-1f61-48af-a4fa-03bd518e5ca1", "comment": "Malware payload", "value": "c6ba6c4a3a9f92e8d0efb60fcea99e83540d96dcb168cb5281d53b456b00b851", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736828038, "uuid": "34d8d0cc-2954-44b5-9291-392ed06c9d22", "value": "T1AE8533131D90EC70C780D63E8105BA259EBD225E145DEE68AFF432A2E673FBE04155", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736828038, "uuid": "3f9042b9-1af4-406b-b9e1-a8567c5a3209", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736828038, "uuid": "9b55670e-66e3-42fb-80f2-1ad1d8679c1f", "value": "49152:4dsTBq4knnI9122pH+OmPpOBDva8Kq83t:4Zns222pkyhq83t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736828038, "uuid": "cc9c4a89-a7f7-4b3d-8c41-e810f6b5aad3", "value": 1863168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736828038, "uuid": "94c3dc61-31e2-4626-9ec2-a2d502dbe946", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "264e1d9e-d22e-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736828112, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736828112, "uuid": "a4a71a13-4533-4949-942e-277449ba8cd3", "comment": "Malware payload", "value": "7fab415e719dbbccfddef8e3c6b190a5", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736828112, "uuid": "157063d8-068d-4da0-95a2-577ba7d2eab1", "comment": "Malware payload", "value": "eeda4d64dc51704e6874f62f7c49b12605755865d23c9a6c4a9ff169d2275a07", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736828112, "uuid": "e3e5f8fc-4385-48f8-835b-53e67f07380f", "value": "T1DDE42399BBBA1FDAC85E9C3E4F3C7A1403D2E50C9158052135C46876E2EDA19F8774", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736828112, "uuid": "201ba9da-96bb-40fb-8334-4c2e80225ea8", "value": "db849d92658239f75dc6b02e890de92a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736828112, "uuid": "92472879-ddf7-495b-9876-7e8cbf459d4e", "value": "12288:7KqH4k6X7Mkt4YEs66YSzZ47XORTGNIk7c3YTExyhQ26rvk75DUR8vfpoS:7KNvom4YC69zq7XwT+w5yeS5DC2f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736828112, "uuid": "25115f50-223d-4715-9d97-d0957c8eadc2", "value": 676352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736828112, "uuid": "149ae723-4529-4605-a811-ec96e63be713", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "03144f06-d22f-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736828482, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736828482, "uuid": "d0454f4a-b717-49be-882f-8f747b815ac7", "comment": "Malware payload", "value": "b164e60041080e9a8a77c6f96ba924b4", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736828482, "uuid": "ade7c4c6-3634-4a9a-93a8-a3e35b411159", "comment": "Malware payload", "value": "44462d05b0eb75735068c62e82b09010b367934a9e451f3ead4c7599ef8cd0be", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736828482, "uuid": "53521940-6901-4e4c-9816-8e3893894c42", "value": "T1E9E4238A5E110FBCD9246AB7A122F49C57733000B53D8BDBEDD6E169FC415A0CB2E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736828482, "uuid": "0927fcf9-495b-49dd-b295-5dd529e0c86d", "value": "bbba45e6bef46cfa69958215f438468c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736828482, "uuid": "97d8b749-66e1-4e73-9dbf-5782a3a1f32e", "value": "12288:FjRzW1PfBEIufMgrLJ1Qzz0WLtz8ISYiT+t/F6TwpvwMdquji0bzJldL4kbllzIZ:FjxW1P5EIuLbHWMYiT+L6T44QFzfdkeD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736828482, "uuid": "1341325a-6012-419c-8492-c815d829b76c", "value": 710656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736828482, "uuid": "ac469870-e253-4e6c-993c-8b87033c37c2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ace38a3-d22f-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736828495, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736828495, "uuid": "df0beaf7-621c-4794-ac6d-751f458716ce", "comment": "Malware payload", "value": "884377b8f33f0c843561165a3901b8c2", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736828495, "uuid": "797bbf37-d9e7-4a02-a39b-67111350e719", "comment": "Malware payload", "value": "938966f927e928a932d8ee051744aed8c04d4c1439fa107048a7ec926a4eb43d", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736828495, "uuid": "3cce99bd-f311-40b4-a41f-e64642e20c28", "value": "T1447533B676823061E64A36FA8C9E7DC252DE1EF6D4354D02357B207FD981FF096622", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736828495, "uuid": "77cf0e0d-5f07-4662-b4c0-2e89a95e1f1e", "value": "3a8c1c2cf7ce73e14b378d6c019af65a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736828495, "uuid": "2536d3c0-009a-4162-a3b7-a448686c36b6", "value": "49152:kyYV9GsFjXdri1u0vxKKZSXAPwwMebsk:kL9GWd8u0vRhdQk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736828495, "uuid": "92131a4a-8b1a-4912-85eb-83ef8357165d", "value": 1682944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736828495, "uuid": "002cdd37-7ab6-4df3-af79-bc3ef2ec3aea", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e75b2b75-d22e-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736828714, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736828714, "uuid": "e0c37d43-ce66-48ff-bf72-2e601aa1beac", "comment": "Malware payload", "value": "bc960a9c216089c53e7239711fd067df", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736828714, "uuid": "6be1025c-da22-41fd-b701-1892759abcf8", "comment": "Malware payload", "value": "e6526142691136d9d7ecf68b19a1b952ef9aae1c8213f1968af34425abd7232d", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736828714, "uuid": "217bd3d3-740c-47c2-94ab-0fdae89be201", "value": "T12B7412B7A85C3D00CF5199F54B94A0624CCAFFCF6CAA0937ACBF2D79148025661F4A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736828714, "uuid": "43b36176-4be9-4c92-b52c-9a2483c53551", "value": "6144:STJEw0yRJCM2PRK6h5SPKH8p1Wl4Plc6hVSNkM8zEUZrMhHTGpSRD6TJf4:CJT00UM+slp1WlEmKM8AU6xGpPF4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736828714, "uuid": "8de3d234-a8de-4fd9-bc53-19e063508375", "value": 362788, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736828714, "uuid": "161d601d-650a-44c4-9f95-c8fa470a5a01", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6770a12e-d230-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736829080, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736829080, "uuid": "62a75bcc-4841-4d28-adba-3401876091de", "comment": "Malware payload (Mirai)", "value": "a8aa33b2f9b138fb9b0509a6e79e15e5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736829080, "uuid": "e3112c94-6492-463d-943d-0f941745a752", "comment": "Malware payload (Mirai)", "value": "eee75db010b9a91afdda9f49e5a4f3f5baf52e97ccbb0f36ec6f808495b56a53", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736829080, "uuid": "7d2070f9-764c-4708-9604-e8caba4383b9", "value": "T1C1C2E02622C6AC30D5640179DAF6C4473FE05738DEF8B35F291C1979AECAD1B28B83", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736829080, "uuid": "a18eedeb-5d3e-46be-a1ae-8610344ac285", "value": "768:sfT3PpWahhBZ7Xgf5mjhMm2DOaGQLcs3UozrG:srfpzBSm2fGQFzi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736829080, "uuid": "fc5dd8ab-0b02-4ae6-8405-034b8be5cb64", "value": 26952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736829080, "uuid": "a3f0041e-4c58-4665-8e66-3e8881d84ebb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "223ced72-d22f-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736829261, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736829261, "uuid": "d08d6431-91ee-4964-9fc1-92a5267e71e8", "comment": "Malware payload", "value": "daafe3b4625fdc6d238f0a63e68307a9", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736829261, "uuid": "344c33cc-d186-49ac-aa7a-1100cb1bdcfe", "comment": "Malware payload", "value": "b5a73fe1717523ea509af063af5aa33a4f0ee35c7d1076d28fd581acdb609458", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736829261, "uuid": "2d81707f-c983-49f4-850b-f0a31e15b732", "value": "T1C53533B2DF6937C1EDD680F89AD720A14D0F299F0824558B4253B731BD6EA28F23C5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736829261, "uuid": "065f895d-7dc1-46af-93c8-bbdd31e3aaef", "value": "24576:le26m5Ij/8nLZlbk2Pj+4NG1kZDjYw6/CWR9IK:V3n7bkKj+4bZ/Yh64N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736829261, "uuid": "0bcd0e7a-d8af-4487-911b-ba04327f21fa", "value": 1158467, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736829261, "uuid": "ce1c4b34-f913-45b1-a4d2-7567ae161436", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "584886ea-d231-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736829484, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736829484, "uuid": "4d1d122c-a27d-45fe-b62b-7485ce88ff0d", "comment": "Malware payload", "value": "492bf12c9ce74f3a59037bf31a1daed0", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736829484, "uuid": "d2ed453b-67c4-46ea-a2db-4f45c23d6d22", "comment": "Malware payload", "value": "973b453a224f96a1773a3af79b209272be33dd4239dbd1a8a04ff3b7723eec25", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736829484, "uuid": "ebe9e510-ab29-43dc-987a-b5e8e99572c3", "value": "T1AC653373ECE87D71DC9E66FC7700723858D887706A9CC7B36BA164094A9B5062F323", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736829484, "uuid": "5201a39a-fa95-4d93-9c54-a8c9d3c704b2", "value": "2e5f01e43a497b1cd096f44f6ff24f8d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736829484, "uuid": "ade8f2cb-ca6e-41f4-9323-ec7e6bb8317a", "value": "24576:lVgv9mfF5o5qdVspHvqPS+QDzAp/8Y7w5vWyXnH1WL7Yoz4cyHBf2+rg7Z8jPMKq:Xi9O5vsNq4i/8HQL7B4cIf2+JjDD1c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736829484, "uuid": "172eefa7-ea2f-432d-bea9-06f3779ed7a6", "value": 1469440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736829484, "uuid": "a039080b-cdda-4785-9b92-2c90d42bda4e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc0216bd-d231-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736829759, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736829759, "uuid": "431d419f-653e-4be5-8600-cc9237807d5a", "comment": "Malware payload", "value": "5f0592f0a7338cf9adbf2fce41483a59", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736829759, "uuid": "e0541330-8a46-4e37-8380-d144d2ffdf83", "comment": "Malware payload", "value": "e70b06b0b8303ee84364d688e3f4bf66bc3b606c7c4d87303312ef00b1c0757b", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736829759, "uuid": "1e6517d8-227d-49f0-acf6-0bd57a4baa73", "value": "T1C6453387F804D949C4D52DFF2CB2CC0C0C69BC5D81ED4145A26D8BDA8B95AE0D67FB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736829759, "uuid": "37d763b6-f65c-48da-a3f0-5fa29fbefb5b", "value": "b4284977f843f28b434a41d9512b0b36", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736829759, "uuid": "26f90c0d-8036-4ee8-8b72-7b30f62b7bfe", "value": "24576:hMcHQ8//JCqIpSt6a2VLNhaZHUnni6lKGoNJltiJWldDcPHTzRKYPOYDQC8:hMcw8//JCD7zLNhahUni6lyJ7iJW7Dce", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736829759, "uuid": "f99543df-0880-48b0-984e-b0bf0530c5c9", "value": 1237504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736829759, "uuid": "8f1162fd-a06f-42e4-bc45-a9f75a85ade1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "30f07c3c-d232-11ef-856f-82aee05be84a", "comment": "Malware payload (Xorbot)", "timestamp": 1736829848, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736829848, "uuid": "29efd07f-c53a-4d38-b7df-7b20d02f422c", "comment": "Malware payload (Xorbot)", "value": "cc7b31eed5137a335bac4bb81d6e4029", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736829848, "uuid": "4aa2d606-7657-4527-afb4-93c8cea5d98b", "comment": "Malware payload (Xorbot)", "value": "ba2f5f61b13f4faee3cd26d6bcd85b696c3e96e5519a2c152b037e95d891f1e3", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736829848, "uuid": "13552b99-3ad3-4630-aa13-eb2f8de25d44", "value": "T15822DFEB12D03521DE928D8677A0D594E055E8C0FAD32FD8D1CEADEA6008F1ABDDDB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736829848, "uuid": "2c2f5bf0-e8f3-4ec7-9a3d-e2348281eba9", "value": "192:kZZ9FmG/Hpoou7P/f/hkImR0cejfvTZ9FmG5f/hkI5oou7h0cejfvD:kZZ9FmG/Hpoou7P4R0cejfvTZ9FmGxos", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736829848, "uuid": "bf14fcc5-b25e-4892-b2c4-b6cf729cafc1", "value": 10578, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736829848, "uuid": "0b161698-2d56-40d8-adba-0852e1902e4d", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2cf07579-d1ef-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736829885, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736829885, "uuid": "8af4b2f2-791d-4556-abc2-396cae3cb40b", "comment": "Malware payload (Mirai)", "value": "1edaaac44374a9f469cae34ff26ab3f6", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736829885, "uuid": "9a52f83c-b78d-4a7f-a3a9-eead7149e6a2", "comment": "Malware payload (Mirai)", "value": "6b1381509841335b798d83e9ba0a36edd533974ba74d64982b264f01834ae0be", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736829885, "uuid": "edd93769-3084-407c-ba9f-49b14ae69b28", "value": "T113219BDA21D0942508ECCD0C32AD5824AD7BC6D974918F1D9DBC887751A9ABCBF5CF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736829885, "uuid": "fc14b724-66c5-4c9e-a6b8-2d8658d96dee", "value": "24:QBgU1QNIIoqKSfgTlcuqa7Gl9529mAqgU/lgV+A0qR:QBgU1GoqxfgTlcuqa7A9529mAqgU/lgb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736829885, "uuid": "3fc5bdbe-f318-483f-94ba-d0e3163b3c71", "value": 1200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736829885, "uuid": "ad3b0306-5701-4edb-b063-434c794a643d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a29e50-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1736829966, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736829966, "uuid": "c90e32b8-7d24-4d0d-bf3d-9790d439799f", "comment": "Malware payload (Hajime)", "value": "9b6c3518a91d23ed77504b5416bfb5b3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736829966, "uuid": "2c48aef0-750e-4588-b969-b6b3770983aa", "comment": "Malware payload (Hajime)", "value": "a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736829966, "uuid": "2a1b7fa9-f12d-415f-8cd5-f4aab5b7f42c", "value": "6D7312E017B517CC1371A8353BED205E9128223972AE35302E97528DF957703BAB2DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736829966, "uuid": "82458d1c-94a4-4620-9318-fbb4ac007164", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBht5:8D+CAXFYQChaAUk5ljnQssL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736829966, "uuid": "e7f4cdad-593e-4dbc-b382-e82519b79d62", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c213188d-d234-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736830950, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736830950, "uuid": "81dc0b4a-5bf7-4f21-8801-2244212ec03c", "comment": "Malware payload", "value": "d035591c9fab3e36da92c60a563fa0d5", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736830950, "uuid": "6d629724-bf39-4739-8755-0b4faa098ad0", "comment": "Malware payload", "value": "c0cfd523dc5f95cc1887ada3dad47ef393db28626a3c1cade61795d7e98d43e0", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736830950, "uuid": "8ad90a27-50ab-4112-abb7-b76b774edaf7", "value": "T1411412A75DC01EF8E8CC403D594D699C181997AA5CEA0CD64F90FA2E42D7F9CF80A9", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736830950, "uuid": "76486d46-eeae-45de-8f49-6f5cece76b6a", "value": "b24f60178a02b1ca585e0f029e71eba3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736830950, "uuid": "3104d9d1-aa04-47bf-84dc-49ed9cbc6295", "value": "3072:E+L0ARFF1Tl/kwho2OE6HHfLz1EmXYgpIIB1pPcH8bxhUPu0+nw15rRWWSJXout:E+YA91Bto2OE6H/n3XLdB788VhG+nkFE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736830950, "uuid": "83741f2f-acc0-4461-9525-3f5e18dc46d7", "value": 194048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736830950, "uuid": "cf35cddb-da07-49ee-8ec4-f3bb402f22cb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "773327c4-d235-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736831254, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736831254, "uuid": "51b04a59-f5d2-40a4-9735-4811abd55457", "comment": "Malware payload", "value": "a85779630bfa6370c72e09fb5e158a92", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736831254, "uuid": "ae890b21-d171-49cf-9d70-a67e5d4e3713", "comment": "Malware payload", "value": "508e6517fdd30560e559e36d528dec0cc8a9b35c1b90bdf7650c87f7306713af", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736831254, "uuid": "b583d781-7085-460c-8883-7294db223c71", "value": "T13F24E0F48EDD17EF68A27BA150E1B6A915279CE717E5DC43AF4C236A43433108C8DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736831254, "uuid": "f6b85673-bfac-4854-b46e-2b28f1e39e27", "value": "6144:FCrICyAae8f/MCjhRfMnrc/JE2R7xPMIBFojjQrdSdP:3kYf1hRYrcPxVFojjQrsdP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736831254, "uuid": "7309ec09-bd24-49d9-8f1f-2231e7be47f5", "value": 223319, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736831254, "uuid": "deb854c8-5583-4843-8827-254bb8df44cd", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90187112-d236-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736831725, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736831725, "uuid": "3fc6ee4e-824d-468d-9739-28e41e8e7c6d", "comment": "Malware payload", "value": "15cfed15415f5661b9c001fd86ede818", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736831725, "uuid": "a5a88947-ecc0-433c-96a2-cedca0e442f0", "comment": "Malware payload", "value": "14df786b19f50986b64bf13bcffeaaf2bbfbe95433fc7fd0fafae188b0b99e91", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736831725, "uuid": "e143cecf-7170-45d6-bd7d-a6178fcc328a", "value": "T1D224CF62AFAFFD43164BD0F49BFB77A8D7205B301AC197B5B686B8001551B10BD22F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736831725, "uuid": "03c423d1-9c16-4fe2-accd-6caaf95469f2", "value": "6144:WqelYlFrjcSNw+ZbjOzvilhurpGsdEKTi6Q:jelyrjcSNw+eizulGsamiR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736831725, "uuid": "f25c0aa7-deed-48d0-befb-cfe0e1f808f1", "value": 223308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736831725, "uuid": "dfc613b2-5eb8-466c-a039-250dece8b579", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e3d4d34-d237-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736832152, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736832152, "uuid": "49d107df-8ad4-488d-a1c0-8b0cfcfff7f8", "comment": "Malware payload", "value": "d989b9fc2ab6b5eaca88098afd2bfede", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736832152, "uuid": "3a9a5045-4f95-4a32-936d-1657bcfd8bf3", "comment": "Malware payload", "value": "d783559861e4b77e3652057ca4f003f9fbfe3cb077115b878205466c66ffdc68", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736832152, "uuid": "55a8d028-ffdf-4f22-8ee4-37ab52581da7", "value": "T17095338C2D2ED283DF18C87EC0BA267861B2967E15E6DBCEB11510359A487152DB3F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736832152, "uuid": "0130e627-595a-4fc2-a63e-aa8fde407b7a", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736832152, "uuid": "ea38b597-f0ee-4b1d-bd40-298d761f3aa2", "value": "24576:HPB7oNK2Ra/EEv5Ww+37W1/2iNPC5VHiVVURUqg04DnVtSoySNT+B0NFxSsKTqN1:HJ7uKAaz52rW1/2x76/Vty0HxSsp5F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736832152, "uuid": "53599969-afcf-4587-bcff-7f33f11ce761", "value": 1880064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736832152, "uuid": "f41598fc-f2a2-492a-a7cf-ca520c540b26", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68793122-d238-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736832518, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736832518, "uuid": "0ed6cce7-002b-4163-ad27-4588b5e1b995", "comment": "Malware payload", "value": "7f7c7e4617cc74474107a1668dfc7a7e", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736832518, "uuid": "fe3bb980-701c-46b5-9f7b-d598b4e17c3f", "comment": "Malware payload", "value": "f5e655abd81f89a104eb1728c7f4599526601273d30017b0fe6196db1667124f", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736832518, "uuid": "ad67f078-1b3e-4f6e-b632-22ab5d3eb8a2", "value": "T109E423161CBC7C07C495C17F20A639EA4E31A537ADADA9183A61B6F0E4B17033E597", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736832518, "uuid": "978b5bf6-dc02-416e-85ad-eae847364d79", "value": "58c9c00d3939ebafff3381f83aa8d6e0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736832518, "uuid": "12db544a-5588-46a7-b1e4-707ba5fb4b17", "value": "12288:nW5y9Y2c3jCixaIraLDl5GmrZUvY0DQI5uQwTHbqB0kL6fD7eYtEiqs9yFe44CoS:Yyy2c3jZ/4D/Gmuv5l5sHmZmfDSoEeo6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736832518, "uuid": "f77a36c4-4e55-44eb-9e6e-18c6801c584e", "value": 693760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736832518, "uuid": "67ae2e20-8c96-4103-81e0-b9bce6c1ebde", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d7ff6fd-d23a-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736833224, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736833224, "uuid": "0f7c9873-5bbe-45a3-b511-58aa49285bfa", "comment": "Malware payload", "value": "3c079cc6ccc7ed87f48ef8c0c9033aa6", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736833224, "uuid": "d323ad20-9f5c-44a8-8669-b7570cef8568", "comment": "Malware payload", "value": "df12684a00b20088478608a7115f716502bd46a1d1a69c2f6a14300ad42da347", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736833224, "uuid": "f5c30a34-586f-4fe2-8e66-ab0eb354fdde", "value": "T157F433379EA72486D2D84D3D5E413D623C14692FEBE321708A7813F9C9F6B0A241B7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736833224, "uuid": "6db7ecc6-7a22-4c66-9a64-2d07e2f38fc9", "value": "bbba45e6bef46cfa69958215f438468c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736833224, "uuid": "0d028958-b5b8-49ef-8b93-7f6ceffa361a", "value": "12288:GsSXdmCUGJSxM3OzhSx3RgAmu9l6tESLyjYNy95jvYlQeQJCXJsI3yzqJ4wDWuns:GsAdmGJSa+VkB1x9lI/Ly6yLvYWe/JZZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736833224, "uuid": "f7c3090e-177f-4738-b4ba-40ea0d4dc482", "value": 733696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736833224, "uuid": "7346a9fc-2418-493c-973b-adddadbf15e8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1eb45f85-d23a-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736833253, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736833253, "uuid": "7749b7b8-5325-446b-a349-1034a87f3574", "comment": "Malware payload", "value": "0e3d4727dd1502ede2fe0bbaa66c0872", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736833253, "uuid": "9b82a3ea-dbba-4905-b18b-16dc1e6d00f6", "comment": "Malware payload", "value": "4e2be58dd8daa9ff4ee727dfecfc761126a799e42b33163876e339d1344d2d42", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736833253, "uuid": "51edc380-bd01-42fc-8236-e66dfe6469cd", "value": "T12D34CF91027977CA3C4D533618B54BC95D967F0F6A792DB482BA68D00C7BCA93F60B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736833253, "uuid": "dd590d83-1737-4e0a-b12e-5abd2db00484", "value": "3072:T8UYbNMjeSey3lyYCqVO8XeseuXQqf3EO4RENsN5fA8JhBNFpns5yip0:BiMefHYCwOAXRf3EXRENsN5fxNnsz0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736833253, "uuid": "c50fc33b-f1ed-4d5d-acae-0023e9160749", "value": 239702, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736833253, "uuid": "b6a30200-3c32-43bd-b139-6faf71be35ac", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "506829ce-d23b-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736833766, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736833766, "uuid": "525dd098-98ae-4c05-bc89-07c2fdd2dcdb", "comment": "Malware payload", "value": "ae15936695490901eca610df230d73d7", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736833766, "uuid": "1e896360-a3f6-41e4-ba33-f76ffcda5c8c", "comment": "Malware payload", "value": "a0d234f6531de1fbac2f23a96c2d3effae197234d50a2b2564055a9dc43a3a8b", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736833766, "uuid": "7d8579e2-76be-4f72-a909-469fac3cd8fb", "value": "T11053E97766623E0D9233480CB8C5B6C87718C453D4075AEDE9BAA62CC3CBDC691727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736833766, "uuid": "5298eddb-b91a-4a5d-907b-79d27522c736", "value": "768:aA1fho1SnvHgRNv+f5AfpUxnHeob4f1u0eJwO0H+UJF/dhhR1X1t1RB1p+dT2sAQ:aA1fho1P6n2PhR1X1t1RB1p+dK1a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736833766, "uuid": "b3a1b259-93aa-47b9-869d-2bcc4ec90230", "value": 64430, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736833766, "uuid": "6ac089fe-83fa-40bc-bd15-69601f9ee7e4", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "721a3ad4-d23b-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736833823, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736833823, "uuid": "777fa96c-d7fd-40f7-a558-a3f60f55b84a", "comment": "Malware payload", "value": "97d14db5060b55c4ec7b1a5539edce5d", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736833823, "uuid": "0d7573a3-ccdd-4833-a643-596ccaa17518", "comment": "Malware payload", "value": "5ab3e2e65ff92d1c7702b48c30e8026206bc68e74fadde4b687df0553890b0b8", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736833823, "uuid": "d5c27945-c67e-40cf-a51d-40b35684b4ab", "value": "T19C47CB8C0EB65EF8F225E01723616BA6E449241FEF453BD8F64D71AC9F04085FB9C6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736833823, "uuid": "eef8f3db-9df4-40ea-ad1a-d01c3a79a6cf", "value": "49152:Ubjb0T2gfMtGs+ud5M2Dpd/W3XZTvjpHHplwr6:Nu/MEdS9plw2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736833823, "uuid": "69feecfa-ccda-48a0-874d-d6f629c3b60d", "value": 25502356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736833823, "uuid": "fe61b204-c968-47e3-9f5a-3ecb786930b6", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91e0fa83-d23b-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736833876, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736833876, "uuid": "f0c8b487-77ea-460f-8196-67eb85a23850", "comment": "Malware payload", "value": "5f9436306a5fa6c0c5dbedf35bd1ceee", "object_relation": "md5", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736833876, "uuid": "bcc5e5c1-e7d2-406d-8d24-e8bcb7cca320", "comment": "Malware payload", "value": "0929c0e1ac878a2beef39aa8b53bace1069a2bfe98a87f2796146c3314de0019", "object_relation": "sha256", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736833876, "uuid": "45b3ee88-f243-48eb-a942-c4b53c5ac052", "value": "T1F9F533A7B58A81B9D093DEBC49653E066A377907003C6C19B24CCDAF4F3BDA4D94B3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736833876, "uuid": "f3917d7e-5f3a-4cc6-b718-5661551e9b29", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736833876, "uuid": "b5f7f35f-9110-42d7-a880-08978bd6a517", "value": "49152:e9xtrmuk/bUwJePx2TPrtLDWB5yN1lBquZgpxPTaU2PKtsXnBo1LXP16B5ScOVvo:4xtSewJe0PZfWAxMJQxqdXtBvv4KS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736833876, "uuid": "0c841b24-c7b1-4e9d-964c-d9f06f5c57a0", "value": 3636043, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736833876, "uuid": "c4056b27-87ab-40b1-9553-3633c8640226", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f25aeaf9-c2b6-11ef-afe5-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1736834230, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834230, "uuid": "ad1922b3-9243-4abd-b006-356d50fa9934", "comment": "Malware payload (Kaiji)", "value": "9b5374d0de7d2dc1c93b810ede508fb8", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834230, "uuid": "09c7762f-cd6e-4df6-8102-9c82e4f71380", "comment": "Malware payload (Kaiji)", "value": "a7d6ddec5795b2686d77adb8f63c85498b113cab011a3d0472555338278a9239", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834230, "uuid": "4ee69fde-5620-461a-b0a0-be655ce00f4b", "value": "T126463A276B58EB4ED72421345DB1CEA867391C4A82DAA527B345F30DA4F20BC496FC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834230, "uuid": "0fea322b-2afa-4737-8523-ddb14b260574", "value": "49152:7fImWcIJ/PMjcme4PC6K18gx9Oy8XlIs99MbY08p2sUn1Gd3plFQWSZvHH:lmSenA/6vn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736834230, "uuid": "de40f532-55c7-460e-8f58-c1979f732a1b", "value": 5767168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834230, "uuid": "5c0f29bc-e4f3-4b54-bff5-6bc649d2ab64", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ebec5dd-c405-11ef-afe5-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1736834230, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834230, "uuid": "3897da20-028f-425c-979f-5233416c117d", "comment": "Malware payload (Kaiji)", "value": "e6ef7bd0b355ee2f5810ab2a955c2066", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834230, "uuid": "88f1a11b-5787-4cab-baf5-0d9084df53a7", "comment": "Malware payload (Kaiji)", "value": "358ae8f9b931fd7ada8c54e558e16f2db7400f85a0c6215f1ff36f6c13ea300f", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834230, "uuid": "5ccd5e90-f3c1-4773-991b-9f7a9646fccd", "value": "T12D46F705AD842BE7C42C4F7495E6CD6522B01E140AF14B3A26A5FFE9BCB62747F039", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834230, "uuid": "19b48851-589a-4e7c-a6c3-be6db5fccafc", "value": "49152:YzYDt2QsZfbpswDWv/96InSJQ3JljeVOl:Qsw6FnoAH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736834230, "uuid": "25f82029-3928-48b7-98f6-aa51f3f5309f", "value": 5767168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834230, "uuid": "fe927e0e-6248-492f-83b5-f5bb06ab9be4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05158fb9-ca08-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736834288, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834288, "uuid": "a95afe2c-24ad-4955-a66f-a1be283a406a", "comment": "Malware payload", "value": "e357b2026769b476e069ae06f81e0da5", "object_relation": "md5", "Tag": [ { "name": "github-chasebank1", "colour": "#69bc7a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834288, "uuid": "9043d4fb-6497-42b2-acaf-2537e2491187", "comment": "Malware payload", "value": "0bc8dc431e9578744f5ed7aa55e401c8c4e9a3261d56b30a4d5c04d68a6f6be6", "object_relation": "sha256", "Tag": [ { "name": "github-chasebank1", "colour": "#69bc7a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834288, "uuid": "56630a35-a478-4c7e-a95e-269e9448af95", "value": "T1E8012808F049E560DA533CA4C96E6785EFA7D4860507CC08EE529D6C7C0CAE766FD0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834288, "uuid": "737a8a03-cf4e-4325-8422-3a30b3028040", "value": "12:AVyk5700bWfzFE3L5cqaOA/cqJ7CvH+VM1t2rdcuHKN0EtA:Pk570eSF4LyqasqJOeVMOdc4yltA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736834288, "uuid": "9738e710-044a-4890-a6cf-b48b4f3e3538", "value": 671, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834288, "uuid": "d9a6b952-1d1f-4f54-bf45-a58cffa5a9e5", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11862e3b-a5fe-11ed-af1e-82aee05be84a", "comment": "Malware payload", "timestamp": 1736834288, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834288, "uuid": "97071248-821b-490d-8aff-cf85abd3b79d", "comment": "Malware payload", "value": "4e52d739c324db8225bd9ab2695f262f", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834288, "uuid": "196bc703-344c-4235-bfc8-95727e803931", "comment": "Malware payload", "value": "74ebbac956e519e16923abdc5ab8912098a4f64e38ddcb2eae23969f306afe5a", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834288, "uuid": "eb03e505-3540-4379-8b28-807376441e48", "value": "T102445942B581A474E49238B5315DB73A2C3A5621B3E5C8C7EF81AEB01E642D36F3D7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834288, "uuid": "840730be-8934-46c8-bac3-bac972d3348d", "value": "32ef7516974ac0c43943c0635266c6fd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834288, "uuid": "897adae7-ead4-449a-b59a-08a780707226", "value": "6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736834288, "uuid": "b383fe52-b3dc-4e8c-b797-7611bce797ef", "value": 257872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834288, "uuid": "ef159c1e-7b89-47ed-9f75-d8c8f7eca6f3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0526b516-ca08-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736834288, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834288, "uuid": "bc12fa9a-4712-456b-a70d-b22adf1504ab", "comment": "Malware payload", "value": "b9ef76258571fe07d63dae35db2bb9cf", "object_relation": "md5", "Tag": [ { "name": "github-chasebank1", "colour": "#69bc7a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834288, "uuid": "2a0036c0-c759-4d67-8eba-8ed6454a1edd", "comment": "Malware payload", "value": "9b78f802ea220bc8a09b82b8daaa3ff0da31f985c63548a0b4be32843c0ebd28", "object_relation": "sha256", "Tag": [ { "name": "github-chasebank1", "colour": "#69bc7a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834288, "uuid": "87a6aa33-0984-48b2-b675-8bc7025dfaa8", "value": "T14BC0220E080CBF2C88AE0C8002EA2BC8F00EC0CF08032CC002800C2EEA0FE82A0A02", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834288, "uuid": "fd5d6820-bc88-41f0-8890-a5e02c86cf4a", "value": "3:mKDDf09xu0WiXyFGIBK56NF8Xno9/w1Ky7zrH4ovWKtq:hCxVDGGIOyYns/wfLYo+Kq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736834288, "uuid": "fe2b9380-42a3-492e-a032-bcd46b6ea42c", "value": 130, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834288, "uuid": "567d35c2-7769-4a26-a37c-45be306ccc3b", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05522aca-ca08-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736834288, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834288, "uuid": "1067d254-9852-463e-bdd5-9731940ce99b", "comment": "Malware payload", "value": "ba2d865b3ab47cf3b30c00787fad905c", "object_relation": "md5", "Tag": [ { "name": "github-chasebank1", "colour": "#69bc7a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834288, "uuid": "f0dfaaad-c1db-4f9b-b4f2-412a5b026ebb", "comment": "Malware payload", "value": "85a9e3cb853d315c8508c27adf5372af094b67703bb543c204d699f4a138f2d9", "object_relation": "sha256", "Tag": [ { "name": "github-chasebank1", "colour": "#69bc7a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834288, "uuid": "24cbdec2-b3a4-4ce1-9e2d-a439358f1471", "value": "T114B02B1EC31D6B415512243001155ACEB80FC0CB50000148012121617C8C07194C13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834288, "uuid": "f7a4a754-9091-464a-86aa-6859cb4ba3dd", "value": "3:mKDDf0bbYxwriPA/sriOlwxQVLX65RyVfvn:hkbYyriPUsriWwa+5AJP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736834288, "uuid": "f6b6e818-3481-4e50-8ac9-3b57635f0b11", "value": 121, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834288, "uuid": "d66244c1-88c3-4360-9143-f5a9f1a7a561", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8774ca0d-d23c-11ef-856f-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1736834288, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834288, "uuid": "ba27f46f-34d9-49e7-a701-c51ee5122a04", "comment": "Malware payload (RemcosRAT)", "value": "6dc778742c1403851ff2659fcee24150", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834288, "uuid": "70c6b105-96e1-4b33-a95a-f50b7443dd50", "comment": "Malware payload (RemcosRAT)", "value": "ba54736b563266fd4f32553c63737596d3208a9112cb47d6513f68db2c2e6b67", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834288, "uuid": "73780f3a-d1d0-46ae-9fd6-9582b133885b", "value": "T15E23CE7B6443A08BA5278BBFFDEC1CA102019C77ADF86F0925F8941F76FC5D621249", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834288, "uuid": "8f4f456b-9740-4d7e-8c6f-7bf8b0b74a3a", "value": "384:3JOmk0yZAx8XKnnNXIsvZDmjbSu7lvRvw:3smyA+XeYJ1RZ4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736834288, "uuid": "63feed4d-f8a2-4a3f-a4e8-c3e1272cfded", "value": 48176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834288, "uuid": "a210be5d-e9bd-4438-913d-e10fabbb717f", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d8b0283-604c-11ed-a083-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1736834288, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834288, "uuid": "15d6c43c-b45e-4a1d-8606-c997d2c618f7", "comment": "Malware payload", "value": "1f44d4d3087c2b202cf9c90ee9d04b0f", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834288, "uuid": "fe30c2e7-1f96-4d20-99f9-2d10b70f72d7", "comment": "Malware payload", "value": "4841020c8bd06b08fde6e44cbe2e2ab33439e1c8368e936ec5b00dc0584f7260", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834288, "uuid": "a59a9c4e-78c8-4cd9-8651-0a3b4a5744c2", "value": "T1FF356D4AEA07AC7BDC5302754617E39B0575DA70A833CB8BEAC81D68DEB3DE116097", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834288, "uuid": "3fc5b01d-701a-4f12-8763-f49debceebb9", "value": "e727d00364cd87d72f56e7ba919d1d40", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834288, "uuid": "49e584ad-c2eb-4f21-9b38-d329215afe08", "value": "12288:dxylSMUMifofI9ayCvcZMBiMjCodEMdo8R66tCWko5+jsbFcoYuprzpGSgGSrz:d4AMB3caSZMijBI1CWkoj5auF5gGSrz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736834288, "uuid": "e25b7c17-c0bb-4bc6-8098-fc682893614f", "value": 1106998, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834288, "uuid": "2851fd92-59c6-40bd-a7ce-88ea9d42603a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "877eae0f-d23c-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736834288, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834288, "uuid": "ac650b00-968a-48be-8485-a73fccecbfeb", "comment": "Malware payload", "value": "600b3422d9008f36026f95c20a37e3a1", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834288, "uuid": "bcb45dd4-e698-4512-8489-ab096c0f4c8f", "comment": "Malware payload", "value": "bf222488b9631d311369c22f82366e911c26d1d3246549a79771f989460ce89c", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834288, "uuid": "05f4fa9d-0161-4aae-99bd-10cdf213f32b", "value": "T18C114C136AE96B10D3BA8B3203B696414A397D316C13D60D52B8A94C64B2D28DC75B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834288, "uuid": "b3f4276a-5208-4b57-8654-39cd8f7e46da", "value": "12:8+8pUFLOfasLHlx3FWjA2RLQpR5FFgMELlDmo0bctrIFXrMIYF8blEf+IhkVeRMq:8+8tlx38A2RLQ/5+4o0IRgeGbll3Il", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736834288, "uuid": "aef4a6e5-e644-4ea7-b04d-74bb5ca1d71e", "value": 1039, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834288, "uuid": "e1c3c741-3e67-4673-8208-20de794f2d9c", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "052108ea-ca08-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736834288, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834288, "uuid": "8b5cf7d9-7b3c-4f37-92d9-55582e7cfcd8", "comment": "Malware payload", "value": "64f7442e959f1c61615e191b32d80568", "object_relation": "md5", "Tag": [ { "name": "github-chasebank1", "colour": "#69bc7a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834288, "uuid": "cd890519-99b8-447a-9eab-2a30b3a8834a", "comment": "Malware payload", "value": "b15d9ca790d3a8420ea0b7726b4c639ee96eb81b26c14588cb4beba9078f206f", "object_relation": "sha256", "Tag": [ { "name": "github-chasebank1", "colour": "#69bc7a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834288, "uuid": "18eefad3-e885-4293-9ab8-361717be99c3", "value": "T1BEC08C0E080D7F184D9D4C8042E92BC8F00DC08E04022CC00284086D9A0FD57A0A02", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834288, "uuid": "f630cea9-a4c3-43b4-ab17-cd36cad4a56a", "value": "3:mKDDf09xu0WiXyFGIBK56NF8Xno9/w1Ky7zrH4ovWKtrKW+yow:hCxVDGGIOyYns/wfLYo+KrRow", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736834288, "uuid": "5cb59782-88e5-423a-b170-0f054aba68a6", "value": 149, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834288, "uuid": "f03844c4-8f73-4a61-93f0-adf7c89584ad", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "87dd6db4-d23c-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736834289, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834289, "uuid": "6f475fd4-873a-4de9-ba8e-b406f7566e6e", "comment": "Malware payload", "value": "73e0a2243ee63584b42c28eb92181df3", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834289, "uuid": "3101d3a8-56e0-4e96-86b2-4530a0b9bfbf", "comment": "Malware payload", "value": "bb74a25c75861c830b1739963cc45fe8b77ca10bf06d33866644f529230bc1c2", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834289, "uuid": "8e83281d-42a1-48e6-a958-7a1637d0d6e1", "value": "T15F532AA0AE4E986A279301CF61B6B519F06F6E74C70AC901F37B477170C2A51B92EC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834289, "uuid": "c0f42d67-15fb-4c96-8818-0e52f594333b", "value": "1536:WrOW+H3QjK38GjoIj+p7jzxijUBUGjgjjjQ5EgjUMzjjBxGhKxjznc/kCjRCdg1:WrcgjKMGjoIj+p7jzxijUBnjgjjjQ5Er", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736834289, "uuid": "093598e3-893c-49c1-b229-03f664bd0f94", "value": 66427, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834289, "uuid": "53823ad9-1c3f-4d25-b932-fa481aebe751", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "87eb3694-d23c-11ef-856f-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1736834289, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834289, "uuid": "9745982b-fca9-474c-96a4-f2a688a8cec8", "comment": "Malware payload (AsyncRAT)", "value": "9dcd35fe3cafec7a25aa3cdd08ded1f4", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834289, "uuid": "951c8d88-fb36-4ee2-a188-f22e8318d611", "comment": "Malware payload (AsyncRAT)", "value": "ce4f85d935fe68a1c92469367b945f26c40c71feb656ef844c30a5483dc5c0be", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834289, "uuid": "13704530-d2d2-44ab-951d-8aa4a69b8d8c", "value": "T10F232B003BE9C127F2BF5B78ADF26105467AF2632A03D64E1CC4519B5613FC68A526", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834289, "uuid": "673fd9c9-6332-4726-bc16-c3c988052c2d", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834289, "uuid": "42eb18db-ff2b-47f9-804b-5460577d1948", "value": "768:KuPfZTg4pYiWUU9jjmo2qrGQ6vincPI9rjbQgX3i6cPlSZ8OoriBDZSx:KuPfZTgKa2AKU9/bXXS6ckUrcdSx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736834289, "uuid": "92f5ad5d-3009-4ad6-a828-7602c731eb7e", "value": 46080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834289, "uuid": "13410da8-771b-4df8-a453-fab1b22da69d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f06169c1-9bd8-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736834289, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834289, "uuid": "c7592735-b17b-48d4-8e72-27c98380902a", "comment": "Malware payload", "value": "eba874cc1989b1e386cb20accca83ddf", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834289, "uuid": "662916c9-8457-4885-ac2a-ff9f877a094e", "comment": "Malware payload", "value": "6a45a3330843c11ce549c55b393fdc28cc0072b24cc74f322f5932291094db16", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834289, "uuid": "e51715ee-3c24-4c3e-b56e-d72ded398702", "value": "T15E737D363B0C7E9B4DEB0999A0040B964C3D195B473868E4F6DAF0EB715B1C4CE79A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834289, "uuid": "c34490d4-447e-4c11-90cc-fc342194f51d", "value": "1536:0CT6qWjvXLWpZScu8tf85WBjaSw/vyQE+lZ/30i2YqdaD5Jyhqm64h1F0q1Jh4r3:0CbjuYf82w/qWlZP0iPkaHaKq1Jh4rGm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736834289, "uuid": "9f6cf2b6-9067-4f65-93b6-fe4f348f6560", "value": 80580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834289, "uuid": "f20a8f86-8489-49f6-9a6f-a7cfc2b9cfe0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cfb70674-d203-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736834289, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834289, "uuid": "2b03eeee-1b92-43a3-a754-8fbd469c89af", "comment": "Malware payload", "value": "7712892a642ea3e7d03c132a6b5afe90", "object_relation": "md5", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834289, "uuid": "da099db3-1ee2-4006-b5da-42d6838b91e5", "comment": "Malware payload", "value": "1aa322370adba4527cc14afaeddb9c09729bc0aabeb2dbff2eb5f984d4574a2e", "object_relation": "sha256", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834289, "uuid": "e6919e1b-b509-4864-b82e-59d921df2708", "value": "T191A46B7F29086DB44EBB1862A8051B085C2D3447CB74C5D8FBCEE4BDC337CA4867A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834289, "uuid": "e44fe64e-debc-41ad-8edd-74d6583efa82", "value": "12288:RGXkW2vJ5Dnam0Uqsk9dY/sFlXcby/ZnpFAORKIYtQ8IvdYE6C0:G2vJ57amcSyBn8OUtQTb0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736834289, "uuid": "e51a3c20-63bd-4823-b1cf-37952f48e50c", "value": 451304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834289, "uuid": "604384d8-d9f7-46cb-becf-a52f8418314a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "909ba02d-d23c-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736834303, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834303, "uuid": "0acb429d-545a-4da1-9625-5ab037d8d477", "comment": "Malware payload", "value": "eb68726e45e58f4d7a0d82af1cae9a79", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834303, "uuid": "4bf84c2a-3c87-4908-807a-7ab068c4c7bc", "comment": "Malware payload", "value": "befcde64c3024e92ea4f022d817e2bed042554bb6c24e6198d089596524397fb", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834303, "uuid": "9ec1c638-f4df-4c09-903a-80d652c31cb7", "value": "T1A84733506F05D474DACF7AB7AEE8DB3C5B89AD874B50018347F83A0F38340A69A671", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834303, "uuid": "dc72fcbc-fec4-46ae-bd9c-adf1ff063844", "value": "a1a66d588dcf1394354ebf6ec400c223", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834303, "uuid": "4155cc71-c99b-45c4-b914-25d930660d04", "value": "786432:TEtmEufLQwnX3ifZOmCJJlfm+FBnVV9nhSi2Zu:PEUQwnnEcrJJlfvnfqiGu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736834303, "uuid": "f6bbca68-6583-4ddb-8568-a66826efdb4b", "value": 25291234, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834303, "uuid": "8b913d33-edd3-4aec-8e30-46815823049a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90f7df01-d23c-11ef-856f-82aee05be84a", "comment": "Malware payload (RustyStealer)", "timestamp": 1736834304, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834304, "uuid": "74e3437b-475d-46bf-90e9-6bdf097c2270", "comment": "Malware payload (RustyStealer)", "value": "82c7d11916fdfbf24eae6bf9200a48c9", "object_relation": "md5", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834304, "uuid": "84625f22-3abb-43ca-b2ce-e0aa6fc26a39", "comment": "Malware payload (RustyStealer)", "value": "e3d0c31608917c0d7184c220d2510848f6267952c38f86926b15fb53d07bd562", "object_relation": "sha256", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834304, "uuid": "4690d1be-25bf-46c5-a19f-25fd0e020301", "value": "T13F379D01FA6415FDDADBEA7082AE2336BB757C488232EBB70A75D2301D23651EF1D6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834304, "uuid": "c6d74a3d-0c02-4962-a10c-4dab117afe0f", "value": "37200fdeff87ebb4b00d4e6df0cb256f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834304, "uuid": "b1e1c01b-0cf6-4507-894b-b80ee5b824a9", "value": "98304:C9QT8csoiv9C1xZ78U7qw+W5E6WlEEIPSeIIIU5/+mRwH3SX66CpcuC8uQcsslOo:+QwliLIw0dlEEIPCU5/riEO9rkVo0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736834304, "uuid": "d0d06aee-6e63-406b-8ce9-fba718f73d5f", "value": 23509956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834304, "uuid": "1b2ba093-39a2-44ac-9707-d3b9345e237c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "470d82b0-bb82-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736834345, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834345, "uuid": "ff30bf9e-2621-45a9-a0fa-130e08aedb57", "comment": "Malware payload", "value": "920f570f170234a17dcb7a7f18c894ee", "object_relation": "md5", "Tag": [ { "name": "donutloader", "colour": "#4b5532", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834345, "uuid": "1e29e706-f616-4968-8f7d-7ed575725198", "comment": "Malware payload", "value": "2de35aa00e1a1af01a46590476060c0a5a59d3fd48b56278d006373eaae81fce", "object_relation": "sha256", "Tag": [ { "name": "donutloader", "colour": "#4b5532", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834345, "uuid": "fd4b7415-14ae-43bf-8282-f4d8f851ee48", "value": "T12153D061F76285D4AB908059FC71A73FEFF0788D8654AECB2359CD416B12A21BF083", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834345, "uuid": "47c38357-6f64-4c4e-9917-d06b14e6ce71", "value": "1536:hepmrOdB5VGtVmadcS7i9u6yeNejY6yFOB:hUmif5VKIadcS7DZW6yFOB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736834345, "uuid": "a917c280-2696-4f56-b106-2382b2e06e54", "value": 64469, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834345, "uuid": "b22346d1-f01c-4803-81f2-4079708390cf", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9956397-d23c-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736834345, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834345, "uuid": "96ffaa6e-ef2f-4a2d-b2d9-476f81be8c16", "comment": "Malware payload", "value": "d9cc019956b5c7f6c3e5b51f2173cc07", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834345, "uuid": "370f7c54-ca39-456d-85b4-f4b39e7d6271", "comment": "Malware payload", "value": "9c84643775f445b083c904f3f3c087c6cad496e07b94703eb7e2d97c3d92d657", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834345, "uuid": "81d7d3ca-a387-4e6f-b31e-f5f5a5e817ba", "value": "T1A0B02B1EC31967805616243001144BCEB40FC0CB40000004012031617C8C07194C27", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834345, "uuid": "2bbd38cb-bb3e-4913-81e4-a39d0406bd86", "value": "3:mKDDf0bbYxwriPA/sriOlwxQVLX65RyVp2Syn:hkbYyriPUsriWwa+5Ar8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736834345, "uuid": "7f38067c-1dff-4348-b41e-5aacc1327454", "value": 121, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834345, "uuid": "bcc3a47c-eef8-4ea3-8fcc-283e9884121b", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4cc2bac4-bb82-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736834347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834347, "uuid": "e39dbbf1-44dd-4722-b98e-daabcc72c740", "comment": "Malware payload", "value": "711bc5b1c7c005ac9f08a243c10cd49b", "object_relation": "md5", "Tag": [ { "name": "donutloader", "colour": "#4b5532", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834347, "uuid": "274e08c9-dcd4-448d-8167-42ab8e47507d", "comment": "Malware payload", "value": "c790ac43526a07826b2090ca22b1a858386a3c88fc4e3c01974c5f3798e4d4c1", "object_relation": "sha256", "Tag": [ { "name": "donutloader", "colour": "#4b5532", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834347, "uuid": "a2fab0b0-fd41-4134-8ecb-be3cebd62d77", "value": "T17363D0E2E6B646D5E7A1C124FC31B71AFFB1788A5510A7CB270C8D815B23921BB093", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834347, "uuid": "14f6c18c-5fe4-4fae-b70d-41de407d89f5", "value": "1536:t3LmxpREfT4zViUCIHP9q3g6R2pucS7i9u6yeNejY6yFOB:Jm6rcQYdKUucS7DZW6yFOB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736834347, "uuid": "1dbcfec7-8932-43c5-8927-867e536c7e0c", "value": 68565, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834347, "uuid": "0d8d57b3-c977-4b9e-9ffb-2537e93c4409", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53a8fc1d-bb82-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736834349, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834349, "uuid": "2948f1c6-cde9-4e9a-9131-8a30ff4a22d6", "comment": "Malware payload", "value": "8310bcb260291c1c64a1a728a738a9c7", "object_relation": "md5", "Tag": [ { "name": "donutloader", "colour": "#4b5532", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834349, "uuid": "117b4a12-f2ab-4aad-9777-78c61a348c7d", "comment": "Malware payload", "value": "8ce12dd20c9d63bc74610c6ad5cc8d5f0f0e63d25f0106c666397a55e2a47807", "object_relation": "sha256", "Tag": [ { "name": "donutloader", "colour": "#4b5532", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834349, "uuid": "16b3a85e-b839-4648-8db7-aa6bd90e321d", "value": "T1BC363329FE04E697F7F1F14CD02AE502F229BE051574CB18720EFB97A5B6B80A55F0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834349, "uuid": "a4158d34-1868-44f5-bfb6-31633b16b263", "value": "98304:EFnZQExiscLXdPk345Axbo0nWM/7kbWpfXuveORAXS+nHTnew6s+P:euOOLXBE45P0nDk4vuGOaXS+HTewH+P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736834349, "uuid": "e1f3713f-c80d-408e-a3d1-cebb5e4c3527", "value": 5200853, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834349, "uuid": "0ddaa599-dac0-423d-9823-c1ebfffb69f4", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac657c53-d23c-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736834350, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834350, "uuid": "a4c12dee-b949-46f8-ba20-09d2b62ed083", "comment": "Malware payload", "value": "9a11be57de5c7715304bea221f508f4e", "object_relation": "md5", "Tag": [ { "name": "donutloader", "colour": "#4b5532", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834350, "uuid": "06ff3620-6d65-4d92-9ebf-eb26928b306d", "comment": "Malware payload", "value": "36b7fc3cddc3b71096d3f9893a11e8a530c0e624dd7d02e73e2c805a6089cdb4", "object_relation": "sha256", "Tag": [ { "name": "donutloader", "colour": "#4b5532", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834350, "uuid": "b908c9c7-0c4e-4549-89c2-7451ae26dc69", "value": "T1C8D53355BBB462E070F7724DBE68A6EA580670BCF131675332F819D10E670A6E12AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834350, "uuid": "12fb454b-635b-4620-ad06-863c12817fa8", "value": "49152:ENrpVDhv2oW5NzRm+v3sNizsbV5qsAYdwbTpvcIjjhF+wYiY/xlWvM4:EDV8LzIjNimVvSpvnpFGikxld4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736834350, "uuid": "ee03b881-f791-401d-822f-2f95feb4fa52", "value": 2807253, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834350, "uuid": "adcb628b-61dd-4700-81bf-ea183139a6ff", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f2e80bb0-d23c-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736834468, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834468, "uuid": "0530d329-821b-4e80-a303-57fec7f0f7cf", "comment": "Malware payload (Mirai)", "value": "47bd984ba3195843c022415ae8863992", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834468, "uuid": "ca0576b5-8424-4316-a729-6e4a004e7d56", "comment": "Malware payload (Mirai)", "value": "56fb1da47554266f943d515380c7d11392e8e2906dbb5b54ca94c4c9100e585d", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834468, "uuid": "5a24ae43-6960-4260-b028-d7611051f805", "value": "T155119BCE2D70755A0844DDC426A19840BC0AFEEAD4969B4EF5C8CE7D56C8B14702EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834468, "uuid": "e9128382-7423-480b-a964-9e1e5103bd50", "value": "24:Kr/yQInJRNIyxk2OKUX+DwZlsu6/NedeXn:m/UhlOiqNmNwqn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736834468, "uuid": "9d0072cf-c0eb-476d-8682-564d0c8910a6", "value": 862, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834468, "uuid": "bc903015-ea77-4657-a699-f6f165e73ff1", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99996c22-d23d-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736834748, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834748, "uuid": "91db449b-2b0c-47f1-98cf-ede591fe1d66", "comment": "Malware payload", "value": "5ff68c70ae29eaebe78d6ee070daca1a", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834748, "uuid": "8feadd23-7ecf-4881-88fa-1dbbdcdabec9", "comment": "Malware payload", "value": "3a55744a7c0bb013caebe4f305fa2b5f3cf7f69342dbdbc1d2eefb0b8e08e9db", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834748, "uuid": "3d5cbbf6-7d0c-49b5-9305-cf78afc3aec6", "value": "T17A8533820CB34DBBC40AAFFCD80753B41E3429951CE0EE66466CA3E6ACFB74585E95", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834748, "uuid": "541f893f-44eb-44bc-afd0-fe9fa20da9db", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834748, "uuid": "57a4bc50-6f07-4860-b370-b3f3131015f3", "value": "24576:BNtgFCn3kVuyawM5/ImbIW+Hr+o4n8AzeTAsUNvXqgmIjvTPFvkzhCAi3zGgwWmW:BNtl3kVtM5HIVQogXDZB+M3mW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736834748, "uuid": "d031cfa0-1de2-4915-b69c-33f2e03103d8", "value": 1813504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834748, "uuid": "efaaee29-1eb2-4df7-81b5-05dab54a40ce", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be362c06-d23d-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736834809, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834809, "uuid": "1457951f-5bb0-440c-8736-e17772301614", "comment": "Malware payload", "value": "71f74d5ba96a88ffc15b44619abc4c29", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834809, "uuid": "245bb748-84db-4e74-8f6d-ae3aab484e8d", "comment": "Malware payload", "value": "8d0ab5ca435eb84873e60d6f881860633de7722005ceae6510e108eb29fa9274", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834809, "uuid": "118bc92a-7766-4ed0-830a-5d5f4728d0c7", "value": "T1BE8533660F22E466ECEE7737E4B71056EB2CB1220E226CAD71141D266C0FB777CE64", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834809, "uuid": "3231454a-88eb-4043-b1d0-e20a9b92a60c", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834809, "uuid": "7906bdcc-c758-4a09-9e18-c023c194a313", "value": "49152:qK6lruyytlfJdicqLw0F0rauQ8oKabXNGKq6jQax/:qK6XytnEcqUuONttzm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736834809, "uuid": "20f41017-3338-4494-afc9-537cf99673e9", "value": 1755136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834809, "uuid": "e3b3dbcd-0ed7-4967-a276-ffc7dc525369", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d691ee1-d23e-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736834969, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834969, "uuid": "9414c40a-6875-4933-a53f-574cb94b07f2", "comment": "Malware payload", "value": "702f23e08d9eb7fc77760a8e15b5bcb6", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834969, "uuid": "653a1ec8-731a-4dd1-a212-5d8634f77d3f", "comment": "Malware payload", "value": "ffc289bd758290802f7fa01907866666aa5358a7c60a51f88ba60e7d1c0a8fe0", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834969, "uuid": "8ed6fbcf-9b42-456f-a997-62da41a250f7", "value": "T19C063317B884C139F166C830299698BFAA7B52EB86715DCC77EE254DCF225108C87F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834969, "uuid": "5f665111-ed81-40bf-9639-95d9396e2a89", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834969, "uuid": "0f04196b-0fbd-4123-8cc7-9e69981e1283", "value": "98304:4AjJRB0GedlQIF/eWVqlrVny22epnZc4QuIKS:t1RBwj/b+cr8W6S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736834969, "uuid": "b5a991f7-0347-4d5d-882f-a805b50001a7", "value": 3679911, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834969, "uuid": "d5e5e623-4f49-4785-8cfd-4864c9c6059e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2000584f-d23e-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736834973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834973, "uuid": "d2ecc2b9-24ca-40d8-b36b-4b82a047b3c3", "comment": "Malware payload", "value": "10048ddc3e072e0b1acb6d366a53c69a", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "This_exe_triggers_specifically_to_cobaltstrike_c2", "colour": "#e63640", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834973, "uuid": "62eda32e-1fe5-4889-a32d-e62a3a53bb9b", "comment": "Malware payload", "value": "0648a72c41f60fe152d29e683f7590177bd62934137aad39486a1b7c6521c803", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "This_exe_triggers_specifically_to_cobaltstrike_c2", "colour": "#e63640", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834973, "uuid": "d296b733-5617-4c37-a795-4586f5a89452", "value": "T1EF34DEB7D2CEFD02AE6028AE9E25263EBB5CED95EB44064745453E1237F892F7240D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834973, "uuid": "87f1cd34-14c7-4db0-ab4a-c3f56ecd46cf", "value": "6144:fIwjh7K1Q5gFM1RM0naomkGPvvvvvvZqqDAR7j:A12geM0AxMR7j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736834973, "uuid": "e0581531-d779-4e7d-855b-78b5b7d0fd42", "value": 239704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834973, "uuid": "1016cd20-b492-40e0-8c7b-4cab034b03ee", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a6622d1-d23e-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736835018, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736835018, "uuid": "174fa537-5b94-4c5d-a471-9f6e9cbacdb8", "comment": "Malware payload", "value": "e92c42ec56f69deda86b04c0b4c5964b", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736835018, "uuid": "046b274d-cb2c-4a32-9294-b206fe2a6b57", "comment": "Malware payload", "value": "7adfa646910a700b3027c17a87f53a8b4b99997f14a74131d0939d9c90d17935", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736835018, "uuid": "ca0f93ee-e904-4e2b-97f2-32141c5d432d", "value": "T105E423E7D34369AEFE2533FC5F9E96A81132C3925C7133DCADA1270A9885A2420D47", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736835018, "uuid": "3e592327-9d5e-4897-a6af-33294d591202", "value": "b24f60178a02b1ca585e0f029e71eba3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736835018, "uuid": "49564633-344a-4161-87ce-af2d091c83be", "value": "12288:uIIZzTopKfBU80Tr/sfVapJflPQ00LC2Z3MqP5xvBZTv698Ven7RpgcGYSt1+BEp:BezcCm80P0kJO00LC2lM85pTqc+lpfvq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736835018, "uuid": "71f75d7a-e819-42e4-bf54-cfda8061b3e4", "value": 699904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736835018, "uuid": "e22e424a-3b7d-4149-914e-39141cbe8615", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93250d40-d23e-11ef-856f-82aee05be84a", "comment": "Malware payload (Xorbot)", "timestamp": 1736835167, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736835167, "uuid": "eac67a0e-56a9-4ed5-ad7d-0bbb8f2e0bce", "comment": "Malware payload (Xorbot)", "value": "c66b7996c9f25b4728c4a899ac38cce7", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736835167, "uuid": "4cc90b0b-5c96-4836-beb4-f71cd71b84f2", "comment": "Malware payload (Xorbot)", "value": "6413f2553a4cb546d8e0a703f40f4d0bc177c15aa53535f379a0baac118ef535", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736835167, "uuid": "890b4549-4f19-4eb1-8ae7-8d7b1f65e349", "value": "T1732223C951A12D3318458C2E69F2E99CA18752C5CFC737C9DCBA2FA6644CF17BD0AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736835167, "uuid": "8729f32b-a706-449f-9878-c0638347ade4", "value": "192:tLDDEwquf7X88dYWDFzwEwt1gml5BwEwt1Hl56LDDEwHf7X88uz:tLDDEwquf7X88dYWDFzwEwt1gWwEwt1B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736835167, "uuid": "7b819fa4-2278-4bb6-9f5a-03ecc03bd64c", "value": 10494, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736835167, "uuid": "bba90122-8c6a-48af-b27d-847f74920f4b", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cd7e9705-d23e-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736835264, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736835264, "uuid": "3660a9f3-b8a4-4669-8d41-036af5866ee4", "comment": "Malware payload (Mirai)", "value": "ea06329ffac0d63e9479c360a7e7544a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736835264, "uuid": "59a73adc-e6a0-4ce1-a162-b0afb3f09105", "comment": "Malware payload (Mirai)", "value": "008a8b8f339f02d5ea4fef3a6ffd3375628ce8f03fc14376fad81075bd4c8628", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736835264, "uuid": "fdc6c9b1-3921-4806-96a3-b4a46208747f", "value": "T161F2E060606084E4AF319CB1EA209B5759BC8EFC99ED7A0316384B546E8DD41B1FFC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736835264, "uuid": "def8c4a1-2575-4677-880c-a232b69864c4", "value": "768:DNhcyDRe8NCByuGu2yPorO8zVjHEOL5Zmyb3uXhqAnW1VrU9q3UELng:phrVewnu2K8zdkOLTbGqAWb9Lg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736835264, "uuid": "31f37649-cdc3-4954-a2ca-abf8567f5bce", "value": 35732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736835264, "uuid": "13cf6e38-498d-44e8-a3b3-204d634612cd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8034ac9e-d23f-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736835564, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736835564, "uuid": "136445af-642a-44df-919b-f0fd14840702", "comment": "Malware payload", "value": "c4fdc9f61139baac8a0565924907d121", "object_relation": "md5", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736835564, "uuid": "249da81c-4697-4dba-96ad-34f2ad5568bf", "comment": "Malware payload", "value": "486df3ba85e52d8327ff21a2bd5ef930b044aa832c3bb7b27e2c8426e0e30280", "object_relation": "sha256", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736835564, "uuid": "285decaa-29f8-4c48-81f0-49db514afc1c", "value": "T1E30633519E87837DE8A7D8340DA3C48481EF3D1E237425567AFC7A0D0FF52E6A5286", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736835564, "uuid": "fdedf66a-705d-47de-afa3-e77cc4e4d88f", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736835564, "uuid": "ad0c3f36-7498-45c0-9d2e-a7ca7b35bb46", "value": "98304:499a35aTOwMqk1MHjuybHdAMksxWjBXgrrAKS:69a35cMJKHjuyb9fKgrr9S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736835564, "uuid": "dfd41311-d8df-4d99-871a-a8475bc48d68", "value": 3655446, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736835564, "uuid": "53b310d2-631c-436b-92e2-e47f55f73539", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f378eb6b-d240-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736836187, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736836187, "uuid": "90ebbdc4-92b4-4a30-a8f3-c80036273696", "comment": "Malware payload", "value": "009502ea9664725f8c0499a8f3c483a7", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736836187, "uuid": "71bc368c-d669-4a44-a1dc-11cc48094d7c", "comment": "Malware payload", "value": "85118bd5f2ea4e7509faf89805327ed5c4f360048543152dc285909f2825b00e", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736836187, "uuid": "ecc2c3b1-5a08-4bcd-89a3-9b551cc59eca", "value": "T19024CE60E4B0FEA1AD7786F4B1024B539B2E0BBE05599493000D9DF9F714BA491F8F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736836187, "uuid": "4a2a153f-899a-47f1-bb69-23988069ec5e", "value": "6144:saWsFUXiVoqP992BuARkDKIq80tBp0PLglBgzW6vs:siPVb720mkDKnhBWPLOuzW6vs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736836187, "uuid": "34a3923c-8a1f-4c38-87a5-8f90333fc924", "value": 223312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736836187, "uuid": "a727aacc-e7fc-495e-ac4f-e1fa3e39cbad", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9fc39903-d240-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736836290, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736836290, "uuid": "8e47b596-1188-463d-9a52-7446164489cf", "comment": "Malware payload", "value": "3d9b7619e3d9b37ee7855d0ad0d3f8a2", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736836290, "uuid": "497a8649-2954-48c4-bb31-a6bb4d8037ab", "comment": "Malware payload", "value": "890a7f126aecaa13f7398320a13e3c4af847089517d5e209210a3674b41643f9", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736836290, "uuid": "f2751d63-8672-4ddf-8623-0d6e5f573e02", "value": "T1577412B3A5A8BD80CE090EFC43A5A0A14CDAFEDFADCF6523C56B392574C511538F06", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736836290, "uuid": "b3b1d04f-cc09-448e-a670-9b02b977f6a4", "value": "6144:RUW5oPlK6hzm142eK7ssPnI6hzirXbCxgiKTuWMJ5jAUYs2kTO1v:4muLK7L0n6gfuWMJZvCv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736836290, "uuid": "b6d7dc5e-e923-47c4-b912-c20dd4d4bca7", "value": 362445, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736836290, "uuid": "900e77f7-89b4-43b2-929e-c93edca031f1", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a2726c0-d242-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736836896, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736836896, "uuid": "49718a3f-869f-4efa-9fbf-4f8f196271b1", "comment": "Malware payload", "value": "cf601df1e49613d64869171295a9c6f4", "object_relation": "md5", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736836896, "uuid": "d772a842-3b3f-4eaf-9a78-da556dbbc9d3", "comment": "Malware payload", "value": "86c90996ce06405fdb007aaa4c5273d7d26591d2fa6a2d807061e285c0317ed3", "object_relation": "sha256", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736836896, "uuid": "63d50903-6247-4b8b-95c6-ed79c7c5beb2", "value": "T1781633F6B0E56021A4C34F8A485C27E376C8A777212544EBB7B3B8BFE1178659CE76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736836896, "uuid": "47b7f677-7107-49a9-9753-0de48d50cfca", "value": "98304:0rpNtS0VssZROKOKakldlxm7NokpQDJu7XVlY0BtVb4tEGD6:0pN8UfOjKa0lxYNdRXV3W6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736836896, "uuid": "5bc14fa1-b32a-4ecb-aa11-a6a45a11aec8", "value": 4291072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736836896, "uuid": "a4689eba-a201-406c-a75e-ce9ae88ab7a6", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b836339-d243-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736837194, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736837194, "uuid": "f1b6958f-418b-435f-806d-d49eca4f4d54", "comment": "Malware payload", "value": "9a219931616fc8a4e9c0916fa5acf7f6", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736837194, "uuid": "294afaba-cc2d-4eeb-b581-b2a43a41135f", "comment": "Malware payload", "value": "dfce6f10011d290bc14b47d8aec79387f499ea27f10f84800e235ebb5cdcfc4a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736837194, "uuid": "9d0afcf6-2a44-4325-8540-0d29c28a8292", "value": "T1B234BD7911D98896FE5043F9F8734E09DC878EE23CB4139A998013CF31652A7B25A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736837194, "uuid": "d46262d8-e7d2-4b9e-b708-eda302e986ed", "value": "6144:a/t/NKNt7F7CUSBsMUGUwy74EtSRAfA9c1RP6O:ot16XCUfw0jtJfJbl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736837194, "uuid": "d60d31bd-c427-48bd-b144-37ce12b84dd4", "value": 239694, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736837194, "uuid": "63988866-58b9-4c93-861c-0aa652738735", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b44a31db-d243-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736837370, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736837370, "uuid": "208f5653-ae0d-4a5b-b99f-f4b1c65d6b31", "comment": "Malware payload (Mirai)", "value": "fd05fc4381ed6cfab942124055dfe422", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736837370, "uuid": "9cda6aa0-1622-4033-815b-462ddb0d5b10", "comment": "Malware payload (Mirai)", "value": "83928de39d792989addf3be487c0d688360973e80fc60c55e219396b09e5cf8b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736837370, "uuid": "73c500d7-5272-4309-8bc7-7879e906879d", "value": "T18FC3AEABFB4B0551C86206F417CF4FED7E1321C15E2B89E76D2A257A6D750CB4902F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736837370, "uuid": "495b9b7d-c26b-4920-a945-b4fe74642647", "value": "1536:rb2+EPUyTU+VQVccxbWgl8y8jQm4kuC7CyvFPrFqlQgg//LWo:PXEPxA82WLUXVC7tFPrFqlQgg/q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736837370, "uuid": "081e3086-0ae2-4eee-b8c5-9e0e25e0cb1f", "value": 124184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736837370, "uuid": "ba726d03-9f0c-4687-a1dc-c657624d39c1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b0152ff-d245-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736838106, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736838106, "uuid": "cecd0447-8c40-4d05-9bfc-4a057a8b3298", "comment": "Malware payload", "value": "4e1cbadd7d0cb6ca21dc664db3941cd0", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736838106, "uuid": "6fd955d7-e15d-47cd-aa8e-fe1773aa7942", "comment": "Malware payload", "value": "8d97ba46bab359eff7a0ff7a7c758c464c938698d5e12feac137e01caf940194", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736838106, "uuid": "6202efae-e28d-4087-91ba-17cb93c24bff", "value": "T106259E0273C1D062FFAB92334B5AF6515BBC69260123E62F13981D79BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736838106, "uuid": "b24d28eb-f5a4-495c-8dde-9e694bb3745b", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736838106, "uuid": "2e55809c-0509-414c-9475-6e4e849245a5", "value": "24576:lqDEvCTbMWu7rQYlBQcBiT6rprG8ahOJ:lTvC/MTQYxsWR7ahO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736838106, "uuid": "8a5a7915-8469-4efc-85f3-4bc3d528ee5d", "value": 969728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736838106, "uuid": "cacba0b3-b4dc-43b1-88b1-ec16ef9edc0f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29f9c3c4-d246-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736838426, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736838426, "uuid": "e5c0d390-7d37-4ce7-bb25-cde363da0200", "comment": "Malware payload", "value": "28ea1c4f19651ab6cfd1828943bd7913", "object_relation": "md5", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736838426, "uuid": "0bd39be5-b29f-4241-9cbc-19e20dfc621b", "comment": "Malware payload", "value": "9700962bc78cf83f0d780d391cfb1276490b0972d826424cd3631bdf78b24968", "object_relation": "sha256", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736838426, "uuid": "22438fbf-b5c3-48dc-836b-6dbe2d2f992f", "value": "T12F34F2832859D67CF72173458A54A412A6BFF223972C4343F04EA8CD5F70BDF964B2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736838426, "uuid": "8672d227-9f4f-4555-874f-6d6d82abce3f", "value": "3072:A8gVmI3b0mgfmWu+Pee9VOv5iG5sVhQ30Wk+70wgA1A:A8gVqee9VOvM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736838426, "uuid": "174a497c-3696-4540-9095-6b13b63062e0", "value": 235047, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736838426, "uuid": "49958f92-d5e8-4613-a840-b970656969d4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e9a8c54-d248-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736839266, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736839266, "uuid": "8c96b4f3-33b3-44fd-9927-8a62653217d1", "comment": "Malware payload (Mirai)", "value": "3f8602925be76474b116cf4b9255aa8d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736839266, "uuid": "5c033e02-6c20-426e-b755-2180a14b450a", "comment": "Malware payload (Mirai)", "value": "bca747b28cbc1fdaea45449dbffceb139cdab55ae7e0a931f07162139526e976", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736839266, "uuid": "1aec7b3f-791c-4ff6-b98f-9c25704dccea", "value": "T1E152D656B29B8D3ACCD4463B05670A794372C0E68D961F1BA10C72B52DD36DCDE26F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736839266, "uuid": "5eba1113-76fe-42e3-a0f8-af21c503c7cc", "value": "192:nBwGIxbwFucX9FopaJRfYXh5pawIUBh7wLr7INMnUQaZ:nhjL+XXI0qLr7pZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736839266, "uuid": "f9eb40be-dd74-462d-9984-46448816865b", "value": 13488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736839266, "uuid": "6a610928-aa59-4a01-804c-bc0cd798bf83", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ebf4a94-d248-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736839266, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736839266, "uuid": "e96ff8bc-7653-42d0-9530-85b5939f86b7", "comment": "Malware payload (Mirai)", "value": "293da6a5a06c7467b2c29991b21a1e8d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736839266, "uuid": "cb5739fc-f72f-45e1-9ffe-580bf27de1c8", "comment": "Malware payload (Mirai)", "value": "c30f44866a0407e81566d9d786aaf757e64f2c8d92f0857541b53bb8da3c7153", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736839266, "uuid": "84ce5a66-e64a-47a0-b1cd-5651200c5b13", "value": "T1B8737527A3548676C6CD333046F23FB56B64F970EDE1921BE60A1B76A4D27240C3CE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736839266, "uuid": "62784de9-df1b-4760-8c78-83535e5bf267", "value": "384:GT8ncICEezCZGhIBb37euC7z4V1WhirClS:GwclZ+ZG2F7M8V1WhirClS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736839266, "uuid": "215c60ca-b798-40de-8509-ed386d0b2705", "value": 74312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736839266, "uuid": "2e3f5366-ff15-4ad4-a4f9-e1c5591d0c8a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66dfed44-d248-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736839387, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736839387, "uuid": "4949e0a0-605d-4f9e-bb92-72cdb7c37549", "comment": "Malware payload", "value": "add02bcd43fb181b73ce656897d7064a", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736839387, "uuid": "2068cd5b-c427-4e2a-b300-af683d1853e5", "comment": "Malware payload", "value": "72c97a5834cde00348754ef7beb8afcc799c35a97adf73c80e5905b1e8197ff2", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736839387, "uuid": "ebbf5af2-2e23-46a8-904d-8c800f37aa20", "value": "T121F42315AFA4BC0E1B5CE69939EB6C912D670BDC561DF2BFA4C0F8B74D95B80002B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736839387, "uuid": "15f59519-a49a-4eea-bf06-e324987b0391", "value": "12288:SeIiCt2nvYF3gk5odkLQ273Sdrvb6JoNf3MhB+yhyoB8J9W1U2XHAEBk4yqZ12mi:jWOvYDJ02TSdrvGmNfm+8yoB8J9W1U8u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736839387, "uuid": "0a5018bb-8d95-4035-bf73-bcb1341b09a3", "value": 782676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736839387, "uuid": "2fa2d0f5-bb5c-43b4-9562-b5a6b3f74ff5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f81da17-d248-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736839402, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736839402, "uuid": "2445bf8a-1b14-4309-bf60-da81c842cf8a", "comment": "Malware payload", "value": "941d8a51c305478097e52dd6b4c06101", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736839402, "uuid": "e5a78378-dc81-4f66-a871-a11d9b5cad9b", "comment": "Malware payload", "value": "c46f26a489222fa6e949fae2543c3988acff1f6b042be77f3f6023e167d24d26", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736839402, "uuid": "fe8246bf-1b5d-4e5c-82e4-cc97f33c863c", "value": "T15685331FAEB952D7D4C88B36C4D74340BC34A38A65FC5F4D93A4B5B8467A3896E70B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736839402, "uuid": "5f7486a8-7faa-47a4-b5c9-df7c0010e823", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736839402, "uuid": "3abc4ce7-ad8e-4663-932f-39dcb8d5c5c6", "value": "24576:8B1wYlP9c/maek8c1INQ3q3xA2iae/4FIo0xDSBrm8lCuhKbH5frU7A0ISFIg9TO:8B1wYZ9M8WIGrtdhvxuhKr5fkT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736839402, "uuid": "262f0b8c-ecc2-46c7-a956-dc3fc5082390", "value": 1765376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736839402, "uuid": "51f0b7ae-8f21-4014-9bf8-41d62fd89829", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "318619f0-d249-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736839727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736839727, "uuid": "74a021e4-a4a0-49c3-8e73-c4bb3b0c32ad", "comment": "Malware payload", "value": "1135932b8ede33be9449e2b17fdddaf4", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736839727, "uuid": "c50c147d-b0ff-4957-b372-361743c9f52c", "comment": "Malware payload", "value": "d81218fcd98748261676487da7ddbb56883ee6c5df51eabc36da30054a70a902", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736839727, "uuid": "d0dc0027-6d69-41e5-81e8-95543196e9d8", "value": "T19724DF0EFBD722272A767374E1CEA182A3922B73B7647F11190D0E1D8BD177B6A454", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736839727, "uuid": "403fa393-b160-427f-b2bf-b7cd951d574d", "value": "6144:qiDZeeRwLG3zOAEtxSvU+JmOt3RC1xM9Lfe0FWfPDw:vrzHEtELvtSnDw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736839727, "uuid": "869afffe-3d9b-4d14-b638-d779a8f312d3", "value": 213565, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736839727, "uuid": "5226b9a9-05e3-4a7b-92fb-2d398b5824a9", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c9c1c1f-d246-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736840019, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736840019, "uuid": "cd41ed17-7f0c-452b-beb2-d5f75ec87f68", "comment": "Malware payload", "value": "b6a72e65c306b05451900de26a21f6fd", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736840019, "uuid": "00f67e34-7f9b-46f7-a3ac-db72256a09c8", "comment": "Malware payload", "value": "bbb38a73b72bf0f0682f042d3bf2f957e4ee57312d42940199aa44f9cb59a51f", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736840019, "uuid": "ee3c77ce-5b07-402f-bd69-215a0ffe0fe3", "value": "T1E1853322B8A6D070D15A5AF980F38215A65CC1D52BF3BB6FDD5022B6C7FBB4CF5028", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736840019, "uuid": "065f7ab6-8ece-460d-8a5b-8a5c7cd82374", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736840019, "uuid": "7d6a4a58-f68d-42bf-bbf7-b2ab04de105b", "value": "24576:jt9eW3TYqDsXseOAjG8tYEoAC5KemiGztwVLsIAtgHyxYi9AjXzY/GqtJogpN0xU:jt9e1qsVON8tYL5PBsIPHyxtiqzoZiV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736840019, "uuid": "e282ea00-25da-4f0b-9d3e-c93fbdd69c43", "value": 1774592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736840019, "uuid": "3eb235f5-73ae-4845-99d7-ae7e7133e924", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53775738-d24a-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736840214, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736840214, "uuid": "eafed46e-42c1-4ad4-a6ea-b7b9ccf10331", "comment": "Malware payload", "value": "174a3c93185d522bf56a7ae879add920", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736840214, "uuid": "185929e6-e77a-449a-9eb5-f2321fbbded9", "comment": "Malware payload", "value": "eb1aad03aed4a83b43e79414a63a9976decd848e5b035701f4391a2f3bcb9a72", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736840214, "uuid": "90d7530e-0c91-4ca4-ac48-927d44e3733b", "value": "T17156334793F84912E9B49371CDF603F31A3F79601639CA2A675AFE621DB2024F1653", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736840214, "uuid": "5ca75fb2-4b59-4ae4-a4c1-c524a5858bb4", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736840214, "uuid": "53f445e6-0d84-444f-99e3-13a692ac2d33", "value": "98304:nWGbZCnpVNZ2doCwwM+6zgAJjFQ0PIGyJfmm0Y7/ChV8Dcs4g3PMpvKzvI:zI7Z8oCP60UWftKVwcI3G6v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736840214, "uuid": "b3fe48ca-3b1b-4055-97c3-432ed652896c", "value": 5971456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736840214, "uuid": "7fc13bce-c7c0-48b5-ba6a-3bd659e3c87d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2843d226-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1736840265, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736840265, "uuid": "364de171-5f2b-4ab5-9deb-99cb80ed9f5b", "comment": "Malware payload", "value": "5ea3839ef4effebf0c57e18742d1d284", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736840265, "uuid": "c77dacb1-9e34-43da-bacf-0812c83d010e", "comment": "Malware payload", "value": "64d671e954c370655d61855ba22381f9bbd929ac713322765686619cebeac480", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736840265, "uuid": "76223c0f-2f4a-4afd-acd0-3dba1f397a9c", "value": "5A831229135414EAD62681F1D3FD1F84AD591F69CEE2EC157C12BC99EE333AD2CC2618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736840265, "uuid": "c8d1cc6a-2926-4f5a-9e1a-607761cdeb1d", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1V+uo:yYI0ARqw1qAEv7UIFM8oJorFquyjkRke", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736840265, "uuid": "52518d73-1dfd-4cc3-a1d7-8c79bd9f9961", "value": 83984, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b33bd12-d24d-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736841569, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736841569, "uuid": "ac8d8587-2d0c-4429-be71-43bc27f3942d", "comment": "Malware payload", "value": "5128e1e113a758ed74c81f0a8d2c2e4a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736841569, "uuid": "341ff7f3-2b14-469c-815e-10c326e9a706", "comment": "Malware payload", "value": "2b83fadcaccf00fdcda24c4673bd8af9aad40d8f2c6e7edd7bfff99e0445a162", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736841569, "uuid": "82863ee9-119b-4791-a71f-56f5fdccd494", "value": "T15B063352ABD4C7F4E17F4B706996CBE321251E5B1C2C0C8DF3A488955B2BF85884BF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736841569, "uuid": "0d9328ae-1a56-45d3-8b58-a3595bc8cc29", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736841569, "uuid": "7ef59830-6118-4884-abc9-290750e060bd", "value": "98304:46bSmLXYORQnaxf6qQAPW/+dNKK5Zt/BunKS:RLXYwTQAUCKwP/3S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736841569, "uuid": "8f7c0c8c-7655-42f0-a1b8-c2e2ba4f97aa", "value": 3654039, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736841569, "uuid": "cf7c96c0-9ec1-4589-b339-533444ae86c9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eed42113-d250-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736843051, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736843051, "uuid": "ed06601f-97c3-4b94-9d29-05edc053fbe2", "comment": "Malware payload", "value": "0eb32157755d731c81dfc277e4cc1396", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736843051, "uuid": "16ac1124-a8b5-47b9-a34d-af3f0998738b", "comment": "Malware payload", "value": "71ce11f5c642973395a34e4402d83f4b0d448fcadf91c4cf43577ec81b45d086", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736843051, "uuid": "2a158945-7db1-4399-beee-919a11d89747", "value": "T1AC1412E58107C040C6264EBE7E507096BA247DBC8842D1CA33D58DB755CA4CE93EEB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736843051, "uuid": "1d727179-22cc-4b46-9b18-ec078ae82718", "value": "3072:/Jfaqg0UGkCGsumKOHG/ydfwrsvA4yq6XzsTVyNDecN/zbWmqkbAyt5+oDG:JDgtbSKS/m1jsTgVNr1syv+0G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736843051, "uuid": "707369d6-0562-443a-af7e-eae3b1fa9503", "value": 205770, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736843051, "uuid": "c18920bc-6597-493a-924a-a6fb0ce06da4", "value": "application/java-archive", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "099c4558-d252-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736843526, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736843526, "uuid": "0cc4d5bf-1e3d-417b-b50c-510a38247aa7", "comment": "Malware payload", "value": "e8249de41c38a81d16689acc94785bb2", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "telegram", "colour": "#1cf401", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736843526, "uuid": "55371989-3639-475f-9ea6-a67ff9375cfd", "comment": "Malware payload", "value": "f504cd8ae6e1155d409836e5e342bc21f428b4af5cbfa43c81046022a80571ff", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "telegram", "colour": "#1cf401", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736843526, "uuid": "bd530438-74dd-4d2c-ae09-0f510fd1c9d5", "value": "T1C0F723E7F3205C39D5374632966D6171EA284F24AA22E31F2409B73DAEF32E04B457", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736843526, "uuid": "69d1ff38-ac4e-4e00-86b4-eb9decd8fb76", "value": "1572864:49iESXGjPT9ODzxL1c/7onvyPR+riiSGWmWBVFJ9Aoe:LzWjTMzx14Mna4iBmyQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736843526, "uuid": "3002322f-918c-4a78-84d2-2c25f0231449", "value": 71847003, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736843526, "uuid": "cd384eff-94f7-41ed-a91b-6f73bb2868d6", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6dbce4de-d253-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736844123, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736844123, "uuid": "fbe2d982-bc18-4e6a-8eae-bb68c799e2c6", "comment": "Malware payload", "value": "9593ad93b597c6e379348f45739dc906", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736844123, "uuid": "8c6af341-5d53-4cc3-b05d-7f17fafa0101", "comment": "Malware payload", "value": "fa76e8c480d4c06d00137675a2b2ef2dd2aed3742ac590817d00c376a045d8f7", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736844123, "uuid": "c86d4b69-3228-4e92-9d63-245269a35e9c", "value": "T18447DB8C0EB65EF8F225E01723616BA6E449241FEF453BD8F64D71AC9F04085FB9C6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736844123, "uuid": "eb23afc7-4267-4254-bb9b-ccb4e71ae7d3", "value": "49152:Ubjb0T2gfMtGs+ud5M2Dpd/W3XZTvjpHHplwrj:Nu/MEdS9plw3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736844123, "uuid": "b49d1f25-9af6-4655-99a4-fddc2cad9b45", "value": 25510504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736844123, "uuid": "b47094e3-e242-47d9-b883-d96ced70604e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98d5c8b0-d256-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736845484, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736845484, "uuid": "0c567390-0ec0-4ce6-870e-ac572bd9ab13", "comment": "Malware payload", "value": "bf2937ec95b9375553ba5c93016ce4dc", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736845484, "uuid": "6e2f9d1b-fd06-4ac9-a015-c9abd056b1df", "comment": "Malware payload", "value": "0a67c51c421ab4039df9ea261b235870ac0f9d786dac80e23e7bbfa928038368", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736845484, "uuid": "fe93fa36-07a0-46de-9566-d3a4b48e75be", "value": "T16805B35A8B72D614C4745C38ECD3437130B4ACCD999897F94AEDE42524878F87EA8A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736845484, "uuid": "66368692-0611-43a5-8d16-66cf49b81a29", "value": "12288:5XJHeHijp3V2SOyKVK3K1KgKj6zKaK+13Kl:7+N86cR22vk6l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736845484, "uuid": "f6009b56-db75-469e-a9b2-49697aae6627", "value": 829985, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736845484, "uuid": "2ee22e8f-7b50-4793-9ca2-29845e4faea1", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4b2d77b-d253-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736845536, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736845536, "uuid": "dd0e0bc1-f0a4-4319-8944-05f48e1a0fa6", "comment": "Malware payload", "value": "b319642a9a28cb6592d1a0c1022cd6c3", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736845536, "uuid": "f9c5b982-f831-4c37-85cd-985f2589846c", "comment": "Malware payload", "value": "e29fc59718fe1c6e30f52609e59c21c731326d15d00492894753b244b25eace3", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736845536, "uuid": "0a8df168-e4f8-48f3-a1ea-0be363a36b4b", "value": "T1977412F7A4A87E51CC250DFA828494B01CCBFFCB6C9A1917D5BB396DB8A420179F07", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736845536, "uuid": "ddcc2a32-6f2c-44d0-a046-47040b58668b", "value": "6144:hYiKWBJaKArPfo6hHS9lpPw/P3u6h1SHArRmQVGCMW5j9yoapyfv:lBJaN74RwHUgh0CMWrapyfv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736845536, "uuid": "cf6927bb-383b-4747-bd54-97a54ba35d1c", "value": 362826, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736845536, "uuid": "81392f57-cf29-4660-af64-b2b6811a23e1", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8d35a30-d256-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736845645, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736845645, "uuid": "062ba8ae-a071-4714-8b11-9f4ccacc8331", "comment": "Malware payload", "value": "8b98853f3c38ced2a586ff1770770efb", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736845645, "uuid": "4f3fe516-1d3f-41c8-8c92-b7875b65fa9b", "comment": "Malware payload", "value": "9dbbe53e627096559f6d1b2a71c44a6e72dc4ade57a6add147287f364efceff5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736845645, "uuid": "4dcf8f99-101c-4415-968d-1c1df6e09a51", "value": "T1A4B47C0396E17D84EA298B729E1FC2E8761DF6618E4D3B763229EF2F14B1472D1736", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736845645, "uuid": "5c30b599-da81-4164-b765-91110675bb8b", "value": "34aad785accf00f17a634a5814fb977a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736845645, "uuid": "de16d907-eacc-4ac1-a1a3-2acad85bc5d2", "value": "12288:Uh3wBY83daz2Lcwxvm+SqUbIdgCI7/Jbc3:Uh3K3fvmfR7xc3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736845645, "uuid": "8c8f3abf-d18c-484d-8148-42df7bad1be8", "value": 511488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736845645, "uuid": "7873a0c1-f863-4d5f-ba0f-c848e405f247", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2e3f102-d257-11ef-856f-82aee05be84a", "comment": "Malware payload (Xorbot)", "timestamp": 1736846038, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736846038, "uuid": "07022787-57bd-40a0-ba6e-1c4238d9e48a", "comment": "Malware payload (Xorbot)", "value": "4992dd60b545622088ee57d888442bd8", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736846038, "uuid": "ade3854e-33ee-47c3-98b3-cf72f5c149a0", "comment": "Malware payload (Xorbot)", "value": "53bc7d55b04eb6e894528d4feee87095334688a5637271c819dd7a0365763b74", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736846038, "uuid": "44302e65-f601-4897-972a-ff29b509908b", "value": "T1A622C0CE13D2A038C8959A9D2BE5C685F05175C0E8E33F88D4DF5EDC920CBD5B899A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736846038, "uuid": "733c2acd-15ff-4f76-a017-559e32c75c15", "value": "192:JcwAB1dootb/nK61rm32d3B1dooob/nK6BN:JbAB1dootb/nK61S32ZB1dooob/nK6H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736846038, "uuid": "20309c11-b859-479f-910f-df64774e8900", "value": 10578, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736846038, "uuid": "fe4a7f26-139e-4cd2-9514-38acbb3233ae", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "835f7d59-d258-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736846307, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736846307, "uuid": "7718f71a-6f23-46dc-bae3-152bbe720b44", "comment": "Malware payload", "value": "452972c0a446f2a0a6ce81dfefef6547", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736846307, "uuid": "ae30375b-630e-4727-9c27-0f0b43be137a", "comment": "Malware payload", "value": "292625a5e4dfe49b7ba86ced8b25ac17156dcc6e1bb1464b274c8f37836b9910", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736846307, "uuid": "5030c5c3-1af4-4970-9a5e-a6cb0d6f8cc6", "value": "T1CC9533E2F992FC99D25C9DBA80EBC3A14F5E8FD3F620382D180D595A78666326770C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736846307, "uuid": "43b5ea5a-548d-4791-b8ea-fe4442ee7a8a", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736846307, "uuid": "ee965a3b-252d-4b2a-bb2b-dae5f0b85216", "value": "24576:jHKR991dX9GuWx8nVyYUe1VJBOfeFArGBsK5DPVx2S8hlC0JLkFv1wmIeykbvVnW:jqR99nsp8njnFAQdtkSalWfLvstgqB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736846307, "uuid": "96f8c816-5650-47ff-beda-7962ee04eec4", "value": 1901056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736846307, "uuid": "214f7ece-5149-4929-8988-71bc6b1e927b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b37c547-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1736847248, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736847248, "uuid": "f2e835f9-83d4-425d-b97a-c4996beb03e2", "comment": "Malware payload (Mirai)", "value": "9a111588a7db15b796421bd13a949cd4", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "DDoS Bot", "colour": "#45785a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736847248, "uuid": "4053df97-d77d-42a6-bef2-ce757260fe63", "comment": "Malware payload (Mirai)", "value": "e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "DDoS Bot", "colour": "#45785a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736847248, "uuid": "1d869060-3a65-429c-8d9d-b521db51aa62", "value": "B2930272135417C5894772B4209409F5363AA265FCBF34FBBF93C66027834BCD49BAA2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736847248, "uuid": "cdc0232c-ebf2-4e83-b2e2-83b5319698bb", "value": "1536:pymLLU1F5kHIrIj0D6rhfd+lK3exiTCzxNtI4sZLi6UEbFEBFaW1EH6t6wfPP/Q:2F+ooxalK3exiTOijZLdUEbFlWPP/Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736847248, "uuid": "dfd3b33f-4c1a-4aa4-8827-782beb3b45ef", "value": 95268, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1736848025, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736848025, "uuid": "c6eac741-9d12-4742-8134-cd58a0eefc1b", "comment": "Malware payload", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736848025, "uuid": "fbc369fc-76b8-4505-ad2b-b4622f5aaa97", "comment": "Malware payload", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736848025, "uuid": "262608c7-514e-44cf-b2d0-73f861fb99c6", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736848025, "uuid": "ae26108d-6094-4c8a-9db1-990ad92129e9", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736848025, "uuid": "a8c8175a-36d0-4fb5-84d0-93628d50b60b", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1736848146, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736848146, "uuid": "2b788c42-e63e-4b9c-b0f3-5ca0a2ecfc57", "comment": "Malware payload", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736848146, "uuid": "a2381da5-3fc1-44fb-9c43-81a53dbfb014", "comment": "Malware payload", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736848146, "uuid": "2e944754-7e6e-4bc1-8cb8-6afef1a6f62d", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736848146, "uuid": "710cc066-356a-495a-9014-4f730d2dbc20", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736848146, "uuid": "78cb3619-12ee-4685-944c-4b42e44921b5", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16289159-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1736848701, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736848701, "uuid": "e71de5e7-45b9-4dd7-a7c4-5dc65221b8d1", "comment": "Malware payload", "value": "aa5fde36cb0e26ac7973b0d983884490", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736848701, "uuid": "629102d5-f808-48e0-b886-8b9646f6df0d", "comment": "Malware payload", "value": "69ac6c1019c3f7133eb97a21b174ba9e40dea7c36a52170a5a8353d28bdffab0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736848701, "uuid": "809e384b-24b7-4964-8063-d702bf655cd0", "value": "E703028632953F73D51148F4E7FCAFCA714ABD54EFAA142FA8113A15B07235D24C982A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736848701, "uuid": "7769a9c4-c21e-4c75-9b68-899391b2d423", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTo:yYI0ARqw1qAEW67UIWi7M8gmo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736848701, "uuid": "a0c39291-f54c-49f1-b698-53db89691cac", "value": 40544, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "664f4590-d26b-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736854419, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736854419, "uuid": "77c441fc-d4fc-403e-af3d-d44ccca3b664", "comment": "Malware payload", "value": "8ec424511bde78bb8c9f255555adf0b9", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736854419, "uuid": "022c8c8a-5231-4e85-b078-ee82501b22dc", "comment": "Malware payload", "value": "8fe35ff7d0c004f82af3075c575c8a3ff1116f79667fb51005b6a072a4370e96", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736854419, "uuid": "4f129c52-b372-47d7-973c-2668e86616c7", "value": "T1FD24EF06D64C862C1E1B6D0E31CFDE74C8046BDC0B8B4DEF4E25A7479335A9ED9A60", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736854419, "uuid": "779e7e0f-6e34-48e2-90bd-d066ea90764a", "value": "3072:l5VVrkNyIZRosrZCUf3kT/rVSu3AFM8YMrdVTkFuZQ95HSaoEsCFWkHf:lRYNFZnrZZMTEuQ9VgFb5HSaoEpW6f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736854419, "uuid": "9a6f8bb1-bdef-4ba1-99bb-908719a2e979", "value": 213573, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736854419, "uuid": "7ca136ad-dfbc-4914-a0dc-09e79cb58fca", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb7167ed-d26d-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736855501, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736855501, "uuid": "7f1e4aea-211d-4277-ae88-b9621bf68b7d", "comment": "Malware payload", "value": "0c32cf971c203c9bb0520681dcff9a84", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736855501, "uuid": "ab059d2e-44b9-4360-aaa7-06cf400ab319", "comment": "Malware payload", "value": "7e0c0c444fad45a13d92e4945836ca44ebeda2fd0f92cc1fb89e39aea2f16221", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736855501, "uuid": "515d0494-154b-47f6-88bd-a48deca5d237", "value": "T163E220E345170FBE77CBFFAEA01B9EC014A3218E4D8540922F9B165D587E47C96E28", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736855501, "uuid": "846eb380-d9d0-4b14-bb04-5b76783e913b", "value": "192:GRtQd8n6HLO5X9dCOq76oXe2lOcg+9G3jo6lqiFL+NnC2yxsRSwaHCSvE+0IKgIW:Ib6HLO5z5vohdg+Y3jo6FQcwaZ63XW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736855501, "uuid": "124ffbf8-d7a1-412d-9190-9e36d81b6812", "value": 32759, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736855501, "uuid": "35e70f67-9159-4ca4-98e1-aa9d80a723ba", "value": "application/json", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "553e793d-d270-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736856538, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736856538, "uuid": "bbc66166-2c25-46e3-9aff-ed6387860955", "comment": "Malware payload", "value": "fdcfe2a41d77b19d2b4216b7b3eae528", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736856538, "uuid": "efc55fc1-76ae-4dc8-a0ae-e955c203dacc", "comment": "Malware payload", "value": "d52d8e292c9c50d36607d83763c8e39db64686b95c16ffbf2811f3222b4bd6b3", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736856538, "uuid": "8fcb9b27-468e-48de-a94d-7d9c18a20e10", "value": "T1A3A46C4796A57C84EA198B72DE3EC6E8761EF5208E4D7B763228EF2F04B0572D1637", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736856538, "uuid": "5b9452fd-04a6-42ac-b187-b5315a375cc7", "value": "34aad785accf00f17a634a5814fb977a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736856538, "uuid": "6b328e60-0eb9-4ac0-84b8-0bec81b3a9b3", "value": "6144:ENBgjV5Lxl2CGZojfQXUgGNozNmCysM9Owq3/rI67UQEgT:ENBgp5Fl2CGZsIXUQzydO3Jd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736856538, "uuid": "8018af59-6ce8-4632-9c00-0b510278479a", "value": 457728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736856538, "uuid": "71d608e2-d47e-4d1f-bcb7-c87912c8641f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc365088-d271-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736857140, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736857140, "uuid": "299806bd-3a24-4d75-9fbb-bf43e02ba104", "comment": "Malware payload", "value": "3fa94762da0707c3b2d72bb8c6677228", "object_relation": "md5", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736857140, "uuid": "4a7780c1-0c7e-439c-991c-76e494b99145", "comment": "Malware payload", "value": "d5035ec53133afdcada1c2234807959ba1c28e95a318f928d25d7e456cd62b0b", "object_relation": "sha256", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736857140, "uuid": "4ab98ed8-b384-4ae9-a5eb-e524c377e9b8", "value": "T13306335BF971CCBEF40DAE3D0C75926867694E635A748CDD26D8A64E9E4207022CF3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736857140, "uuid": "8fed92b9-97b2-4b33-a6f7-5ebbc74b2170", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736857140, "uuid": "4aa18d30-5de5-42b8-aa85-23a1922789b5", "value": "98304:4SLbPNDDzhUpE+kpjFfa35vAU304vDVYRy6gePGRgLxaWH1PC+:lbPNlUpVAyhdvDV33RgLxlPz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736857140, "uuid": "8fe29d78-09a1-448d-b38e-99a41da8262d", "value": 3676698, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736857140, "uuid": "7074f8c5-703f-470c-a7d8-ddc48ce306d0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e22acb2-d273-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736857868, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736857868, "uuid": "5cd3f288-8737-42df-b0f7-ce2f0160665e", "comment": "Malware payload", "value": "0076324b407d0783137badc7600327a1", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736857868, "uuid": "3144ffbc-a5b3-43c5-a51e-3dde69598f8e", "comment": "Malware payload", "value": "55c727a9806966ec83f22702c1101c855a004c5658cf60e3c3499f895b994583", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736857868, "uuid": "56ce25e5-a424-475e-8334-ed7779420035", "value": "T13473CF47E9C49422D096123D37793AB69A74F5BA3312C29E394CCDF5CBD18B0962A3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736857868, "uuid": "03f9dd94-57a2-44a9-a162-6f743d76aa21", "value": "fb6bd8ebf4e6421b53c55dfe7d3c43af", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736857868, "uuid": "246a5ee2-35c9-4e32-85d2-4f31264bc222", "value": "1536:IhXLee408jyP8EZ/ZSzQrbZghOiMb+KR0Nc8QsJq39:sbi0MyUEZ/EUdghOie0Nc8QsC9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736857868, "uuid": "bc4434b9-e8bc-424b-b0cc-528dc240439d", "value": 73802, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736857868, "uuid": "f55e756e-27ac-46cc-94e1-00e8dbd0ff31", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f188d3a4-d275-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736858947, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736858947, "uuid": "f62a78f3-5b4c-462e-9860-4cb0baf01e3c", "comment": "Malware payload", "value": "462b5e21ea492b26cb9429578e6cc402", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736858947, "uuid": "8cc0ccc0-3ddc-49ce-bdab-ec790383bc27", "comment": "Malware payload", "value": "db791160ec45c955a79be8361055c256e5fc6c3850fa1fa2298205f2ff0cf1f0", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736858947, "uuid": "fcbedfb6-4927-4cba-9e04-9bc1a4595c84", "value": "T1184174103EEA1321F3B38E7688BAA322C43F7C04DDB55A1D008D46482727614E4B6F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736858947, "uuid": "ab8d9da6-776e-454d-9d09-16667223f297", "value": "24:8Ayj/BF//Z/UK+/+GTuWbUCijYedd79dsrab/FYPs:8ZLZtGTuaUvUedJ9AabKP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736858947, "uuid": "5a2b92be-1d3b-4f03-85bc-89261edf7e24", "value": 2350, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736858947, "uuid": "e8dcb910-16b8-4e1c-9d89-c354c1c13c6b", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9fb40397-d277-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736859669, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736859669, "uuid": "9c42cb52-7974-4c7c-bb6b-be5ccc3fdd31", "comment": "Malware payload", "value": "275b41470ec6702a7f012319890b2307", "object_relation": "md5", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736859669, "uuid": "d05d3a03-85fb-4e52-8705-15bc20a88126", "comment": "Malware payload", "value": "316aa94244da94b9b3299a1092e5e73ddc8f3638d4629588e7f1031c215a1155", "object_relation": "sha256", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736859669, "uuid": "920d63b2-7d55-4b60-9a3e-eb0548255b42", "value": "T16A8533448DDC5BB26B28FDDC279481A6E12CF0DE354502A49413CFB0EF97D68BBAE0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736859669, "uuid": "401fc080-6157-40bc-bbe8-53ca011fe184", "value": "49152:r49FIrEYRM77ULMhkIqY7GFv1qGfz95LRm7QduGXAU:Ierhu/MUknYqRgO55LRmfGQU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736859669, "uuid": "6af46836-9978-4d7a-aa92-f5ac59840641", "value": 1780752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736859669, "uuid": "c87ff57a-8a29-445d-92f1-d919feff15e8", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac9e4d2c-d277-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736859691, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736859691, "uuid": "fbe3c231-da9e-4807-b71f-3e3cf2952979", "comment": "Malware payload", "value": "0472d917e25f784e061e6e88cbc271fb", "object_relation": "md5", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736859691, "uuid": "90c0f264-24e5-4542-a68b-cd016ccbe50d", "comment": "Malware payload", "value": "602dd6e3fbafd6dbf46d34669dcf64a07aa76ffbd33ccb941b009a431a3aa10d", "object_relation": "sha256", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736859691, "uuid": "79c25b59-03c7-490f-9b46-23ec5e118659", "value": "T164473352718014F93DE4E04A79BAF74CBC39D81E365D4927A0EE3BB4A24ED321D18E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736859691, "uuid": "44acc6da-94ee-4e5d-be43-f7ef897e3199", "value": "393216:g9Qdz65IOW7UcTUOU+TeG4fg7ncDWhikJKDY4OQBvwQmuS90XzUA6LQ3CELA:g9Qdu5UVtc47cDLBvtmuS9clRE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736859691, "uuid": "e802fd5f-e06a-4edf-808b-eaad10c42a23", "value": 26218512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736859691, "uuid": "08b05087-22e3-411c-ab3c-1830aadd3b8a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a4915cca-c75b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860516, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860516, "uuid": "f7412830-5251-4488-b716-d34b45eee974", "comment": "Malware payload (Mirai)", "value": "92ea35bfbc14690e163745bf8097be78", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860516, "uuid": "3a7f1950-910f-44ce-b3f6-60e81c412490", "comment": "Malware payload (Mirai)", "value": "044f2d0a3268bccd9e6c38e35bda5d7d5206feb6c34ae8ad384a7655346a667e", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860516, "uuid": "14d9bd90-8855-4ab6-ab81-c8845f3c08e2", "value": "T16BE32A46AB418B13C0D61779BBDF424633239B6493E773069928AFF43F8679E0E276", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860516, "uuid": "fda15b4a-eedc-4697-9e7a-e05ff927e226", "value": "3072:rzCnTxaaeCwoNLfueMQhRBD7gI25NzM/998SJlb:rzCndaaeCwoNLf1Mw3gI25hM/998SJd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860516, "uuid": "8f33d489-2d5f-49f4-819e-00d298aa7b40", "value": 143447, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860516, "uuid": "cd839c34-1d3b-46f1-a431-eca8a6d7030e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98fb5528-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "341d41bd-53fd-45d2-ac4a-72951c540ac9", "comment": "Malware payload (Mirai)", "value": "5bab032975d59df26ec1d3d0a770aae1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "b0f26b88-7041-40be-9c8d-336b7a51ebfd", "comment": "Malware payload (Mirai)", "value": "1f43f3cfd36ef2df9f67cc25df007f324afff230fcaf6b32488907ab138c6b7f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "335e060c-5ac4-4036-8fc0-74484ca67944", "value": "T1B9338D36C87F6DA8C5448638B8214A342F63F504C6A7AEFA9B8187655047FFCF6183", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "a51d2df6-ed2f-4e59-9baa-4599378c9e7f", "value": "1536:0aIB1nkW5wt1lFZhTZJNexd+3+4keEtCQed42+:0XXnkW5QvreO+4ke0A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860517, "uuid": "ae7b41be-60dc-4dc3-8920-16f31d4fafa4", "value": 55116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "8e44c2c7-1bbd-420c-9669-015d2bd5932e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "990be2ff-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1736860517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "558816af-f784-4632-8e3f-2f6f223ac306", "comment": "Malware payload (Gafgyt)", "value": "c8e2351e960e0314aedf5502d247b716", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "ecda4fed-532a-45a7-a2c5-23ef750e777a", "comment": "Malware payload (Gafgyt)", "value": "abf61a23ade2e8ada790aa35409c17fc83a3e895649d62460c41b80ecbc1d1da", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "3139b652-36cd-4cb9-8ace-576dcceaca9f", "value": "T156832A46D3A2C5B3C4831BB605E7D72B0231F9164B2A9F0AE36DAEF47B12584719A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "7d33e21a-84d5-4eda-87da-2612af06ff60", "value": "1536:j3oLQ5TCzSVYERb1aGy8gwi5vQMbBZzp6+m5CsNFPVYLf0:r8Q5Tv+U5aH8Vk4Mfp7mwsN1VYLf0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860517, "uuid": "10088a6e-fb1c-4b9f-ac0f-1abc66b21451", "value": 87461, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "cf7ea953-3665-4cad-bb07-48dc9f2c19c2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "990bef5e-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "f4eae85a-c797-4ae4-a82e-4bfdfc7f0f6e", "comment": "Malware payload (Mirai)", "value": "1ef3778a7964fa1eab63abbca21fca3b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "c1637d57-e6ae-4e97-9b1d-ced21b4e0c50", "comment": "Malware payload (Mirai)", "value": "2cfb211d62658f7254e7755cf438f38803e51f6242a16cb73dc5bfedf7556cba", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "9416e672-4c9e-45a0-ac0a-d9ba069f4584", "value": "T16D53F78178819A17C5E412BBFA6E018D373563F8D1DF3216CD226F6476CA82F0DA77", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "6ad7c8c7-c6ff-4423-8a9f-c11970d52f44", "value": "1536:zjYuKZsfOuOCrfhJbigobUS+lG9WM8rN6d1Pd42+:zj80lRIKG9j8Md1F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860517, "uuid": "28e52dac-a731-4ee6-829a-9d22c7dbca23", "value": 64396, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "f601eb19-3d73-4ff9-abae-4bccd3d58524", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "990f9f8b-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "80afffda-a66d-4f2a-a434-ff92e1fd7b0f", "comment": "Malware payload (Mirai)", "value": "1aa9d39242343b099ee88d65c3bfb724", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "f3e4f8eb-c3ff-49c0-a3c0-0778d09bae21", "comment": "Malware payload (Mirai)", "value": "dc75212576bda52a347b1ff8a2da66ab9e09a5ee1534e9882642579779d76f1a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "8b14b2ff-a56c-487a-9e41-7208000c133f", "value": "T1D7434C0333280E07D9961EB0353F0AE093BFF95126F5B68A194F9B758639E761182F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "acb6d0e6-fe10-4bde-b0bf-0d1b0e5b0ce4", "value": "1536:q01NDkjhWBPe1ZfaDy0wYrudk/Gr+d42+P:qEgoB03YrucGmK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860517, "uuid": "25d7245f-8a3c-417d-9a58-f7cb89a7be2b", "value": 59960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "7c9f09b1-fe36-48aa-be0f-1bb0b90af751", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9917d49b-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "2025f323-ba36-4eed-897c-8ea2da25e65e", "comment": "Malware payload (Mirai)", "value": "f66271142da0077df38124a497000e75", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "52555ff6-07d4-4d00-aa41-3db7e1bc7145", "comment": "Malware payload (Mirai)", "value": "a3abe8fddbacc2d58551f83c5cbabda392adbe23f582b4bde99eda6c68964f16", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "26a2818c-49f3-4718-b559-4c06b717325a", "value": "T135533C86BC016D3CFC5BE6BE41520E19FD31362125A30F2B9AA7FDA35C321B65D1AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "239d1076-6d05-4161-a3c4-73784cfe3bd2", "value": "768:sPBaz0tMQaaZ261DmbgiqJNS5LhZFGGN2d3ebPLzEM7+9uQ8yhh5Cm7VqntQPGyj:s/vi5Lh7GGNY3IHZ7+MQ8yhem5qqPG87", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860517, "uuid": "e31239dc-b9ce-4d42-94ad-6ebf7a1adabc", "value": 61288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "8ef0def9-a259-4251-ab6b-be865fc84aba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "992d667e-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "41e612f1-f1c4-4cf4-8005-bffc74cb4c43", "comment": "Malware payload (Mirai)", "value": "6249faf6f4aba78e058c84ccab23eb90", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "67e6a97c-6009-4f71-99f6-a85d002d25cd", "comment": "Malware payload (Mirai)", "value": "e8453b21e72edce8d3cb48c25447e30933792a0f219d8eafb0d729a34c44c9a3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "19531f74-7695-44f3-95ff-8558af08ccf2", "value": "T1F9630956F8814B22C5C6027AF92E118E372357FCE3DEB2229D206F2077C696B0E76D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "8dbed5f5-f5b8-4528-9456-b79cb7adccee", "value": "1536:tpnqh/sOR5YbAP+uppI40EiGaHA1zuInig8F2+lhyS5bYonv:K/9R5MELaO8F2+lhySRBnv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860517, "uuid": "bda1fdb8-7afc-4b65-be25-cc96304dbca9", "value": 70964, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "f1ec708c-8e7f-426b-ab4c-a974bdcb3c00", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c65413a8-c75b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "168f078a-e3fc-4749-bec9-8cfa06766385", "comment": "Malware payload (Mirai)", "value": "5bfe26687ccf4153f2424882a019b567", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "ffde9dea-22ec-4121-87dd-30f6054f6ebd", "comment": "Malware payload (Mirai)", "value": "6596e9de08a8b69c6ab21e80d367c78053049283e2f8af1ac4c297508f20e8ea", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "37b73a6f-dc88-46c3-983e-6101d2103f46", "value": "T1DA73C81E6E218FEDF769C23147B74E259398339637E0D681E26CD5042F6038D646FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "139ea301-a83a-436b-9325-3570bd48f848", "value": "1536:D0WdkyFfYl+uN7uNLqN339xNy9ctC/LeOQc+Ng:ZdlFqxNy9c+Cc+K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860517, "uuid": "470a006e-9b46-4181-a311-18236d7023a8", "value": 76856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "a7d8a83a-7834-4615-b7ba-c650b9b62ba1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99329996-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "4e1eaee0-4d67-4dbb-8736-f1b186b00929", "comment": "Malware payload (Mirai)", "value": "790ad0490cab434aab8aad3d4604732e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "4300800d-a70e-4dc6-9ea6-3cdcb85ede72", "comment": "Malware payload (Mirai)", "value": "37803df3bbf0eab38831b54ecc7d395474682c5b8e1c0442be63f61987224c4b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "48dbc241-0ddb-4ab8-8faa-6121a0c9e97e", "value": "T1F3D32A56E7408B13C4D61775B6EF42453323ABA4A3DB73069928AFF43F8279B0E639", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "679a8214-e569-48eb-88b2-2cad3d707b40", "value": "3072:lS6VGvf5uaDAFEsHY07NSIYwxGnWR+SQkM/9iH:lS6VsuaDAFEs46NxgnWR+SDM/9iH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860517, "uuid": "503e38cb-2377-4729-a216-1abf37cf2984", "value": 140758, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "71214abd-78d4-4bf2-be34-a9175b6cf5b0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "993424ae-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "7240f990-2f64-4a0e-8db1-c61f56f4daf0", "comment": "Malware payload (Mirai)", "value": "4810aaa5702f417df0405a45f0a62363", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "2d518afe-dde0-4a42-bb2d-a3b568bdf394", "comment": "Malware payload (Mirai)", "value": "2af72d1f85135dae780bf1470fe2c703567cc32e3db3e8ec9f7c5c59405d9969", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "04b131da-c751-4d7e-8aeb-20914888dba2", "value": "T11153B581B94B44F6C40749306097F63FCA31E66942B0A6BEEF8D9F35DEA7E42C1162", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "8b7c24bd-7ef8-4529-881b-becfad305392", "value": "1536:YWf1HSmHIMkkmAFQO8TkYIApM7wVg+2CBnTu:r1H3HIMkkmAFQO8YAx2+2CBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860517, "uuid": "dcf2502e-641a-41a0-86e0-816935a3a374", "value": 62224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "e6f7f4ad-2467-4204-bb5c-287ad27b76cd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99355ded-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "abcf8405-0b4d-4bec-89b5-0607d67569e5", "comment": "Malware payload (Mirai)", "value": "06fc318fc93cbd31d300351d5bf7b784", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "cc52d123-9bbe-46b7-879d-23262b31d96c", "comment": "Malware payload (Mirai)", "value": "adf1312a212c3c97ae2e9382b1128116c909add0c2f68f011c13e7e00746b150", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "c87f48aa-e295-4f0f-8732-f492f0f6e3b6", "value": "T1AB3339C8ED97D9F8DC5125712027EB328672F13B1019EA8BE7DDAA23BC52B41D4072", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "a55d586f-9511-4f83-94f1-ba48bf159113", "value": "1536:gAmkKnnAvjccy7ZeDm4ECd+67ZuC2BjWxr2dJKQDfF:nRKnAvjcV7ZIECdxZuC2tirS3b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860517, "uuid": "eba90fdf-de6b-457f-9c8e-d0155c432dc6", "value": 54800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "cb06da14-7cd6-4c11-91c5-45b8f79d4e3a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9939b570-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "210288fd-3fea-4cfb-96c8-f8d5c1fba6cb", "comment": "Malware payload (Mirai)", "value": "9d33ebb0152263bb30a3a7db1f80334a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "480e0251-3be1-456c-ba9e-01f31947e356", "comment": "Malware payload (Mirai)", "value": "22e77d0b2ec08a77976c79c8914c6469e94cc8aa66e83ce097185adcf52f3500", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "10f0dd60-c5b5-490b-a37e-879b918d8827", "value": "T16363B61A6E628FBDFB59833447B78E21AB5823D527D1D641E25CD6002F6034E681FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "e12015b6-adf8-4864-bbe6-385793718255", "value": "768:bPWek0n4CjdGQKKW4mg0EhFkFkeYA+Qo+xXyApGqFDjOZ2uyyQ5NeNTP4wnSIZ:bj/hnmmjAo+Jym2Uu6eBPZnSq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860517, "uuid": "71fec134-920e-429f-80dd-67bfc05344ae", "value": 72628, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "caedc777-07ce-4f0d-a2ff-3b70a162bacc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "993b47d2-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "e41c5903-c358-43b2-a247-58a3f842dbdf", "comment": "Malware payload (Mirai)", "value": "16bc43c9c282afd06ad2d8ab0fff5f7a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "30de02b4-c672-43f7-8103-5bf41ab557df", "comment": "Malware payload (Mirai)", "value": "0c4f7ae34fdcb42d6e8b41eff333c6f0bd292bc2e964831eabf3391a150b55cc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "3a001bdf-f6e1-4480-ad54-59f2123491b1", "value": "T16B533C9AF801CE7DF85BD77B4457090AB632B3D102821B3663A7B997BC731A91D23E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "81965136-745c-4d25-8790-218799594d36", "value": "1536:Nk04g/XHsK+THgk8L6ny+xG5T7D7XMpUeayX8YM6:Nk01/clTHgVoxsTfIrX8YM6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860517, "uuid": "663ce8bc-aae3-4532-a575-c1d1d38eecd0", "value": 61704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "af04fdbc-8a5f-489a-a9b1-dead228e3404", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "993b9e63-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "320cab76-ff62-4d5e-8bc1-0328bd5003a5", "comment": "Malware payload (Mirai)", "value": "8a75b245b02efd9ab6e3f0d81d88d2f0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "32776193-fdbf-405a-878c-1c9e33170cfa", "comment": "Malware payload (Mirai)", "value": "4f781f571c8eb7847f42cc19d387194f97f5ad2d3701b19aad480c422e290cad", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "0e394d92-d48f-4b45-bc2d-6d2e1d53cc98", "value": "T1EB2319857CC28E1AC5D412BABB7F02E9331163A8D2CF7313D4149B587E8A52E4F67B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "cce9572f-749b-4c8d-bc0a-7744ae3c812b", "value": "768:zVhM588UDLnDdeSxM3cXxF1L9Sgv9FlqBG4XTJW/RBWHXVDAQMKyPTnsckLzcI3a:jM5ILtxMgLJVmdTJMWi9TsckLz9K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860517, "uuid": "016d2852-6987-48aa-ad34-9ce69f6656dc", "value": 49682, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "20389bd5-e507-4f33-9cae-9dae42364b67", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "993be740-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "5daec8d8-44e7-4692-8420-2ac27c97f9bc", "comment": "Malware payload (Mirai)", "value": "e3e77963a46447b2037345fbbe440276", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "2bd9796b-243e-4df3-94b2-d90a45ffb2d2", "comment": "Malware payload (Mirai)", "value": "811628a4e4448327d04f151a06fca2b541740fd6582fdf2ec8041ace5963d835", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "38cc3bd4-9c4b-4645-b681-9fb91a402fb6", "value": "T10D335AC4F643DAF8EC5705701177FB339A32F5E51229E743C3A99A32AC52602A906E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "86a319ba-bd96-4dc9-9b17-d182d31122fe", "value": "1536:GWa2d5sf1Gg+ya+nlQaF0ffDRTfwVsp3MSfCYY:Gt2d5sf1GCammQ0ndjMW3dCYY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860517, "uuid": "1521d3aa-7bf9-495f-930b-20b13703e60c", "value": 50256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "a7bd76a9-73c3-427a-9390-f6cc6c73e63e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "993c8d26-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "8554d498-ffd3-4a02-a5cf-97c5703a6484", "comment": "Malware payload (Mirai)", "value": "d4fe48b2190d8d8a76ab8acdfe5f4e0e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "410b7cae-af28-4a84-97c2-9e49599a5556", "comment": "Malware payload (Mirai)", "value": "7ab3078cf359f2173beee60b4448647232f3ec7edad0f88874391be71a923fb6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "36f85212-dc35-4fe0-a8fb-6ffdb0806e8a", "value": "T12B237C77D06DAEA4D14482B4B5204E781B23B902C55B2FFA4B8586AA4053EECF7393", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "427ebe29-aded-4eea-8cc4-9e362db15a8c", "value": "768:0a3wtQ0Mkpie0UOnyPGpLHLO5QBk2NyCLo3tq1fOC0t:0a3wtQXd1yPGpLa5SBNyT3UfOC0t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860517, "uuid": "903aca04-fd4b-4ab3-8703-afc1b3c0e336", "value": 47012, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "0d2a7a16-c6a4-44c1-8f00-a286205f357f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "993e46c8-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "d022c304-7398-4449-9ed2-11a0ada49ff7", "comment": "Malware payload (Mirai)", "value": "62b53d22023767408a440d4a6ce43d20", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "b9017aca-593a-403e-8151-d3bc77285c79", "comment": "Malware payload (Mirai)", "value": "2f450b8c8a1aaaeccadf1eb5a8ca45c69d5ce976a1e874763c86d23d412616c7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "0d3b0070-b530-45a1-b58b-10fb99dc0f96", "value": "T1B2534A217A792E17C4E4A07E25B38324B6E5678E32B8C65D7C723F4EFF1066064171", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "55bea093-0da3-438c-a9b9-766b91e1ecfd", "value": "1536:IDK6bb9lTEFq1X6JySbe7MBTbrv0kvypdYm+A:mKQ27be7MBTc04N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860517, "uuid": "039956c3-695c-4b1d-ba81-86cb31a8eae6", "value": 64320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "fcb03944-64d0-4fb3-bd00-e201e1b0f1a8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9940e86e-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "d01fca1e-5af8-456f-9649-49ee60b7969b", "comment": "Malware payload (Mirai)", "value": "c03db8d5fad380af0779639cc5325268", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "2261b8d9-1109-422a-be18-a556f99c6b30", "comment": "Malware payload (Mirai)", "value": "28b2eb8ffdcea9220b8b037f5e4c04a475d832a9eb3be2980d5f495f8e87d273", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "c3f8ce93-dfff-4900-84bf-40583001a3ed", "value": "T14053E68178819A27C5E423BBF96E418D373563F8E1DE3206CD116F6476CA82F0DA7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "e0e1c605-0783-4750-b22e-abfc1854060c", "value": "1536:Jzp3p4rcgAwfM8x25nzlbpgGlG9WCHvsdaFd42+:JzDtfz8CG9VHkda3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860517, "uuid": "68189c1f-70d9-4728-94cd-c7b36800d58c", "value": 64460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "9bfb2c3c-3983-46cb-b7bc-1c29356c7fc2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a4820727-c75b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "e5df309d-59f1-4e3c-b60d-004fa851c6fd", "comment": "Malware payload (Mirai)", "value": "3c4999b2a007149868e209a3b839a629", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "26b679e1-b84e-4410-9ca2-650bc9b391de", "comment": "Malware payload (Mirai)", "value": "731311dd0b479c5b363e1d08c29e40ab1277990877dc2e09623402a730af3864", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "71734e8f-4f53-4d13-ab7c-543e0f5935c5", "value": "T1FA433B81BD829A13C5C41276FB1E428D376757ACE2EA3303ED265F21378B95B0E7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "c5c0c49c-e687-4d8e-896b-681bbdd8b3aa", "value": "768:FNhCXIBj428ru2HF+yEPMWhaancNJBr7D+xrMHXe2NOKnmRBRNdOa1W3w87wAI:VwIBjP25WhaanyrfbHu2NOKmJNQaIkA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860517, "uuid": "38fafe57-6e78-4eee-a6a2-5c62c8d3e977", "value": 58832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "f5941ce7-29c6-40f3-bf02-f42b79616e74", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "996862e8-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "4f3f810b-2007-442b-92ef-f4114a17b3e6", "comment": "Malware payload (Mirai)", "value": "c926d7cbab3cca6bbce10943e5060ece", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "629a397a-836b-42a8-ba91-ca3211c1056b", "comment": "Malware payload (Mirai)", "value": "4072c89aec4520b9bb89c3ef348cf7fef98d350ea42883639977a69db7d46476", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "066d91e8-3527-47f7-9dd1-75657f2ac137", "value": "T14A53F707AD5082FEC048C5706B3B753AD42A72FD223CB6E637C5BB2B6D49E314E4A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "88600cbc-c8e2-4c4c-a493-0d593180c86e", "value": "1536:VcCUDpjc+wiDl2QlrRaBssPn1mtTnGsb92zW3OGJsJ6:CCUFjxwiZ2QdRa6sPkdnf2zWeosJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860517, "uuid": "a018e668-972f-40e1-9426-d150e0213c92", "value": 62720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "9ea82626-0a7d-49ab-9c91-02ef2ae20579", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "996886f4-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1736860517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "8f7de717-33aa-4c23-8370-b8648a8db98f", "comment": "Malware payload (Gafgyt)", "value": "5e914365eed985a90a62cc800e7b7eeb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "f241b49a-40d2-4b7b-b62a-5e31e055372f", "comment": "Malware payload (Gafgyt)", "value": "738702230143c58ca8ba4339dff13c305bd34a4e9eb0a539bdd5960b08261418", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "28450aec-dde5-4e99-ba71-12ebd17caef2", "value": "T10EA34A57532D0687C9CB9AF02DEF27F187AAECA022B25644950EBFC41773BB02056F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "6842e809-7665-4dd5-8cae-729c8b70d779", "value": "1536:3EI3i1OxxmU22536hHq4hMKrO8qQfkW2pXX1xll/msCskFw3DW:3fuOxG2g1brwLmDski3DW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860517, "uuid": "4287e6df-094e-4162-a4c2-bbef89a62869", "value": 103580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "7bb1475b-5e13-4a54-b3f7-68e79fdc13f4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9969fa16-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "bf4da070-0ee7-46d7-9f50-05d73c037025", "comment": "Malware payload (Mirai)", "value": "41dc611b00dcd7b3e5ff413867cffba6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "99988104-8f74-4312-a6b7-c0b8623722d1", "comment": "Malware payload (Mirai)", "value": "fa5a0ef3e7d924747052df18437a57cc0576abdd1a31396699ba585778973ef7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "a5c43e5e-6a7a-491a-9a25-65183c5d1322", "value": "T1E5532A85DE4BD9F0DC4625B0216BF737A63268312120EFA7E7CDBA63ADA1B11D0572", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "a92b290b-54b5-4ea8-b2f7-06acdaf81826", "value": "1536:KfbfifpDGRD1Vq8NX/llc96nTSVD3XTOB:CjKpDGTlUEWFq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860517, "uuid": "467543e8-9c41-4127-ba0a-f394bc8b3272", "value": 62040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "c76e758c-a02e-41fe-8727-781cce0c9530", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "996b277d-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "910b21e4-98ac-4319-a655-73784ef35fe4", "comment": "Malware payload (Mirai)", "value": "f1d68282d04af8b261d6032783f2ac4c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "cc2d9b38-9faa-4d30-bd0b-80b06ceb6b3a", "comment": "Malware payload (Mirai)", "value": "1ce1026a10e3d5fdebc5d26f554f58b8e72c7bce16b87d627dbc3c721de66898", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "eab074b6-48d3-4979-9051-2e3ad7dd0f30", "value": "T1EE330907F681C0FDC49AC174476BBA3AD93771ED0238F2A67BE4EA223D95E611D19C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "ce3e36a2-82c1-4642-9a87-e14278c9a372", "value": "1536:Ru31CxXVpHlCrxsNnVfvj5N+H32r4DaEXzd0OCUjCY4:Y1sXV5lCKNVfvj5AX0GaEDOVUjCY4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860517, "uuid": "3b2a886d-fcce-4c22-8b4e-4edfdc9160d3", "value": 55104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "9d0d4166-22d2-4259-881e-4676f6f88ca1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "24f01328-d190-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "e8e7e841-742c-455f-9eae-4bad8682170d", "comment": "Malware payload (Mirai)", "value": "9d169d17adcc02ada564bd1463dc2673", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "15790f6b-450b-4faa-a184-f3e80159ee38", "comment": "Malware payload (Mirai)", "value": "efdeb18055da1fd430c782c1578485e95a064fbedbbf82cb93bd7b58cb8cdeee", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "515b132a-5c41-4f2a-8f42-b400787c6364", "value": "T1E7336CC8B583D4F9EE5711B5227BE7339732E53A2024EF93D364E636EC53600961A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "6ff5a512-168b-4880-8a41-ebabb1976276", "value": "768:Kny1FMFoK+ZodJQpQpdQMs/3ar4TvD/o3lo76yrbO9IR9ngImmy8a83s5qIq:Kny1FDKuodJQcqwObg1Wym7gDmc8c5q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860517, "uuid": "731f1cc8-16e8-4a65-ae21-583648bc802c", "value": 50416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860517, "uuid": "283458a2-a420-4eae-b2c0-bb5e13ff0654", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99bc6d1b-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860518, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860518, "uuid": "ba617a14-44f6-451a-8265-541486993b04", "comment": "Malware payload (Mirai)", "value": "d22daa9e2eda7eef4d70225ac3b38153", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860518, "uuid": "806828c5-750c-463b-9d75-709aed46346a", "comment": "Malware payload (Mirai)", "value": "a99171d9420b68ee726a50425ca557b12507e35a416255821744da434ead5f4c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860518, "uuid": "559ac4d5-1795-4789-b045-b0ce0d89090d", "value": "T1A3434A02B31C0E47C0A31A70263F5BD097BEE9D022E4F689352E979A9671E375586F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860518, "uuid": "bc406b62-7358-4e2b-b7f5-a0f9ec5f902a", "value": "768:EbpJYxjEJf68CRZGRloQUEqdeVPOkdUPV96mCq2Rj5GMIgglGcFRxtafS+wn2Ia:q/mqzq4PJ2D6+2qMIgg4AxgfGn21", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860518, "uuid": "e52a10a0-466e-415a-959c-b55db3511464", "value": 55160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860518, "uuid": "8635645a-48d4-4254-8ffe-dcae8ed428e7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99c15356-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860518, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860518, "uuid": "f26a6887-e9a5-45f8-8560-54452e471729", "comment": "Malware payload (Mirai)", "value": "d7292ec1258457fb7d44dca7f576a58f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860518, "uuid": "fcda82eb-6a63-4362-bc2c-b3e1067e14dd", "comment": "Malware payload (Mirai)", "value": "b5b8eac4cff2bfcb85e37dcaf4ce7d8029a1ea411bf2fc649e23067a7be6d62f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860518, "uuid": "c3c29da6-7e3a-4d3e-b9c2-ed528f366c03", "value": "T1ED333A59D787D9F0DD0209B0206FF736A632AC361270EAEBE788F963AD7275194432", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860518, "uuid": "0192c32b-1be9-4ebc-abf6-c407f328d374", "value": "768:5gA9qQW44fSGd7htdcnMJRB1t7Kv9TD59XmBVxRSQhHXexu1ZM7H9C:h4fSGd7htSMJRB1t7WDXQbRSziZMr0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860518, "uuid": "251d6ed8-cfbb-4ea7-af05-bd8f104f4c7e", "value": 51492, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860518, "uuid": "00e83ea7-b688-4359-8c59-fb2fdf026808", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99d16e2a-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860518, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860518, "uuid": "75244838-19f9-4b44-8f80-397015c486b3", "comment": "Malware payload (Mirai)", "value": "8c66a273b7dbce2d3068cb6e41531f65", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860518, "uuid": "dd1e596e-8192-4954-b1c8-068a42ee32e9", "comment": "Malware payload (Mirai)", "value": "8eedeeb60f1f05cb6143fedac89b2a8501bf64f57b24bf6ab031df89760d7f92", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860518, "uuid": "efb4fc02-292b-4a78-b2eb-0b45b9e855b3", "value": "T189331995B8C18A17C5D023BBFA2E41CD372663ACE2DF72039D212F50778A82F0E676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860518, "uuid": "2a4c64a6-aa61-460a-8c85-af631ff9d644", "value": "768:j0QDd8eakzD4lR+YOANqN+QUV0Fji9qooxn5ZkHPLSxMPh6I/5/NPsB2gGVzJ:Vd5atOAN9RV0FW9qN5Zkvm69KBIt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860518, "uuid": "ae2d2ebf-dba9-4689-864f-3bd6c0bb0548", "value": 52276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860518, "uuid": "ae46062a-0d9d-4944-891c-277a825bc613", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99f49da5-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860518, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860518, "uuid": "ab3e25ad-21dc-4e93-9012-f1144dd022e9", "comment": "Malware payload (Mirai)", "value": "3cd4c06f316a9414d46278cec0057df2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860518, "uuid": "6d3776d4-c3e3-4907-9af8-6b297d220b2a", "comment": "Malware payload (Mirai)", "value": "504eb40189921f74d9e7043632097025ebdecc6829469327cea12822f49a082b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860518, "uuid": "c7a14a41-af45-4e3b-9776-0ba0380d33fb", "value": "T197332947B58280FDC09CC2B4576B7736D837757D023AB2AA7BD0FA236E85D212E1E9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860518, "uuid": "0a4e8103-b147-459d-9e7d-f81de1ba5cdd", "value": "1536:z2Cjz+rGHUo+iwYRkCwchfD1oPtAFQPfkq:Vj6iHUmwYqk1oPtjfk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860518, "uuid": "de9bd789-effa-4c6f-8802-f2f95f10a1eb", "value": 50848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860518, "uuid": "63e305aa-074b-476c-a047-d0a1a3364dd1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a8d11bb-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860519, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860519, "uuid": "730ec8bd-c618-4f9c-9b19-89e5996bab99", "comment": "Malware payload (Mirai)", "value": "3c9a47e3444d1a3b8f67809272b4655c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860519, "uuid": "a1a93499-2349-492c-bebe-5741fde441b6", "comment": "Malware payload (Mirai)", "value": "03ea455d552bf7f6c0907536c33263d426223394243ad8c4f299e8ff7f82ef73", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860519, "uuid": "5b527df0-4609-4a98-922a-53c843ce3847", "value": "T19F73A70A2E25CF6CFB5D827587F78E209658339A26E1C145E15CFE021E7074E741FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860519, "uuid": "db9248d0-29f8-4445-bf0b-b8376b7d6da5", "value": "1536:q+XjfupiLLwEuTjpU3D4FZ0vEyvNq26/UKFu5L/2Zd42+pH:q+LupnEmC3D4F+vEOq26/UKFutezyH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860519, "uuid": "1ca28f93-7cf9-48df-b5b2-dfee9f24accb", "value": 79988, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860519, "uuid": "d4df4211-8f83-4ba6-a72b-ca4c2cfe9aa1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9baf9ef4-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860521, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860521, "uuid": "ae94eb5d-31da-434b-8e45-9368e9afdc85", "comment": "Malware payload (Mirai)", "value": "1dd642865eed3af2c1e469b573081dba", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860521, "uuid": "eed0106a-9efa-49d3-978d-c6f202afb38b", "comment": "Malware payload (Mirai)", "value": "3801e88932ccac8d6309e2c925294e9faedbe475d482554dc3fe0e845486dc72", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860521, "uuid": "cb6d8098-d91c-4fc9-955c-8540bc6414d4", "value": "T191431AB91555F2ACE9F55078F40320E92D920B2C3ADEE2C3A083647AFF74B0C7556D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860521, "uuid": "a814f76b-a463-4196-b5de-c053a2663ed1", "value": "768:EUFAgsBhMhlaZssNZ0stfcm3+aNGcH7otQJBhtSWwP/1wEE0nL:ta8iss/0OfF+aNGc9jhtyP/1Ldn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860521, "uuid": "f7d869c4-2d21-4de7-aeeb-1a44cfe93ca9", "value": 58880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860521, "uuid": "37c6a27e-3016-440a-b562-7a9acdb98a99", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d533ba9-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860524, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860524, "uuid": "7ce4db06-8ec1-475a-8858-72e011cdac1a", "comment": "Malware payload (Mirai)", "value": "bc570dcbd5ac0d891130a8d2960a6c45", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860524, "uuid": "e1fe9c62-3b46-4bea-8dc7-b436ee945c3a", "comment": "Malware payload (Mirai)", "value": "308d54f453afdd7caf00274721f19ab67fae85f8b11892c5b73284e62589dab0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860524, "uuid": "d9a8cd38-8ec9-40c1-bf5a-37e74cac2a92", "value": "T12C838226BF211FF7ECAACC3389A8574528DC641E21997B757930C428F24B25F55E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860524, "uuid": "73c9da5f-0bf7-4b3f-a5b7-3443a27f886a", "value": "1536:8OyXUyQgt0QfA2glfykiszlQEy8Sw8XA05Z54CldZ5F3sSGd42+:8UykisRC3wQldS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860524, "uuid": "9451cebb-4c31-4f19-a7f3-e857fb758e2e", "value": 84084, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860524, "uuid": "7c69c5ec-de06-4de6-9c4d-9f46a6ccc6cc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9dcdf182-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860525, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860525, "uuid": "25707af9-6cc6-4f6d-8ff5-7a3c0012c342", "comment": "Malware payload (Mirai)", "value": "eceaf602d30f075766c28a50c8cf89fd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860525, "uuid": "51eb71c7-5166-451c-a2b1-168b058c8d8d", "comment": "Malware payload (Mirai)", "value": "2bcb3c5a746c7fdacdb0090b76f26273b0c2758a64c36f70f03e3c9009e64eb7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860525, "uuid": "fcf7cb23-f5f4-40af-abb8-4a0055a7be8c", "value": "T1BC333A0272280647E5635EB0353F17E093BFEDA021E4F289691FDB5A8236E771186F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860525, "uuid": "3f5d73d4-7c5f-416c-9c7c-e1175407d968", "value": "768:o+9kZyPTiRcOGhnnxeaQUWDNsNon8YN2xfCzxnH5+P62TU:9kIbisnkNUWD2KnJ2Y9nH5+C2g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860525, "uuid": "72228cce-dc36-4ded-98b3-97aa6cadce32", "value": 50344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860525, "uuid": "15faf520-c710-4a0d-832c-309c5325e6fb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9dcfba01-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860525, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860525, "uuid": "41ecd45b-7e5d-4446-9e40-3198cc573849", "comment": "Malware payload (Mirai)", "value": "3b444aa740a349cce77c4e961e45fad6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860525, "uuid": "dbc83e68-74bf-4c17-8c4e-7b667695393d", "comment": "Malware payload (Mirai)", "value": "03ca920007385b5b86b0104cb9b4b0229a49a2863dfdfd79e596dfdaabf717ed", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860525, "uuid": "c4f1b25f-b8c9-43c6-a984-793ddae251d5", "value": "T115433B31BA760E27C0D1A8B621EB4B24B6F547DE26E8CA0B3D710D9EBF715402553A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860525, "uuid": "47f553f5-ad87-44fa-b536-e8c86c3c7956", "value": "1536:/fPucFQm4/g1We/ubYYqIQpu75nta1Ngw:fucSnauVaNgw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860525, "uuid": "73b4af40-dd11-473b-949c-3c7df65ba043", "value": 59872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860525, "uuid": "4ae534b8-f618-493d-b00e-b9edb31ba4a2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ddc3d64-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860525, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860525, "uuid": "d4bf4a26-8f17-44d4-9dbc-af932b1bea8a", "comment": "Malware payload (Mirai)", "value": "4c1d61bcfa9218abd3aaac28e9010e50", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860525, "uuid": "3a62edf6-ac0a-4152-86de-04ef53f333f3", "comment": "Malware payload (Mirai)", "value": "908b0a529e69c4e7e7c2db26a402babbfda9178ca805cf877889a0dd8d19378d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860525, "uuid": "7e018553-d843-41b0-ba0b-fff2c798e8c6", "value": "T13263941ABF610FF7ECABCD3789A91705298CA51A21A93B357934C81CF65B24F05E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860525, "uuid": "fd31753b-4477-46de-a567-4294e80a6350", "value": "768:rr/ierempLt/LjQN7Imy5jUthQ+ea5T5etUe+reR0X9sieddvQueC/SZQ71KXirs:P/ieCmpLxHswaHgU3rq0lPZQ7SQQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860525, "uuid": "55f642cc-361c-40e4-b80e-a446d8acf51d", "value": 67872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860525, "uuid": "98f0b2fa-553a-4816-830d-377219da9350", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9de0c474-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860525, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860525, "uuid": "c806a86b-43aa-4975-910a-b36cdbeed387", "comment": "Malware payload (Mirai)", "value": "33a77f8eb72b60099dd69a8671654483", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860525, "uuid": "c9c0aa57-636d-49fe-b03c-036811e0186e", "comment": "Malware payload (Mirai)", "value": "66b56298af35e89710897aa0342053898738e5dcc0409145ec4eed24778834cf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860525, "uuid": "ad871149-d331-4c56-8b7d-0c535612c9f0", "value": "T11A53F856B8C18E11C5D412BBFA2E118D331367B8E2DFB2229D216F24778B96F0E379", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860525, "uuid": "ca3e27e5-4639-47ab-b94c-09ab2b9da88b", "value": "1536:n0bn462HxALQMIiBdujcJlWXZhtzzlI0iAdrN15N:PoQ2BIAlSZ7drN15", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860525, "uuid": "93d9acb5-1683-421c-8303-d8b71f570669", "value": 62840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860525, "uuid": "06bc7418-3421-4b57-86d0-2ce2097dcffa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9df8d461-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860525, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860525, "uuid": "fedf790e-c0d4-44de-898c-9153a2eda604", "comment": "Malware payload (Mirai)", "value": "d4f9642fbf2914c66d3fd39060fff9a2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860525, "uuid": "e15e545a-72e3-48d6-8426-a96fcab01315", "comment": "Malware payload (Mirai)", "value": "30be09a0bfd195348a08c633082d8806b79cb1a7b338b2343c4984f4486c56d3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860525, "uuid": "67f77e79-97cc-450b-90c6-9cfd80449746", "value": "T1C7D34C46FA418A13C4D517BAFAAF4149333297A4D3DB730699185FB43FC67AE0E636", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860525, "uuid": "c0286b94-1ef5-4cb3-97b4-4e95c142ffa1", "value": "3072:CYa0Biru5dnKUqdXX6Fz7rTuQhl27HUAQM/9tgYj:ha0BOu5dnKUq16Fz7ryQmHU/M/9iYj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860525, "uuid": "9f6460aa-5448-4912-a674-ecbcafe5bd19", "value": 136306, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860525, "uuid": "7c27cf16-d857-4c8a-b41f-6ed51b2bdaca", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e0354ca-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860525, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860525, "uuid": "633f7fec-1d8f-4f6f-9c65-b69b3440751b", "comment": "Malware payload (Mirai)", "value": "ad871e7d6a713dc4b545d24b36dec26f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860525, "uuid": "b112a684-92ae-43a7-8607-6607f356196f", "comment": "Malware payload (Mirai)", "value": "5a4d94dc1a407dae975d6f2ef4c7dccbd2e0f38251268071b5153e899ab6562f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860525, "uuid": "c8e14926-b5a6-4df1-bcfd-7d610a05d112", "value": "T1A2332B81F64B84F6C447893050A7F33FCB32D9299175E6AEEF99AE35DE2760182072", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860525, "uuid": "ad515e8b-27db-4023-9018-6d4f7b4eaac3", "value": "768:RvGJyn6qZcWIfZd6qQX0Gdr7MSgyqBtfmDOb8z2XQ4PUK7GM+A:ROJkbIfn6q80GVASbDOb8z2gSUK7GdA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860525, "uuid": "271935f0-f06d-4b63-ae12-4a6552c4428f", "value": 50928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860525, "uuid": "405233dc-34a0-4b38-9753-c60e73637eb3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e1aa9cd-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1736860525, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860525, "uuid": "5edf776f-aa20-4bbe-9429-97dedf1425a0", "comment": "Malware payload (Gafgyt)", "value": "da611672659267d21a76dd86bc274638", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860525, "uuid": "bdf13443-e07c-4a9d-874f-b697b36addfd", "comment": "Malware payload (Gafgyt)", "value": "8a9f29cfb6a57bfe60d74d821a278fbafae8ebfad331cb3a9e35802408a9f172", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860525, "uuid": "5892f234-9da6-4619-8f39-605fb6d75b49", "value": "T1C5B30B93F511D5B6F44AD63308D38B247270FAA14F531A2263177B6AEE362D4386BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860525, "uuid": "0380b1f0-232c-48d6-aaea-b14957bdf4e1", "value": "3072:2UQeqacWucW0JcWcBqZcyZCIiQo278O7vkqDzJfRPmmHqzTQKHKtW:2UQeqacWucW0JcWcBochQd78OJ1BmmHe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860525, "uuid": "162ce61d-0939-465e-9cc6-72dc94678236", "value": 109563, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860525, "uuid": "20bb29d8-051d-42ac-a5d5-fc2a8d1cac49", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a46a262e-c75b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860525, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860525, "uuid": "7d2f4fac-d58a-4ced-b3ae-e1250920b20c", "comment": "Malware payload (Mirai)", "value": "0333a2d275c3f278da43de1523aa96bb", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860525, "uuid": "57eeaf15-14f4-4c87-85c7-f09d215c9bbf", "comment": "Malware payload (Mirai)", "value": "2fe129193ab490709239439578830f6ff60cfccf2fe5d405e5a447a8b6629709", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860525, "uuid": "5331b94e-bb71-45f9-afbb-20e84a06c303", "value": "T166631956B8829B11C5C512BAFA1E128E3313177CE3EE73129E205F25778B96B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860525, "uuid": "edde02a7-7d94-47d2-93e1-ba5cba43daf4", "value": "1536:vknkaXnvewGw7aJUVW+NanbPTGQlMaifaeD0H5pYVUw:LFJcW+NangaeD0HHgUw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860525, "uuid": "755c84fb-2a35-40a2-9011-f5602240be28", "value": 71112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860525, "uuid": "f97a613e-91b0-4e74-a967-9c522aa61fef", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e38b8bb-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1736860525, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860525, "uuid": "86ffb422-724f-49d1-9542-44c72daee0b5", "comment": "Malware payload (Gafgyt)", "value": "0a91b3ecd9583827b4cbe1c2b44ccb59", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860525, "uuid": "cd91a4b1-0f6b-4f6d-819a-c67754b4dc33", "comment": "Malware payload (Gafgyt)", "value": "23943c584d1eb21be3c895145c84e176741fccb4f9a085d575aa25ca6a3585e4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860525, "uuid": "e0cf392a-40b9-46bf-8db0-3d5ba0f0e4a6", "value": "T128D3C52E7A61ABFEE169963107F35F7083A625D227A09345F26CDB181F3128D5C8F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860525, "uuid": "87dd2d7b-1769-4e58-be6a-21e7ffaa151a", "value": "1536:HHfGlk6Mau3GaXIM2rKbU6Ul5gioHLfPti2dSImNEz7ugf7hoWlNDsorH4hs29NA:+FO3PtiJn8ugN9sazoVmCBgAYiCh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860525, "uuid": "d0c568b6-e6c1-470d-bb18-7270e2e56404", "value": 140059, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860525, "uuid": "45ae3735-6438-48c7-8111-af3337d098d4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e3d3e14-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1736860525, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860525, "uuid": "cc9dcf53-689b-4c96-ba8b-d1d6ae8c3f6e", "comment": "Malware payload (Gafgyt)", "value": "bcd8dee9671b5b3aeece01406feb8595", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860525, "uuid": "bdd7aa68-e96d-4545-a2e6-293d2fc6b0be", "comment": "Malware payload (Gafgyt)", "value": "83510df45dd53c59b893a274621fc6ed2b0ba2908d62fde67a73f1b84b5d7557", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860525, "uuid": "de60bbbc-5d8b-4d7f-8933-400371f44f81", "value": "T166E33905D7408B57C1E2277AEBDB424A33339B54A3D733099A38ABF43FC27995E261", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860525, "uuid": "abf89af4-bebf-47a7-96ee-72f3e5744237", "value": "3072:CtfSVjcVCLJDexaWt8m717a8oXV7EHIzmQwfCMQiGW:AfSVjcgLNexa9y17a8oXV7EcmQwfCDi9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860525, "uuid": "688ebc30-a0c1-4fa4-9761-69aca1e27626", "value": 150041, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860525, "uuid": "92eced1c-a74a-4c4c-902c-a0b2db0bfe71", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e3ef68e-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1736860525, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860525, "uuid": "9c67f25b-2871-4f81-9932-67d74bfcf423", "comment": "Malware payload (Gafgyt)", "value": "2aaa580f6dce10b2fd777231e3257a58", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860525, "uuid": "7107fa6c-4051-4fee-b4bb-fb95bf28509e", "comment": "Malware payload (Gafgyt)", "value": "c12f36d08f3427a7077bf09e5ff955fefac9712ba9d413f45160a63ca04f2351", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860525, "uuid": "619f26ca-2b29-4136-b252-606771295087", "value": "T1EDA32903DA60847EC48B93761BDFC6225223F8B90731621B63C4BEA92F169D9DE5D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860525, "uuid": "a0d74ba5-a091-441e-a168-2378a870f641", "value": "1536:Q9fT9WiC3txvWtfEo5vXJM9wypej++3h5EgL7nLGPTms5TDUMHYr/:Q9jC9wtsOnuejjh5EgL7smITDfHYr/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860525, "uuid": "d66d421c-ac2d-4fa3-b34f-8b7c8b476f83", "value": 101269, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860525, "uuid": "f50a48c4-3c40-49f1-8e1d-4ec210d88b2e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e585dc1-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860526, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860526, "uuid": "6a9671ae-8c6b-436a-916a-fbcb5aaca350", "comment": "Malware payload (Mirai)", "value": "eee79efac73410ac2f68296a4f38b4e7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860526, "uuid": "1f3b5e6d-16ed-4355-935c-aa8bc788bea5", "comment": "Malware payload (Mirai)", "value": "0f9dc97c52b61a589fa360a6f7f6182311624375a4597b34a79dafacded8b962", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860526, "uuid": "d8657649-539f-4900-935e-928d45f7c6e8", "value": "T13863E7783555F6ECEAE18038F40324E52D9506383ACCD2C360835476ED78F8EB66AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860526, "uuid": "3547f982-4877-454c-aef5-9c124cef34c5", "value": "768:HeojgoQXLJCX0rR4hT3XR8gwYbUgzaf4Yu2vBrgIpN05anHHHHHHHQd4+2:+qQX1CEYlwCUg4WO05annnnwd4+2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860526, "uuid": "d430dfaf-cb8b-4803-a0f2-a41bee9ed164", "value": 66936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860526, "uuid": "318aca42-0b02-4967-97e6-20862d5894be", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e919d80-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860526, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860526, "uuid": "f9001592-0d2a-4f66-a1b2-9c629f2d7f4e", "comment": "Malware payload (Mirai)", "value": "c51447eefc2b9413f4f4e3280ad07de7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860526, "uuid": "f2cc5a92-037a-43f5-9a75-e980582fa597", "comment": "Malware payload (Mirai)", "value": "f6833d7e96b6122d51d894774e9c007bfff84d78666ecf00578891a92372df81", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860526, "uuid": "ee46fbe0-37c4-458e-8054-a7ad05534961", "value": "T1B063A61E2E218FBCF76C863547B78E21965833D636E1D644E15CEA001FB024E785FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860526, "uuid": "5d34c149-3550-41a6-99ae-213c6eb7911e", "value": "1536:U3D3jPfneFUmKx2HHqH7IOrCf/UznshEd3KOZG3zxSVcTX6u+wNDG0:I6KsKH7IO5shEdFZkNLZ/Rb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860526, "uuid": "082c596d-8c03-4f19-8fc9-05b3f68d2eaa", "value": 67872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860526, "uuid": "67d3bb33-e8c3-4da6-a6b1-fbb1470472b6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e939707-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860526, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860526, "uuid": "7ec04de5-17ed-4b41-81b2-ef8e215214ed", "comment": "Malware payload (Mirai)", "value": "12d454f447ce2dc54279eaff3f53dd7a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860526, "uuid": "15b0b567-78a2-4b85-9c20-c8dc14d82018", "comment": "Malware payload (Mirai)", "value": "1a3776db32700f172b4fc76a0bb1f72221ed354484dc5bc43c8ab6c2d2fbb098", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860526, "uuid": "e99cb2af-ca2f-44af-897c-83f5a3f203be", "value": "T1A473C61AFF620FF7DC6BCD3745A8170239CC554A12A47B3A7534D828B65B24B49E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860526, "uuid": "24934994-47fe-4c4e-9d8b-e2412d3192c6", "value": "768:K3sJmkqIlhWHgJvd8p6Es5Des4ReDB2wJ2iwgugBI2ZpMIXi5Ij7+eOcIoJhwnmS:KcJmkN1D5B4RcBvC8W2ZpMe7+pcI3nm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860526, "uuid": "fc9e6868-c83f-4752-b2bf-92d8550b36d1", "value": 73796, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860526, "uuid": "08f2deba-d05e-4982-a1c1-4c097a9c3d9e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e95479c-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1736860526, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860526, "uuid": "333c742b-a9fc-4ea5-9125-7d00da8c7e79", "comment": "Malware payload (Gafgyt)", "value": "92e1691c7a707e6d719d7d410cdd3655", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860526, "uuid": "735dd35e-f996-449b-a434-f37886218d50", "comment": "Malware payload (Gafgyt)", "value": "fe8511cccd33fd328e21f028e60ca548d51904706ddd7202b3eb73738e9c0181", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860526, "uuid": "4a4a95c5-dd31-4f95-a16d-20493bcdd410", "value": "T168E34909D7408B57C1E2277AFADB424933339B54A3D733099A38ABF43FC27995E261", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860526, "uuid": "bc4b5ecf-96fd-4ae9-8c2a-1f4ffb26b8d4", "value": "3072:2tfSVjcVCLJDexaWt8m717rz0JH/WoHIzmQwfCMQiGW:0fSVjcgLNexa9y17rz0JH/WocmQwfCDU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860526, "uuid": "0d0a22cd-e0dd-437b-9fed-67e8de6bc7ec", "value": 150069, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860526, "uuid": "24547218-7644-481d-abcb-17c54ff8a3f1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ef38a20-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860527, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860527, "uuid": "0399ce41-c198-4027-bee9-2a7f2bef421c", "comment": "Malware payload (Mirai)", "value": "d6d4e7a31cfb5a537bae4df1c4e4792d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860527, "uuid": "677624fe-63fa-485f-b179-054e1d5f0b6f", "comment": "Malware payload (Mirai)", "value": "5004f1a053f8f169e524e38830ee9ed3c7eba7fb1d5f3ea5a0986b5b623e904c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860527, "uuid": "f91c78d1-bde8-4cca-8430-bf11749b9f77", "value": "T11F434A91F8819623C6D1127BF66E428D3B2613E8E2DBB3079D225F2037C686B0D77E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860527, "uuid": "fd83da53-2653-4cb1-a7e5-7c35b7b541cf", "value": "1536:tj7QgWzvkqAs5aWU+81/v+VzxiCsaXvWn6:tjgd/81vWV9xWn6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860527, "uuid": "39f84260-cc13-4869-82e3-65ae1b950cec", "value": 59644, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860527, "uuid": "44d23613-e8cf-4fde-a890-f6473f092bae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f5e9bf3-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860527, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860527, "uuid": "e045a919-4766-42fe-acf1-b0ad66272859", "comment": "Malware payload (Mirai)", "value": "276fe1685110331057cd5a3e74d44376", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860527, "uuid": "f464e216-74db-4953-959a-510942973eec", "comment": "Malware payload (Mirai)", "value": "9302ba7444c152e1ffcb2eb3b4a8615bdcf26e7f6549a77eb09d829c2bd16645", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860527, "uuid": "1de2b38e-3e1d-460b-8f82-f2edb7240aa0", "value": "T11A331995B8C18A17C5D022BBFA2E41DD372563A8D2EF72039D212F51778A81F0E67A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860527, "uuid": "05d736eb-dc09-486d-932f-8422f9b3abe2", "value": "768:q3ltpsNJvJkRbX8lF9nN+xVM+wJqRXHQnoocH+ZkHPESOXhS9X2/NPOBzGkUzg:6tYJwS9nNWTwJ6XHQn6+ZkvJ4tYBas", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860527, "uuid": "2ce50ead-d9d4-4773-a721-2f5096d97f12", "value": 52340, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860527, "uuid": "5d9bab7c-8ae1-4c19-9672-9d1a5f88f253", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9fc0096f-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860528, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860528, "uuid": "0cf9612b-2714-4996-8ca9-262ca4557007", "comment": "Malware payload (Mirai)", "value": "ae9544beac1c9094b346b3fb5607ba83", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860528, "uuid": "3d976f86-8c80-424a-87e4-c1eec4c6f8be", "comment": "Malware payload (Mirai)", "value": "d1b788d551c4a3623ff01dfe86196545c8fa946e8a930822e8902b378c74f0b8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860528, "uuid": "61f9ac54-e4e5-4fdf-bc40-a71d05da6774", "value": "T1F7334A21AA7A2E27C0E2B5BA62F74724B2F6174E35ECC72E7D720E4DEF0064061535", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860528, "uuid": "e5b05738-4080-450a-9c6f-4948a3bb6c0b", "value": "1536:72gvjSw6AGqJxVgrq5WanyDRQfDWfRQdC+2L:SgWwZUq5mtiDWkCv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860528, "uuid": "887282e7-3d0a-43f2-87f5-7b38802fd19a", "value": 53864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860528, "uuid": "be5db82f-9890-459d-967c-29d9df4bbc9e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9fc7db09-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860528, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860528, "uuid": "ca92f547-0fee-4aaf-a565-303fa0349bef", "comment": "Malware payload (Mirai)", "value": "51f3228a435e48dd0a7d9317977db171", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860528, "uuid": "047227df-ecf0-4480-89fe-3ffea60663f6", "comment": "Malware payload (Mirai)", "value": "761b828ae54a72c2cb90c552dac0140f079a56e44345cb4b68df70e87bba6f82", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860528, "uuid": "8993fd0f-8f79-4c83-beda-426c5599e629", "value": "T18E3339E6F401AD3DF94AEB7E84260A09B630775051D30B2763BEFD939D323A45D21E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860528, "uuid": "00d6186c-12e2-4dc8-b6cb-4056531c3c4a", "value": "768:Bje09qutCupNxB6bt9zHdWCrExBYk96uxQMLx1FBws52jeV8qhm1:5l9oENybt9zMC+BD9jxQW1FB352jO8Yu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860528, "uuid": "eca02005-cc12-4ff4-afb3-c3ece1dc4ee2", "value": 52560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860528, "uuid": "af6089a6-b819-4f77-a712-111517afb255", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a4a80bea-c75b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860528, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860528, "uuid": "8a8747a4-86b1-46f2-97fb-a7c8a1479c1b", "comment": "Malware payload (Mirai)", "value": "f48f64a1d0e56138c3b23c62abb319cc", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860528, "uuid": "007209ad-7073-420b-8cfc-87855ad491c0", "comment": "Malware payload (Mirai)", "value": "399c7ffb446081836660326ef7e781fc68d0273bcf01e287c1de5f2bd69ecf83", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860528, "uuid": "85e411d7-a562-4751-ad1b-af752af1197d", "value": "T127532991FD819A13C6C4127AFB1E428C372753A8E2EA3307DD265F21378B96B0E776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860528, "uuid": "77b65094-7199-4860-aa19-f40c1dcdeb19", "value": "1536:oQSahyiQGrPHGxHw1/2OOt9bk9JtLvBp:oQj6GzGxwdgaPBp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860528, "uuid": "7fa6365d-4ac3-4711-a9ea-cc2740203d79", "value": 60744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860528, "uuid": "9d27a288-436b-4147-809f-6137a8b4d0d7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9fed5e43-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860528, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860528, "uuid": "e0bdd9e5-aa5b-4611-8352-61670cc74d56", "comment": "Malware payload (Mirai)", "value": "9b19214add7d551767463d891bfa85e4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860528, "uuid": "cf0f87df-c969-4153-a7c7-55c52d40753b", "comment": "Malware payload (Mirai)", "value": "db24d11c707f565704992ba7873e50f979d6e6784536eed9f2eac1e64234adc6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860528, "uuid": "2dcc3a32-c6b6-4d56-bee4-6b41d9861776", "value": "T198337A77E45A5E84C086817075249F351F23B2C893932EBB16EAC2B55483EACF509F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860528, "uuid": "33fdc181-4312-4029-899b-fc2114504cd1", "value": "1536:8aWjW/cXGETCWaZqKAlSW4UBOCVQV5n6:8pjWuGEYZtAuUBOV5n6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860528, "uuid": "94b0f5f2-af6a-4342-9fda-ef5ea72814af", "value": 50584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860528, "uuid": "136ce7fd-1600-4125-93a8-a83a4f2e4df1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a01bd20e-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860529, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860529, "uuid": "4d73145e-2af2-4c83-bed5-cc414438a7d4", "comment": "Malware payload (Mirai)", "value": "b2ce46e698f84bbbd7e140fc17f0da2a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860529, "uuid": "da27d851-2b9f-49d6-90f1-587b2bf49446", "comment": "Malware payload (Mirai)", "value": "dac62134c0c6dc64b948b93139043763f50924a41f65352be35557c1066df5f5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860529, "uuid": "f75e6b6b-fd1b-4e0f-81dc-79f45b487d33", "value": "T1FD234BC45943D8F8ED1505712077FB335BB7E43E21AAEEC7E3A5A632AC81A11A1072", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860529, "uuid": "f874f5e2-03bb-46ea-bfb8-f8ba01b9d868", "value": "768:JDpazul5ouhJSaHWut0mf1Ywcm4l1AEcx9FX59fcjy53bOwYmzs:JDpazul5ouhAhuNff4l1AEqTfcjA36v9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860529, "uuid": "c8625d46-5c26-48dd-928b-0fd1d341ffb4", "value": 45968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860529, "uuid": "fc159aa3-e355-439f-be5e-870ef380b79d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a020dccc-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860529, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860529, "uuid": "1fed843f-3078-47bd-a43f-f830a3deef83", "comment": "Malware payload (Mirai)", "value": "af8e209a53a3fde3d3dda2e113621b46", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860529, "uuid": "7656cca9-7a55-40c9-80a9-7995da5ab048", "comment": "Malware payload (Mirai)", "value": "ea778e0edc6d14d9bc2aeca2eaf2fa5d2054ce43562c1f13061167f2782db80d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860529, "uuid": "862b803d-6b40-45ed-80cf-f2ecd7f9010c", "value": "T110436DC6D143D8F6E80B0570602BE72BAE71E4EA2219FF47C768D631FC86641A5179", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860529, "uuid": "57eadbd4-ac7e-4d76-bf38-f5117c2d9b39", "value": "1536:DIqD1xfYqyDgZtmYXw8pJcpJoC2TwY5ts0Aj+ISeWYesu:DIqDXfYqykZ4YXwIJcp+1wytzG+MWYeb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860529, "uuid": "ec9e9011-63ae-4cff-9231-e84440b739e7", "value": 60080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860529, "uuid": "3ed3e2e1-28de-40c0-9551-01d0c41260d2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b64c5156-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736860566, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860566, "uuid": "14e53d12-d837-471c-b483-075e1011fc1d", "comment": "Malware payload (Mirai)", "value": "603f1bf386ea1a59ed3d1fa3ceb7c2ce", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860566, "uuid": "c99f41ba-cb36-494a-98a7-76d47e8202cd", "comment": "Malware payload (Mirai)", "value": "2ba63e967aca29a45bc2eccdbfbbf1a0e7b81f985147ce34783cef7862c0dfbd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860566, "uuid": "2dde8b0b-28cc-4355-b372-876cabc9ef8f", "value": "T1B6731A45B8818A16C5D813FBFD2E018D332667F8E2DF7212DD105F647BCA92B0E67A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860566, "uuid": "4fe34525-6e4b-4c4a-b22a-41604a713b6d", "value": "1536:CNnoUpUW580hqZNICdR43LkmjfGUZvNtSV0D1zfIDi722+/oFd42+:wpUW1h6NI8+Tf7bMI22+/o3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860566, "uuid": "b746ec14-324a-452e-821a-7e5bd8a7e805", "value": 75056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860566, "uuid": "dea8b9c2-f3b1-4bba-b9a4-a21e91991a26", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6754f00-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1736860566, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860566, "uuid": "b54d5725-679c-40b2-8b39-151efc7c3ae2", "comment": "Malware payload (Gafgyt)", "value": "f2f4fb17f22f1ddef7570cc616d9c29c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860566, "uuid": "dcce08ac-0c72-43fc-9678-78180e9dd698", "comment": "Malware payload (Gafgyt)", "value": "74b1b1e7d62a06564624db5e1f7bb1972d127364617b02e9164b6aec23455848", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860566, "uuid": "370db274-720a-4036-bbb2-19e6df38edc6", "value": "T10F93398785719EB3C042AA7925FB89740713A8225B0F1F64612D9BF8070BDDDFC9E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860566, "uuid": "4b813a74-fc97-4241-97a5-e3d11247c03e", "value": "1536:PevM+B1WrSY0jZkou0vWzCDMVUfmoDs2tSYVm+:Pf+B1WrnADDMMm0s28YVm+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860566, "uuid": "8ab64be5-2ab8-4cd6-b19d-7c22588ea2d5", "value": 96313, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860566, "uuid": "f49738b2-b464-4203-b36c-ebfe462338b5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b680a4fb-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1736860566, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860566, "uuid": "04643338-a47e-470c-bca5-60ab65407f96", "comment": "Malware payload (Gafgyt)", "value": "7da406e698731daf01533a3984bc3197", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860566, "uuid": "5bb5d3d5-11ea-4068-b423-4e82b28298b0", "comment": "Malware payload (Gafgyt)", "value": "5d32b827c038ecf576186950b6d212c2d084559923d8f8461fd72ef8efeaf81c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860566, "uuid": "b03c092c-3638-45d0-be29-9f0eb0dca81c", "value": "T1D1B3F641D6548627C2D32B7BAB9F438D3336AA54A7E733195528BFF03BC27981E361", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860566, "uuid": "cc5ef024-fe39-4916-8717-589bc5ee33d3", "value": "3072:/gvINOc2FN+lhty8nzbvNIhfnqsCvzFcm7QnKQXaeW://Qa3y83viFnqsCJcm7QnKGaeW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860566, "uuid": "505742c1-ad3d-47bd-ab35-123d5c555160", "value": 111561, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860566, "uuid": "87e6b57a-8db3-43a4-aefa-f53e00314fc0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b69dda55-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1736860566, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860566, "uuid": "73945bd9-042a-4d2c-8f3c-079f025dea84", "comment": "Malware payload (Gafgyt)", "value": "07d31d070bb4c77c7b55759c3466f6f5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860566, "uuid": "af339c5c-31c8-46e6-b008-d3639b53c8b4", "comment": "Malware payload (Gafgyt)", "value": "a559640dd81c561e660eec6b7c78c96c5f618c63a5e8da2c4afcd187d36ed2ee", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860566, "uuid": "f3c0c865-9c22-4318-ab57-346f378c34aa", "value": "T105E33905D7408B57C1E2277AEBDB424933339B54A3D733059A38ABF43FC2B995E261", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860566, "uuid": "59d6d362-36b0-4eb7-a26f-7e1e61b9074a", "value": "3072:CtfSVjcVCLJDexaWt8m717nI8txVEHIzmQwfCMQiGW:AfSVjcgLNexa9y17nI8txVEcmQwfCDi9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860566, "uuid": "65b2b233-59f9-4eb4-ab32-a4c5baf632c2", "value": 150041, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860566, "uuid": "db87451d-9f6c-4e8d-9849-1950d69ccb99", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6a56a07-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1736860566, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860566, "uuid": "2823b51d-0861-4b74-960a-e404513686c9", "comment": "Malware payload (Gafgyt)", "value": "e4693c341014b5c40c9e7d634fb61de8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860566, "uuid": "25187b74-53df-41c8-b30e-caf3d25049f5", "comment": "Malware payload (Gafgyt)", "value": "7b9f7fc21c24d9ad411d39b97e0a7fa863aded6e588527fa33747d8fa824e55f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860566, "uuid": "b649e365-789d-44db-b288-843967b1dc3d", "value": "T1A4C32A2327670B23C4EA503441E75337B7B5DB943874924BAAD0AF9C2F0AAD435573", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860566, "uuid": "dec68a8b-6d5c-48e9-a1a3-16783f8f3780", "value": "1536:NQ68zkUwUKtNumJAQOEIYmN/yl+Q++sFtcImQekdKGmuwA/KiyYIW:YkfUKtNRJgN/SNZ/mYGmuwACXYIW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860566, "uuid": "208f005e-d1b9-407a-aafd-b10d8634c622", "value": 119955, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860566, "uuid": "6dbe70a4-d82d-4815-9dcc-4ae8500463a0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6ad8414-d279-11ef-856f-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1736860566, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860566, "uuid": "e453802b-2743-466d-8ad7-3e563b99f1e8", "comment": "Malware payload (Gafgyt)", "value": "4e5205bdff60a1c4a96de5a83bc06d16", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860566, "uuid": "fdaa96fc-bc35-47b8-acbd-0a0b9b46449a", "comment": "Malware payload (Gafgyt)", "value": "f6b05ecec10c7ea2edf117869018f39920d766607dd3bebda73c20e39a8f9c6d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860566, "uuid": "78a12784-5372-4f72-b682-bb7ca579c8ad", "value": "T1C8D3D617ABA15DBBD80FCE3302E64521108EE49613957B6BB178CB5CF74BA8E09E3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860566, "uuid": "db42aafb-5acf-4102-a3d0-7ca73372d3d2", "value": "1536:76ejdyUhayRB4pa4ggYJ7vOTlhnxhxPYsXm/KBgvYYiCh:7IyX4pNLLxhx3mCBgAYiCh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736860566, "uuid": "e2478816-a550-4696-8632-9af270a5dff4", "value": 140059, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860566, "uuid": "f8d6c8b1-3313-459e-8677-1bd2f288242b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "03a8b734-7fde-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1736861647, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736861647, "uuid": "fc98dffb-e918-44c6-b63a-b5be66fdd958", "comment": "Malware payload", "value": "f57fb0feafebe84525278fe2d083cdcb", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736861647, "uuid": "09f3498f-4db6-4c41-9768-5f53e677b460", "comment": "Malware payload", "value": "ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736861647, "uuid": "5e1ec545-adaa-4c19-a73e-5a758a5d833c", "value": "88C313CFB6313756CB5069AA41D683EA2B7E3CC09D318F190ED16F965374A5363CB480", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736861647, "uuid": "84a9e875-fec0-4015-86d2-8d24e39c9aec", "value": "3072:cGgdcsaktkt9SqRD4jEFwVIG+meNqZsMdynPsi:5FmtQ9SoOGXRmegWl0i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736861647, "uuid": "b76fd5ba-7704-4f3a-8afd-aa4f51358835", "value": 123784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1736862607, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736862607, "uuid": "b7464876-b94e-469d-8a6e-4516e6970950", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736862607, "uuid": "6edece86-a7eb-4728-9a6a-162e872f6fbd", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736862607, "uuid": "a3488ecd-2fcc-486a-93ab-7729b2da92bb", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736862607, "uuid": "9cbcf5c2-db04-4a78-9672-61129b430a1f", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736862607, "uuid": "cb1454b3-a208-493a-a93e-d2a220a04252", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f609b130-d281-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736864109, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736864109, "uuid": "0fd3cc65-914c-4256-a287-1c709e46fca4", "comment": "Malware payload", "value": "f391621b64e5287aa53ba37dfc327138", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736864109, "uuid": "eba463f0-b7c5-46fc-bfed-f5cb00ee2030", "comment": "Malware payload", "value": "7f7488259f1de363018c36626ad42f8d2f9671f91542cb21eb5f1d7fbf5c20f6", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736864109, "uuid": "0758d7ca-6cb0-4854-8322-8ef01a4dd751", "value": "T1E4C192006BE84736FAB78B3A6D7347510A75FB11DDBADB6C2484620E6E32B144472F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736864109, "uuid": "07d637f8-af41-4ba3-b38a-19d5ebddddf3", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736864109, "uuid": "44166c65-b77f-4ea3-9ba1-c5b8d45f77dd", "value": "96:XULB/QXrIjWSQAH+HjB3HV7u9jVgfg8e8BzNt:XULB/tHHCXVK9jVgfze8D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736864109, "uuid": "6fe73333-31dc-495b-add0-71f61412f333", "value": 6144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736864109, "uuid": "832b3c45-3b8e-438c-bd08-762980658aba", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35aace00-d283-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736864645, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736864645, "uuid": "1aaba0b2-b6b5-4d1e-85f5-2a7d067a3400", "comment": "Malware payload", "value": "af658808adf49c66bd4d47a27338545b", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736864645, "uuid": "63d75e4c-e8ad-460a-9999-ad871a7a3342", "comment": "Malware payload", "value": "a3ef1925f40a441d0faa596811579ed9d2251060060107cc131fc0e5180b7bb8", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736864645, "uuid": "54dc3112-1027-49b0-8d4c-17586bcb05f3", "value": "T18C44E167D7D22CA1C126A3705AB67A7286B7F96083D78353131EF4D89034BB52B07D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736864645, "uuid": "b13c8a13-348e-4c76-9192-8de30375cb6a", "value": "4a3e896b295785cf8d7280a6d79ca0e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736864645, "uuid": "4bd7d111-a956-4b7d-8f2c-0687351c3d7b", "value": "6144:YEAvSFdr7Yy0VU97Xt+LFcOp+5M2AVV3J4dUVRaIRmu4:YExr7Yy0VUVXt+LFcOBV3JWzIRm3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736864645, "uuid": "a3714600-8d99-4a4f-bb82-4a400727a5e2", "value": 270336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736864645, "uuid": "c46e3abc-ba63-4856-84fd-4ef91c08b6b5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f685375-d286-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736865869, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736865869, "uuid": "8d9d7fc9-8fb4-4754-95ca-ebec2a9eec34", "comment": "Malware payload (Mirai)", "value": "9aed01aafc62c3bf6bed563e3fcbdb25", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736865869, "uuid": "2fe6c76f-832f-47da-b771-abb683dc4aed", "comment": "Malware payload (Mirai)", "value": "b8fb124043b6406a2810bbd85b43f8af96d2e55e4c01a9d574ae9508eb3de9f6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736865869, "uuid": "e38aa55a-5c5e-4d1f-a3e3-e7b7eb170f7f", "value": "T10C33F10BC85D9B1DD47F85B871ABE2B337D01A9936B3FF2633808FD25A174147A115", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736865869, "uuid": "413a2ef5-0a67-4daa-913b-b5825260a65a", "value": "1536:e2JEHbCrEggUWdQh/CDFGWZCH/GP3SE7Ex1/H4u+qgw0Vuap:e227CrE3UWdQh6tZCHOP3Sx94u+qgwO/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736865869, "uuid": "3ebe1d6b-f504-4063-85ff-c80ba871f7d6", "value": 51980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736865869, "uuid": "8cc08f9c-8813-4d44-955f-3a17053efdce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1996ec8e-d286-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736865886, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736865886, "uuid": "44ce9f96-34b9-4484-a4fe-59cd2812511c", "comment": "Malware payload", "value": "5bc43e48f0901f8bd983d197c88b0566", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736865886, "uuid": "ba6a54e1-8f9f-4b56-ad63-8cb02de82e33", "comment": "Malware payload", "value": "717575d440f1759e2fa0360ba5454170225aed438e78f45deff748ffbb73c5c2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736865886, "uuid": "79eb3e64-d726-4e87-953a-8bac1b37df1f", "value": "T11533F262E45DCDF6C4A42CF2C430A7C511B379B9D9AB7923B4290D9A9D6084702FEF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736865886, "uuid": "067a8cb5-477f-4903-9969-d8ddb517b5d1", "value": "768:bgTGTi/i0Uj9cHgZ+5CGEF8o6I4DQJpR5wcgjBz7FhM/oOLLZx9hPMUQDemdJwcN:yGCI9c35w3N48JP5wcwHhROLLZ5louoF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736865886, "uuid": "0f03e5e5-5e77-4024-b447-1e125f3d6327", "value": 50956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736865886, "uuid": "d6215860-bf5a-4c44-bb83-f5eb22e1c5ff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b37f114-d286-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736865916, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736865916, "uuid": "84542ec8-0db0-442d-9146-c96b10b8232b", "comment": "Malware payload", "value": "e0c898b3be4ba9949a11c2de4a116341", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736865916, "uuid": "28e3daa7-7a5f-4112-9911-4d43238650a1", "comment": "Malware payload", "value": "f58294e8d5d503d4828309c399f9acdedbcbedad3ce9962845822b5ee5fd1bfc", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736865916, "uuid": "0659fae3-e831-4403-8254-b9b533b3a98a", "value": "T103C57A5648B302ACF53660338B4A48A276EDB076C76E6FC7D05419050BDF6B643EE3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736865916, "uuid": "4d9cda33-e7a3-486c-86f2-58676043025a", "value": "d446581226ad4f2298b873f47c537c21", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736865916, "uuid": "d3dd3a69-e35e-4f5a-88c8-bb0a2837f590", "value": "49152:OQwiboESUyFd2WTdzhIdXuC0bMr1VmbRFFqL3/:Ax592WHIdKRFsP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736865916, "uuid": "f71708ee-68fa-4766-9d41-cb280349e8b7", "value": 2633728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736865916, "uuid": "41792ff6-03c5-4361-853c-a7d46fb360f6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39cb3a85-d286-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736865940, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736865940, "uuid": "2f9e7db0-22d3-4e26-a722-edb0ac6fff11", "comment": "Malware payload", "value": "68690224ffc651c6d8d5164911c6a693", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736865940, "uuid": "3c2dc451-8148-4798-ad43-73ccfcf2d8b3", "comment": "Malware payload", "value": "3754798b14b9e8071ea98a22e0fc58afcc524dcf03d751258fd25f7efac34145", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736865940, "uuid": "be4ced24-17e5-48cc-b428-05ddcb98b928", "value": "T18643026E324D1223EAFAD6F0098E03A5BD661F50D893BE8D9CA4F01755802EC5D89F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736865940, "uuid": "a7ba9763-1f8e-4318-84c3-7c3ba4241e51", "value": "1536:RBF+eGD0v0wj58djGFPNB+cwJZ0GpzDY+nbPUtEVGv:H4F0v0wj5GEWRNFDY+b2EVg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736865940, "uuid": "00d70bdc-21b5-402b-9c12-dd613e98bdb7", "value": 57312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736865940, "uuid": "3440405a-ec75-48b8-bd79-60a0ac6c5356", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5eb425de-d286-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736866002, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736866002, "uuid": "83fa993b-b93f-49dc-9006-620c26ffd659", "comment": "Malware payload", "value": "a067e5cb4a56908848598d0123853fee", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736866002, "uuid": "d92b80d9-98e9-4ee7-a652-e082de1dcb77", "comment": "Malware payload", "value": "e3dabac03107e604decfe855df5ea922e44fad1bf55382472a3ab9d949ebcca7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736866002, "uuid": "a5b008ac-749f-46a5-af35-f953e40212c7", "value": "T140430213824921A7ED25CD3B831B8A51BB2BEE7650F0B0351468D9BE76F7014F7379", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736866002, "uuid": "4482334d-6e3c-49ab-9eaf-4fa6c61e7f4c", "value": "1536:x9EaxER9c8SQe4vY6nKSNEFCPN5k4X8nKBan7xNd:jVW/cyT9PN557a7xNd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736866002, "uuid": "47630d1b-d2d5-4845-91e9-f487918ab6be", "value": 58472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736866002, "uuid": "407d2ee8-1bcf-4189-806d-84c41b7ffce6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a3189ba8-d286-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736866117, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736866117, "uuid": "39a73492-e41d-43c2-b6af-f1878fa88694", "comment": "Malware payload", "value": "0f05f06f7fda905703c932595a60df66", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736866117, "uuid": "93beb855-8f34-4258-b932-008b2574b107", "comment": "Malware payload", "value": "a31c68959a6fa3be62476623d3058d3f583973940f54c5947d17246b46ade5a3", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736866117, "uuid": "3562ad30-25b9-433f-8975-6c2d4dab0862", "value": "T18BB47C4396A17D94EB198B329E1EC2F8760EF6518F497B763228AF2F04B05B6D1737", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736866117, "uuid": "3b12bafe-1c98-46ac-8ef7-287991cdcf34", "value": "34aad785accf00f17a634a5814fb977a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736866117, "uuid": "081611ad-0675-4701-94a5-07fbb9fb87e9", "value": "6144:arv+aLHpdKFi5al0Sy8JZjwMdPX8Hz3hC+sgUrJr2gT:arv5bpdIi5aOUJZ8MheU1j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736866117, "uuid": "befe2a27-5dd7-4d57-88fe-c7b65bdfe5bc", "value": 504832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736866117, "uuid": "abfd1411-09c5-40b1-9720-f6a0ee66acb5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f44187e-d287-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736866325, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736866325, "uuid": "0668b2db-e7c5-4574-a2d3-99633284fa51", "comment": "Malware payload", "value": "b7314b69ed077e329ace67905e0288d3", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736866325, "uuid": "7255dd27-30e7-493c-8803-a9dae85ccc6f", "comment": "Malware payload", "value": "45683a9aaab0da08c281c10c969d747860281b1d79cb16007f364d0faa10f64c", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736866325, "uuid": "fd4b9ffc-52f8-410c-bbb2-2bd102030775", "value": "T168E0F112DAF8E035CA4DD187F3C9E343CC05422E9E55C5A442CDCC99E0271F599DC1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736866325, "uuid": "de3be516-2c16-47d8-a729-1ed7dbbdcd8a", "value": "12:puChi79aYVBdx6maIS1fC2ZBsEb4JFMn0W3eP:puui79J2l1K2ZBsJw93G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736866325, "uuid": "d93bb49b-3c7a-4bfe-9651-5df24e166cff", "value": 409, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736866325, "uuid": "49996bbf-9fc1-4bf2-b076-65f296251e2a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43e93353-d287-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736866387, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736866387, "uuid": "9c5d4fbe-fdc9-419d-bce5-d94840bf165a", "comment": "Malware payload", "value": "7becb87debf01309f12032edc2a87185", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736866387, "uuid": "44396a5d-73ff-4302-8339-9cf768987837", "comment": "Malware payload", "value": "5bf73774bfbe28036dd439aa382ffbbd3e603d7bf9e5054b054a7ab526007b0c", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736866387, "uuid": "107e684e-3ed7-48ae-a314-8ccf1c3c80a1", "value": "T1EAE0F112DAF8E135CA4CE246F389E243CC01423A5B4585E042CECC9AE0270F599DC1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736866387, "uuid": "156e1039-7b3a-474c-937e-3ff2db4e7d41", "value": "12:puChi79aYVBdm/maIS1fC2ZB7b4JFMn0W3eX:puui79Jel1K2ZBIw934", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736866387, "uuid": "fa38aaa4-47c5-462c-9429-0f2025777c66", "value": 410, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736866387, "uuid": "677655c6-c30d-4e21-a955-4e75dc88b433", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ce9b451-d287-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736866429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736866429, "uuid": "69628d8a-2688-438a-89ca-a2c59fbf35fe", "comment": "Malware payload", "value": "0ac1c961a0e1a0e56d4b849d09047785", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736866429, "uuid": "a3d809f9-375c-4afe-a588-e0e6caae2968", "comment": "Malware payload", "value": "2e49c62a71b842318f270d262c59a6791f4f228bb3bd1a6e4a9b7f93ac7b357c", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736866429, "uuid": "b85609bf-9575-43e9-95e2-b16aa4c8b221", "value": "T1BC45339BF7E09416E62F7A76AE59FE592719E84D4237873B8B4C170CCCE348141BE2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736866429, "uuid": "f34b4dd3-1a17-4cd7-a25c-5f462d242e9d", "value": "b4284977f843f28b434a41d9512b0b36", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736866429, "uuid": "32c75882-5dc9-45f5-87d2-7cf1a09b16b5", "value": "24576:rvJoCV2s2/J4dYZMU0rTtNLs6ug6rLrCLpAuX4kHs2jqiCF72Sc/yklB:TJxV2s2Ca6drTtNzufPCBXJGnkf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736866429, "uuid": "79f14d92-73d5-4676-b3d7-b4b5289a84a9", "value": 1237504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736866429, "uuid": "4a4fe78a-c027-414b-b9cd-8ad0f8c2ccc7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "387844bd-d286-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736866729, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736866729, "uuid": "ebe8e48b-6b27-4dec-847b-40d04f971158", "comment": "Malware payload", "value": "dafc9a80606b25ff5bbe9b5655cda8f3", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736866729, "uuid": "79d11926-0369-4ec9-9248-c55a2d1925be", "comment": "Malware payload", "value": "fc0c1dfdb854233b9dd74be35071586918ddb5e5adb4ede05be9d58bf99395c7", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736866729, "uuid": "b48c2a14-eb1f-4ed1-9785-5f7d0877ff50", "value": "T1C47412F7E9787900ED084AF8867561A15CDAFECB6CDA0D36C4BB3C2478E425135F49", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736866729, "uuid": "e0ea63f6-02d6-4a71-8676-039c6c7547a8", "value": "6144:36eJPlI6hzy/t2eQ7ssPhW6hzSr1ogrMyibf5RmzPEN+Gim64IZlT:qu81LQ7Vu5FiDmzPEN+GNCZlT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736866729, "uuid": "7e2ffa03-5e3e-4c82-9871-ce4200e4cc34", "value": 362299, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736866729, "uuid": "8ee3eee6-7f05-4b34-8341-d82c15bc785b", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "981fe1fa-d288-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736866958, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736866958, "uuid": "f83ee669-d773-44f2-84a4-ad875f5b7ee9", "comment": "Malware payload", "value": "c1789e7f2b959aba5482c7b330b50578", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736866958, "uuid": "24f661f8-9c94-4eb0-95c4-69e27e2a6e3a", "comment": "Malware payload", "value": "4e782b8732c0ac6d279d268a132c3c4f75e249ee36d25ba04d55688066538c32", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736866958, "uuid": "c87ad084-68a0-42ae-82f3-567c59b531a8", "value": "T15A43F20C55B037C9C9580CB6494A264847C6B8C733F1CF6D133689AAF753A8F6D8E8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736866958, "uuid": "71502553-4f3d-414a-88e4-42f8e5b80c28", "value": "1536:yltMbXGA9qo7iT5Vl/p82NQo6Gxl9Bvxv+NLzMQydRf6AxfaURL:YtwbooO5Vl/G256GxZV8LzURxf1L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736866958, "uuid": "48b83fb5-0832-4aa6-a1fe-9450ba665f11", "value": 58756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736866958, "uuid": "b44df1bf-3385-40fa-a8d5-3255277c85bd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5a7d65a-d288-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736867034, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736867034, "uuid": "6770693f-6754-40c4-874a-f21a7ac7b429", "comment": "Malware payload", "value": "b7cdde6d3b78d5dc2323c7e44ea4198b", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736867034, "uuid": "55995be4-8ea9-41d6-86be-9806ef96b45e", "comment": "Malware payload", "value": "94b2723dae013e24a76292961dc03cc321c9d5809057d2a1d151c826dbc7bc8b", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736867034, "uuid": "21b2058c-44d1-4b63-8b73-031061fe31f5", "value": "T15FE4230B457AB57AC90B33B05C044004E57D96DAD9724CACCCEFA2632D328B7A919F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736867034, "uuid": "e44a1f1b-014c-4c2e-80cb-71b62be2c6f1", "value": "b24f60178a02b1ca585e0f029e71eba3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736867034, "uuid": "cbaaebd4-291e-48b1-b75e-45a437cd723a", "value": "12288:QjJnVo7Q7WTbw0F00TBVj8D8XOzb4keh6HXLPFrmbgKgOY/+VfBQigDCA1soDXoS:gnVb6TtVjy8XOlVHXLP9Jlcf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736867034, "uuid": "dd82e727-41f4-4f99-ae56-2f497b74297a", "value": 699392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736867034, "uuid": "bf4a55fc-5740-4008-901e-f3b599051968", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bdbcbb8a-b78b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736867524, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736867524, "uuid": "65ac1fb1-eb18-4365-955e-9133d5a5609e", "comment": "Malware payload (Mirai)", "value": "cd99179ece8df3206ff2333d72758b22", "object_relation": "md5", "Tag": [ { "name": "501", "colour": "#f1cef7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736867524, "uuid": "7115345e-041b-4d34-96e1-21f42270f6ef", "comment": "Malware payload (Mirai)", "value": "0b051fb3621726c4525a268f2bb2c12456cc238b0b301c249feb2872177ae517", "object_relation": "sha256", "Tag": [ { "name": "501", "colour": "#f1cef7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736867524, "uuid": "4812d588-c45f-4f91-bcee-55fd015e5faf", "value": "T17A133A46B8C2CA12C5C192BBBA5F839E372613ECD1DF7307DA056B757F9286B0E264", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736867524, "uuid": "3056b6eb-0ae1-410c-95fa-c28c23fbb9cf", "value": "768:sqDZ9kpPevbdqjFkeycllaLFpFhmM08KU2fQt18Q7VQZiyc:1ZvdgFxcLzfrKUZw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736867524, "uuid": "02120507-471f-452a-9052-de24c0e550a4", "value": 43304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736867524, "uuid": "003d75c2-0b53-4ba2-a757-bbd962bbf63e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3baf6614-d28a-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736867662, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736867662, "uuid": "28eb4c06-e079-48aa-847c-8a39b309fb73", "comment": "Malware payload", "value": "083b1d8a20c711fb5191d743e24f23e8", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736867662, "uuid": "83e95470-4f88-4a0a-b72e-af8b53cc45a9", "comment": "Malware payload", "value": "2a5d62a7f43a413197f3b58529264d8eeea2453320f149ec0c2c4b2bc4ed2c6c", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736867662, "uuid": "fd5630de-9ff3-40e8-a6b6-26dd3dc87465", "value": "T163E423CB18B90BE6E04C633B84F1D8133675F51E897507DAA8F8A6B8A734346E5612", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736867662, "uuid": "a6da52dd-031d-4d3a-81c4-7d6ec88df38b", "value": "db849d92658239f75dc6b02e890de92a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736867662, "uuid": "b0c2ef73-c65b-449b-8854-b3abe5baf42b", "value": "12288:GgWqzTMA15XufkFDRifblOfR3rvC3Ylr8oB9TF26hNtRm0zo2HzX9FoS:GHqzTMA15XuYMblOf5v7JrB9kkNtUio2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736867662, "uuid": "5345b752-5791-4744-93a4-ec4f190f8729", "value": 676352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736867662, "uuid": "3fe0cfc1-a6af-4a95-8f3e-a8df0d94c524", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca09fba9-d28a-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736867900, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736867900, "uuid": "3ede69c1-64cd-4309-9f6e-e2616e999bff", "comment": "Malware payload", "value": "78a381530a8b4aa4bc6938d9a53a05bf", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736867900, "uuid": "6ea87c4a-72ac-4be9-b340-019469587951", "comment": "Malware payload", "value": "002f538af1e8c956287c7afd82abf1b4739e3e1d67a2408ecc8c2de883db7ffd", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736867900, "uuid": "92130fdf-8c4b-49f0-8582-fa5e7b57c3e9", "value": "T155F4233F0EEB8F06CBAF987590BBB5C3C1A46F207974D48B0A6453E34979A2D951D3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736867900, "uuid": "462bc2e6-d859-4f15-9381-afc6f3866e86", "value": "1cf9bc611bf1e3acbe15b198126816f4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736867900, "uuid": "b5b06264-0645-466d-82cd-9bb2750393d2", "value": "12288:5Sja7FOrFtOMIL1eZa0e1sCNOd83GeytWoJd1+ZL/J7PGe+HxWtIZAAokoS:n74u/p1s+Od83Gens6h7Oe+4tIeA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736867900, "uuid": "8153cd3e-7fea-40f3-9829-4977001963c0", "value": 735232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736867900, "uuid": "4d00292f-3a3d-4c0d-890b-bf07c4153a90", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc60878c-d28a-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736867904, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736867904, "uuid": "84c4c2bb-6770-44ce-9947-4c4c5f264d11", "comment": "Malware payload", "value": "b1f3a500f6313f6580d511bd121673fb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736867904, "uuid": "fc1a9048-1afc-4fb4-b51a-bc3f67a2ac49", "comment": "Malware payload", "value": "04773b2be8239ff774f0549a81559504c1dcdd4556c3aa8a28a77b285e02348b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736867904, "uuid": "0f958074-1bd9-4097-a585-b3b0cab42e6c", "value": "T1113302E11E42D9F0D7394D39F15D929ED7561EBCD0A1B03B220882407B8253FAACE5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736867904, "uuid": "21c43ac3-f148-497a-a549-c6bf968500ed", "value": "768:Rhlj99J7ZaMOB6RIwqD2z896wloUQoC9KUq0LxtkZQ9HfK53UGR:Rhlx9J7ZaMOBcqD2zMNloUTCwUqstEZR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736867904, "uuid": "255784a2-0721-45a0-912e-b545f34c3afd", "value": 52492, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736867904, "uuid": "35536976-a4a9-4f04-99a9-5be2ea3dc30b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4483a843-d28b-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736868106, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868106, "uuid": "c2cac4e2-bdf7-431e-adb3-bdf2767bf7f1", "comment": "Malware payload", "value": "5ca49a672deffdb0112d4498aa40fd0f", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868106, "uuid": "27d8b3fe-cb81-497c-a0fc-28bb8a82459c", "comment": "Malware payload", "value": "2b7bdc9330abd289bf3e39124f4c699781c035a3ec98b0d5b5cbf99578b817e4", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736868106, "uuid": "91229f4d-71b3-4670-8aba-27c491f02927", "value": "T1EDD012ED38AA27648D897CCC65578F2E2CCA4FE017604F7CAE981722C95D855FC385", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736868106, "uuid": "08affee8-d24d-4116-9b88-6c72ef27a0e7", "value": "6:LrJw3NQBNIQIVXNQB8oLNRFFJkqQNRFFJpTJG:3JCaeJ9G8oLNr7srpTJG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736868106, "uuid": "91a8b90f-ab4d-473c-9402-7d156b72e707", "value": 277, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736868106, "uuid": "7184f1a4-0233-47eb-aea6-457ab981c7f7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c0b7ec6d-d28b-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736868314, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868314, "uuid": "47f04b84-5eec-47da-81fe-3c8271200d36", "comment": "Malware payload (Mirai)", "value": "944b6d159ab3e092bd836ab50ace5726", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868314, "uuid": "38ebbc25-7d17-408b-847d-e89ea1dcae22", "comment": "Malware payload (Mirai)", "value": "58e3cfde1874c8b530ff43057d1eeb2e5daa7aa25b75682c6e09bf3b5921b27c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736868314, "uuid": "4578e947-42bd-4034-a81c-ecd30ba82845", "value": "T1EDE32ACBF800DEBDF80AE73B48130805B130BBA155925E376257797FED3A1990967E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736868314, "uuid": "68c3dbea-b187-4c40-9fa2-a606a9a347ea", "value": "3072:6SyFEZIXJ5aWVoTcVUmsOMMNFSkXtkEEVCjbiYL13cRAyOpF1f:jLIZsO/NI6tkEzL5yOf1f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736868314, "uuid": "742146be-50b2-4bb9-892e-10a660aefdf1", "value": 153984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736868314, "uuid": "ae4820b3-2435-4b9a-805d-577c2bf44852", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a3977b6-c807-11ef-afe5-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1736868370, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868370, "uuid": "9bc3c56d-8d33-4c55-bd9c-41f2342f09fb", "comment": "Malware payload (Gafgyt)", "value": "d48594089ad5b80ebd03798aafbe5f1c", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868370, "uuid": "1d800904-bffb-48b9-8fcb-2524267296f3", "comment": "Malware payload (Gafgyt)", "value": "a12e8eef819382c30aacec4f6b1949cbf6e170514ef74e35844cc7dedac76215", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736868370, "uuid": "3790215d-239a-4539-92f9-b064772d8ffc", "value": "T19C8125BC3D614BB60D15DFE8F226C92B645AD08A45A00F0921BD30F9A8FEF45BF545", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736868370, "uuid": "167cfee9-6c26-432d-9d79-a42c36ce2b39", "value": "48:qmR83u5pK2CECpZzg6RvnEbSRMy+W+rEWggr+DJ:qZcpK2FC7gAe8Xxa0J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736868370, "uuid": "a60719c3-a17d-4ed7-93b6-56d4ab4d3a29", "value": 3885, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736868370, "uuid": "853b6e46-6bc7-4c89-8729-2422d4c2c4bb", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e63365f5-cb3c-11ef-afe5-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1736868371, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868371, "uuid": "265623e8-ac94-45e7-b4fd-6b40d21fe88a", "comment": "Malware payload (Gafgyt)", "value": "64b028d966034d0bc61ec44da7b60ce9", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868371, "uuid": "1dc9eebc-36f6-4100-b319-772856f66d2b", "comment": "Malware payload (Gafgyt)", "value": "f901a9ba79e7bb405c19fe5fbb85a6b916ea5f766e8aa02033a3805b70869759", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736868371, "uuid": "263af9a4-aff0-4340-8301-ae1dcb5c21e1", "value": "T16DC0C9DA085467008099E9EC3756C96F504DC2C925560F1939AC017AC5CFA20BD4A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736868371, "uuid": "9cee6238-b72e-45fd-9bf3-db971f10d92c", "value": "3:L6F5oDjWl0tWTBzS/9NBzSDavYei6F0FSXWl009GBzS/9NBzSDaLAVWz:L6F5oXk0wANgLD6F0oXk00kANgAAo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736868371, "uuid": "f132bdbf-9c6e-4014-9072-c92aa55974a1", "value": 191, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736868371, "uuid": "1ed6487c-1693-4d78-85ff-947acb766010", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bdb0dd96-b78b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736868426, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868426, "uuid": "6337a3d9-85de-4c66-a8fa-dea2abf44e9b", "comment": "Malware payload (Mirai)", "value": "a8f6f2c9d8bddfb5ae3c0390a0a5a26a", "object_relation": "md5", "Tag": [ { "name": "501", "colour": "#f1cef7", "exportable": true, "hide_tag": false }, { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868426, "uuid": "e1e4c438-e24b-4f85-9e74-5683e3b2bc01", "comment": "Malware payload (Mirai)", "value": "c8e95910c3019666f111301f11633bf8c28e2b3737eb87615a396dd41ca7e520", "object_relation": "sha256", "Tag": [ { "name": "501", "colour": "#f1cef7", "exportable": true, "hide_tag": false }, { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736868426, "uuid": "ab6b9f0d-b281-4593-b7de-bf42f72c994d", "value": "T194232903BA9280BDD054D2B09A6BB037C667797E133769593398FE716F97A101E3CE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736868426, "uuid": "ade39183-d43e-4c96-818f-ccf401f71491", "value": "768:SugxJXBWUDM+5kc9Fo3z/L0YH2WKCPq/g0Ckb0w11z:QJRWZG/9Fo3rgYv/J0C2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736868426, "uuid": "bca1fa30-46e2-4fcd-833b-dab72c63d714", "value": 47232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736868426, "uuid": "d82a34dd-d017-4ba9-873b-ccbe68bbf753", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bda7da07-b78b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736868426, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868426, "uuid": "c187de96-c622-4b3d-bd5c-733363a9ae3c", "comment": "Malware payload (Mirai)", "value": "d82d999aeccdb9fe186f88bb2f1582f7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868426, "uuid": "c3756913-2850-49cd-9100-2a2d681a4ac7", "comment": "Malware payload (Mirai)", "value": "4a7ce3ce807ef1d303c65bf4a2cea3bb8ed5456c5045e7a25ca6ef4dee76d446", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736868426, "uuid": "944f8edd-e65a-4d2f-952e-34483aea646c", "value": "T19B135C02B71C0983C1632EF0253F5BD197ABAED023B5F6842A4EA74E85B6FB34145D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736868426, "uuid": "0777fb93-8ee6-4617-8fec-f2a1b53c8aeb", "value": "768:BrWgP5tKgFeIl4vcXVEs6rTVEPmNs5p/H4I4gVqKVMqdXZY9eC+IQZiTa:BaXpvclp62+Ns5p/9qtqdJYEC+p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736868426, "uuid": "8e4b5658-d869-494b-8872-37572a64c2fa", "value": 45084, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736868426, "uuid": "eceed8da-8ff1-45e3-9179-580541f117ba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80023d99-c2b1-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736868426, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868426, "uuid": "94d32b1b-8fac-4b96-9d57-410113afaad3", "comment": "Malware payload (Mirai)", "value": "7b439f437784a01424eaabdc749bebaf", "object_relation": "md5", "Tag": [ { "name": "501", "colour": "#f1cef7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868426, "uuid": "9a16786f-4591-433e-bbb1-07f0ab3da0e9", "comment": "Malware payload (Mirai)", "value": "d2ea0eed1f82458ed76a956ca3fd1f72d1c1e29b40a6118d1e5f1e6d78418077", "object_relation": "sha256", "Tag": [ { "name": "501", "colour": "#f1cef7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736868426, "uuid": "b52c71a3-1641-4e80-8c0c-a8be004f503c", "value": "T16863F74BF9819B11D5D921FEFE4E528E331357ACD3EE32029E155B247BC692B0F2A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736868426, "uuid": "e1209e05-62bf-4cb0-9fcf-deaae984a9ad", "value": "1536:yhn8AApie1GL4Hs/6H/LuOs4rb5UijsIXXlQkVdlZPiw3ooBUF:G1CGLGY6Tv5UMsIXXZrN3FeF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736868426, "uuid": "47d00a1a-0381-4bc7-be38-5a00d3f42895", "value": 69584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736868426, "uuid": "abc26f59-f735-4eec-8b35-50a4cdd16372", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bdd2bd4b-b78b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1736868486, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868486, "uuid": "f4b0b459-85c0-4e45-b236-72340ae6f0e2", "comment": "Malware payload (Gafgyt)", "value": "e803810630f376bf17be384d52b748e4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868486, "uuid": "47cbc0bb-ef89-4cc0-8b50-e827f82d78eb", "comment": "Malware payload (Gafgyt)", "value": "e98741fe8f43cd1ae807d0494af883631447040ade24670bbd45afe6eda24140", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736868486, "uuid": "1349e42a-db94-41c5-991d-e2d416cf2978", "value": "T1B5037B128E6D2D84E918A3F9F0218B79E753E118D2931FFAA645C5745483ECCF42E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736868486, "uuid": "7247c5d8-7b73-498d-8154-a3182c788684", "value": "768:BxKAevqVQzr8TRw863AlF7XACjVKBFbd+V7KoY8zCEoQZim:JevqVQMTRn62ZtY7bdQ7t5zCE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736868486, "uuid": "72b0ed3f-835b-4c5b-a179-c53f2227e6fc", "value": 40948, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736868486, "uuid": "d721c46e-a345-4386-a22f-520035f98331", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3131a684-d28d-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736868932, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868932, "uuid": "eeadc91c-7fa0-4dfc-9b08-71062a52765b", "comment": "Malware payload", "value": "9c0cf500a75080a480c04b5ab4af863a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868932, "uuid": "02b3fbf4-8cd7-46d4-81cd-9bf6b61476cc", "comment": "Malware payload", "value": "fc81007d717f418b7542faff1bb8a716003b4338809b6b6f1fae407a22e8808e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736868932, "uuid": "54bb0099-7f39-476b-9de8-4b84820c303e", "value": "T1FF03E133BAA908C6C1A610365DDF3FE5250183DF1846A52AC86CF07D5E49FCA7A2D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736868932, "uuid": "e4fd5377-6970-4943-bbf3-88d84c3f206d", "value": "768:DOHPkureU8rirKpbN5vygzBvykN05/bSPs8eEQX3rXzu3915QnbcuyD7UoUR0:qHMliOFNEgz9FNaiCbXzaEnouy82", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736868932, "uuid": "736092d0-13db-41e9-9608-54ce5df74c6f", "value": 38312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736868932, "uuid": "90c8a35c-20de-4529-9d38-b139b5be3fdf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "628286ca-d28d-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736869015, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736869015, "uuid": "ef1eb01e-4b6d-4d50-bc4a-7da740cf7e10", "comment": "Malware payload", "value": "cdd496bc0b0eaa53c57c14aaca927d4e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736869015, "uuid": "66451b4f-a0ee-4c62-8db6-541ac4d2151c", "comment": "Malware payload", "value": "72daaec10171e4d14ea3e183022e6bb291f2f7751d496a2ce8225399e0f6ae6f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736869015, "uuid": "bba6d6c9-7f6d-4d0c-8f7f-a3979592b4e9", "value": "T11E259E027391C062FF9B92334F5AF6515BBC69260123E62F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736869015, "uuid": "39d09838-f6ef-44ee-8d18-8094fa97da49", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736869015, "uuid": "c69bf357-dcaa-49d4-a72a-403f6914ba4f", "value": "24576:oqDEvCTbMWu7rQYlBQcBiT6rprG8aRhp:oTvC/MTQYxsWR7aRh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736869015, "uuid": "56aa7c6b-6768-4018-8aea-a6ec933f5713", "value": 967680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736869015, "uuid": "944f8844-5723-4e1a-97de-7a5b986d00c0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d787762a-d28d-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736869211, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736869211, "uuid": "c0cece49-2588-4e4b-ae7a-8c5a7636fa77", "comment": "Malware payload (Mirai)", "value": "0a0abc9e92b1cca923b83bbe114f6584", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736869211, "uuid": "d4081e95-8d97-4d4c-bf6a-824b0967f868", "comment": "Malware payload (Mirai)", "value": "def2fadd479f0a5f3507e914c283efb25c874d60054a7564fb39763721b0d2b9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736869211, "uuid": "94db9b70-41cc-4643-8093-e23494f0edbf", "value": "T14733F16B075FA97DE0BF1E33397182A5BE55D814666B4F1D12BF6233AE331908A123", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736869211, "uuid": "671aeecc-be07-4267-a503-238de0d5b939", "value": "1536:DzJgPRPYb2oKvTHf40ZhXyv222Hl/BCUWf:vJgsKLwUQvMHt5S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736869211, "uuid": "7c436272-ff47-4e26-a77a-7d13e0cac005", "value": 55008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736869211, "uuid": "9cb0c496-fab0-41b9-be09-8dafc50af25e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e502b66-d28f-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736869733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736869733, "uuid": "f07c4725-a1c7-4d14-8fe7-875d15ff2666", "comment": "Malware payload", "value": "4fee171fd9210a96f194c101d904963f", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736869733, "uuid": "11998bdd-c44a-43e3-a5c8-c00f38d1770e", "comment": "Malware payload", "value": "4963050e0f0e9551016ad7b04e45fcc19d2ae63e891d814c52b385a185551756", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736869733, "uuid": "6c8b44c3-64fd-479b-8862-7605f6000e02", "value": "T1BB6533EABDA60E56F31D1F3CC48BE66A8D1DC91B9109A8E4CD8EB1DD946C521F400D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736869733, "uuid": "57bf559d-3516-48b3-b2f4-60c04709f23d", "value": "2e5f01e43a497b1cd096f44f6ff24f8d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736869733, "uuid": "a92fd807-c078-4820-9ac5-1c2185dd38ff", "value": "24576:dcUWbzVB/rYS/e3L7zt22FuDRODz0b0dRgGpvY1iOrgCGByJ4ukBW5Wr8URRm:dcUW/U+ebVjFfF71YY/m8Wc88", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736869733, "uuid": "d33ce35b-01ca-4d4b-b927-9b423c21435c", "value": 1469440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736869733, "uuid": "5d468fcc-0041-4df5-8ffe-4af37a7e2397", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6fc7484a-d28f-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736869896, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736869896, "uuid": "69a7ef23-d346-452d-93f5-d3247d5ff5a7", "comment": "Malware payload (Mirai)", "value": "503b73276bec0b759f600524d931335f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736869896, "uuid": "77e3467d-e03c-4084-8c60-7cb0e010af70", "comment": "Malware payload (Mirai)", "value": "4f717dfd2a079f475a71771194d4538a841d4826ef27d0b18b5b3ae4cc18e269", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736869896, "uuid": "e18ef88d-929d-45b1-8b47-f076b7afceea", "value": "T14843F13110A9E739E255AF77CA0CD5637E8B8E98C06776EE1106504CF7CB8A424FBA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736869896, "uuid": "a630ba32-0c58-47bc-b8ca-a51c99b0b69d", "value": "1536:5LlP/EuvJRGvfqjHXua8/r1ODxrJP3duGRM5ZbhFLsNkScw:5LlXEuvEkH9crgrJMWkXL1w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736869896, "uuid": "ed95f627-9b1e-46a0-adbd-93d33c63989a", "value": 56960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736869896, "uuid": "f9bf8ca8-de6c-425d-a926-a95a792cf343", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "826f5e97-d28f-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736869928, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736869928, "uuid": "6ad6b2e7-c3c8-4187-869e-a9b407d0b47d", "comment": "Malware payload", "value": "00d95adc7ca2126d416fb70f2fae82f3", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736869928, "uuid": "126c532e-94bd-425b-a753-336f127b0303", "comment": "Malware payload", "value": "7981d6c23a9624544c9610e2cfe5de81a0abfc9022efbd2ff0a514a7be98b93a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736869928, "uuid": "7b099ce5-6306-4b19-a00a-7b6fe8e24f6f", "value": "T1F785D0023391CD57FF5683324BAAF65216BC2D6990A3E25F23843D79BE70664523F6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736869928, "uuid": "18bcaa31-e895-4c85-82f4-2d42291dd659", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736869928, "uuid": "c3181e8d-399e-40c3-b6cf-e6259e589f86", "value": "24576:zqDEvCTbMWu7rQYlBQcBiT6rprG8aIn40KXZJnSpepJ8GvkZbccsFq6fT:zTvC/MTQYxsWR7aI4XXupebRqb3so", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736869928, "uuid": "8ca5f336-97b6-4f1e-afc7-5735296aba9b", "value": 1790976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736869928, "uuid": "448aa2e7-33b7-4d74-8e08-34bd77f2a123", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d3468716-d28f-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736870063, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736870063, "uuid": "1dca4412-50fb-4c56-bd09-7a0f7552fe7f", "comment": "Malware payload", "value": "8b9478bc54500ffe334e17669fa4bbd0", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736870063, "uuid": "f241d8cb-2ab1-4c96-896b-8aebfeda17cc", "comment": "Malware payload", "value": "54f477f58c5eddd10b677aa2d8c931a3084fd5f91cc02abf8a626db4db375b76", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736870063, "uuid": "b2f16095-c5ee-4e2a-a93f-c766aaddc647", "value": "T1FCE4233B6EC60262C8D664312DAB6227FC2F536D541E5457BD9C423AC62138889FF3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736870063, "uuid": "7ccab86d-59e0-4f57-b2eb-7cb8334ead55", "value": "bbba45e6bef46cfa69958215f438468c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736870063, "uuid": "cae5f653-ef47-49eb-b3a9-f1ee0da69345", "value": "12288:sRTZ1H62N1B3Fc02VP4DpdsEic2X7LA8qLzNGWHRva5NbyKoSGBq5TIr9DYMoS:sH6If360FDNSX7c8qLzcWxSDyKoSGU0V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736870063, "uuid": "6ea019ec-a8c2-4a04-90dc-c2df7f38a396", "value": 710656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736870063, "uuid": "061bb2d7-8e7b-41ee-a1b0-bc205961c9a0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb3fc75f-d290-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736870560, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736870560, "uuid": "af3b124f-cd1c-4061-8813-6221ff496680", "comment": "Malware payload", "value": "de88c87e37ce405382d39dbd1619e050", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736870560, "uuid": "c42f57d5-ddec-40d6-a7f4-2ec3b33a0ecf", "comment": "Malware payload", "value": "258fb290dc43efabf341b09bc65edd1eaa1fbee7fc4137b6d725fba656de9cb0", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736870560, "uuid": "a51b517a-775b-4643-92ed-559c430b9677", "value": "T1343523F26F9EACC1FFC394F8A25560290F4A2FC70D7510DB817345616E96228E5BD2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736870560, "uuid": "487538ef-6907-42b8-bd22-d90acf0a719f", "value": "24576:lS8jKkB2j1cgplbkOPjyctkpyZXtI1o+LzDLQ5BPRKIYHz:lSCAcWbkyjycrZ9IF3PQ3PtYH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736870560, "uuid": "f0030679-aacb-46cd-9c33-28b7cd5fcaac", "value": 1158320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736870560, "uuid": "793547e3-ec17-490b-957c-b29faeeb89e1", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "28b1c5b7-d294-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736871925, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736871925, "uuid": "3a052c2d-1e8d-4793-82e4-d796163b4715", "comment": "Malware payload", "value": "397e971303d80a6fc318b60310d70c56", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736871925, "uuid": "143ce61c-41f4-4ba5-9de7-688b74cf722a", "comment": "Malware payload", "value": "88e9c6a3ad750a9b8770d6041850769937e1b73b17b0a74e5431a13749c9d9a6", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736871925, "uuid": "72f8d0fb-6b1a-43d2-8b47-928c149ad839", "value": "T12C8533B2E5F64395F0D8AFF2A34A8533133A9D257CC54809AA2DC231EC975D6E874F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736871925, "uuid": "5bc3e6bd-9b85-4a61-8fd8-e48ded2f73f8", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736871925, "uuid": "b0ed7789-bfc3-4d70-a774-7072be7f0f05", "value": "49152:kRwbb0KZ/3NQT0jcCDnaFTz1cvHhtotocQSEreF:kq3J3a4NDaFFEBfL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736871925, "uuid": "55f5cff3-5fcc-49d2-8e92-95b6566603c8", "value": 1740288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736871925, "uuid": "6444d468-0f68-4609-a290-2f637244009d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "245c7a0a-d295-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736872347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736872347, "uuid": "56c2c702-dbfc-481c-8b01-6a483fea0a58", "comment": "Malware payload", "value": "d211052c2cdbbe5fad2ce793728e3f16", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#aa8ece", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736872347, "uuid": "8df323c1-276c-4b8b-8206-6fcfd12f8513", "comment": "Malware payload", "value": "74572dc3650cd085ae50406d715afa684f5a50491277af10d4e9556014ec5540", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#aa8ece", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736872347, "uuid": "07b5c84a-2584-44b5-987d-60d1979837e3", "value": "T1EDA6335C3F982C3BE9EE277A9094A224A5F6DE5D7447E38508027D894F372D2DA031", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736872347, "uuid": "b35d29d7-2df5-4699-a92f-77da4d39b28f", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736872347, "uuid": "b552d8f9-70a2-4302-9533-2f7ae160eea6", "value": "196608:1T2dmMnr9VML7tN8PSAM+gi9Qb0RiMiXhmk+tAuQXh9dRRr40ciawa/YP2:1TnAC7j8PgiAjRmk+OZU0HaFwP2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736872347, "uuid": "a11cb1cb-d9bf-4131-ad61-196e43268499", "value": 9859072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736872347, "uuid": "fdc26813-ea46-4d56-a8a7-103b59cb4faf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e03c73c3-d295-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736872662, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736872662, "uuid": "e30d05b4-7067-414e-8468-1bb1e5044124", "comment": "Malware payload", "value": "9a8867e7752b2c0b5d9319539c4d0cdb", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736872662, "uuid": "6e08cda8-39c0-4791-834f-76089a3e1753", "comment": "Malware payload", "value": "62e762c4c45d879ef7d139ba7d48c9a1ae65cb2c0c86126bb2a0999aeee726fb", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736872662, "uuid": "f9793025-fa53-4c81-994e-a1d855d61729", "value": "T118F4332E20F4625EC3646EBBDC4B2D9EC55BA21D500B8FF60964701EB14235637FE9", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736872662, "uuid": "a295adc6-1ef0-4f92-b415-8213f7d039c3", "value": "987b6ca9dd5f926a72ce3178ed8a981d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736872662, "uuid": "4e9d9ffc-a8ce-4969-870a-f0102361acd7", "value": "12288:IZ5CIwYYeRf5CbVs001NiIUgqhSg/QOhsRkWhzrJoxT9LcZVsIl0KoS:IZ5Hl3rNiIUgqhSA/u3JoB9LcZVse0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736872662, "uuid": "6799dd37-e591-48a3-8cf4-a4214cf9b385", "value": 734208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736872662, "uuid": "e260149a-c597-4910-98e5-644c8bc621ad", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70097de4-d295-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736872859, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736872859, "uuid": "e61cf3f1-f631-42e7-9450-cb644456c9ae", "comment": "Malware payload", "value": "1a9143eb9d9af4525a14751998d7f58c", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736872859, "uuid": "e79e1a4b-a00c-47c8-9f21-86cc29c60a62", "comment": "Malware payload", "value": "a6a210337b041ebab11fc496589db9051ec347d5a5252af1f489e4ab44972a65", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736872859, "uuid": "aba3660c-2adb-46a9-a5ce-6c3b3b94426c", "value": "T1667412F3E8583982CE5595F14766A5A24CDDEFEF3CA50832D57F2C6A28D021279F00", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736872859, "uuid": "c32d1dbd-0713-4912-bd28-e6de9cebf5cb", "value": "6144:FdYmz9VL4C79PNA6hJS9PSjqVidBAPfK6h1Sp3o4wM9J0Yn5QS6b2:FaOL4CHWFLyYAq4B9hn4b2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736872859, "uuid": "5d854ccc-6463-401b-ad0a-01ab2129ef96", "value": 362928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736872859, "uuid": "d43903bf-3e81-440d-b749-6ec90d42c329", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2460ae4-d295-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736872901, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736872901, "uuid": "a27b2ad3-ef4d-431f-96b4-28b12c518268", "comment": "Malware payload", "value": "5dfadbf8603507c0c5e74eeb3b245c8e", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736872901, "uuid": "04e70c2c-b2ca-4e0d-afa9-cae728eaf45e", "comment": "Malware payload", "value": "f70a6dc28bc1923d60cb089133d856e9301514fc08dd56592085cb2ddf0bd962", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736872901, "uuid": "01d2f315-9a9b-4d06-b5b3-5d42fbbd4980", "value": "T15E8533F60152893EE5995E386189A5B0FC91BA3063BF160C41E753F1AF34E3FBB984", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736872901, "uuid": "29e05dcc-1e84-435d-a73c-9a30d374b051", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736872901, "uuid": "fed92f31-5ef7-49cc-9e42-00e46a701f18", "value": "24576:Rsat0rVSN1ESPA/05k7+E1MYE2vFVr9RfHi40znABe1RcDGA/7x1ccokyAWyHv8W:furwS0C77MYn7nOnYWRSGAV7okcR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736872901, "uuid": "91fa6fd6-43bf-4515-84ab-e903623c7cd3", "value": 1796608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736872901, "uuid": "95d4d4b6-910a-4b52-952c-070ae056bb6d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "75c42c98-d296-11ef-856f-82aee05be84a", "comment": "Malware payload (Xorbot)", "timestamp": 1736872913, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736872913, "uuid": "b373da0d-458b-432a-ab56-53395486b5aa", "comment": "Malware payload (Xorbot)", "value": "6b2a5669d81a1bba0907af7b753fd0a3", "object_relation": "md5", "Tag": [ { "name": "37.44.238.67", "colour": "#c4bd8a", "exportable": true, "hide_tag": false }, { "name": "37.44.238.75", "colour": "#3E8279", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736872913, "uuid": "cb184e32-c548-4fb2-a494-0061f2e24c83", "comment": "Malware payload (Xorbot)", "value": "941bc440b8dc4d86302edf0d2578aafcc774ab711367b9c79621fb1dd3821ede", "object_relation": "sha256", "Tag": [ { "name": "37.44.238.67", "colour": "#c4bd8a", "exportable": true, "hide_tag": false }, { "name": "37.44.238.75", "colour": "#3E8279", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736872913, "uuid": "f5af98e5-4b3f-41a9-ba26-ba8e93747b58", "value": "T1B122EFC9114511324AE0DE5AB42A48D4B80CFC85CCDEA92E9CC57A9C950AFFF78C5E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736872913, "uuid": "d4b6d8cb-cb89-4ea5-9ca8-6cef8d5b22c3", "value": "192:pLPK5Zz2Xv0BdPi5B4TnLqtAtotJtitutTfme1IcwOuLPK5Z0tAtotJtitutYXvD:al9qtAtotJtitutTaOEtAtotJtitutpc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736872913, "uuid": "1ee054db-03ae-480e-915d-f43b4e93248a", "value": 10830, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736872913, "uuid": "1d4e4ea4-5079-4091-96e9-0b7f2e2d8152", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c25ceec-d297-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736873326, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736873326, "uuid": "4924218a-8858-4562-b522-f32500993051", "comment": "Malware payload", "value": "23f091185b031e9b20803a249af0d9f0", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "jpg", "colour": "#89f234", "exportable": true, "hide_tag": false }, { "name": "png", "colour": "#293509", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736873326, "uuid": "aa404997-e445-44e4-bcfe-5684c94ca0bc", "comment": "Malware payload", "value": "896b0ffbef49f8c1eac90adf8f23f07b1485acd2f7f22281d2590cfcba241421", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "jpg", "colour": "#89f234", "exportable": true, "hide_tag": false }, { "name": "png", "colour": "#293509", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736873326, "uuid": "2427e6a4-6669-47a2-9119-ae1114fe0277", "value": "T12FC4F13312037D8A7BBF2E41E44529942CDC6D7B9B148588FDC902E992EB914DE7CE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736873326, "uuid": "1fa33c41-c00f-41f3-877d-f35b9d7ef8aa", "value": "12288:WGYvnd/OhQdHxeoqpUoEJN1TyLUZhV5y50YvO:6EidHsoqGoEJ+Llq1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736873326, "uuid": "33e2a221-02e8-42a1-8553-649d6901ac38", "value": 590375, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736873326, "uuid": "a49b16c8-46fd-428c-a412-76ef484e9418", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39f83dc4-d298-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736873672, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736873672, "uuid": "c7ab68a6-adf0-4908-aa29-7f072d1ceec9", "comment": "Malware payload", "value": "3f2f4d879333235f87929fbc00e92c05", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736873672, "uuid": "c0d36d2e-63de-4921-873c-52c9afe8036c", "comment": "Malware payload", "value": "12508823d726974521247f4ac9369a0e5d59a507c3842d1fad519dbef262cfe4", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736873672, "uuid": "12ad147d-0d03-4a14-bb99-bcffbd6c33a6", "value": "T130753313704F65F6E124B87F6062275CEA2EBF10B49F88DA777E57394B18A8636C07", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736873672, "uuid": "90935440-ac48-44ce-9d7b-b245e3b0f065", "value": "3a8c1c2cf7ce73e14b378d6c019af65a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736873672, "uuid": "b699cbab-ccd6-43e1-96e4-bc1638bc6946", "value": "49152:Xs1twIbBS5lgHROcBYzBDVzOYmARcQmtxj:c1tXbBSsHRchZ8txj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736873672, "uuid": "c752d0f2-f4fd-4cf1-8b20-f2706c816a85", "value": 1691136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736873672, "uuid": "58e8209b-20e4-4bc5-bf61-8a52c051ce20", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21f7b391-d299-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736874061, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736874061, "uuid": "eb33aa1d-abb1-48c5-a245-ef78b9e84f07", "comment": "Malware payload", "value": "d48267adf8a6d812050a79b6bda0027f", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "TgToxic", "colour": "#55a911", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736874061, "uuid": "49f2e4fb-4868-4344-a8c8-e32482e73a51", "comment": "Malware payload", "value": "b5cf64aa3198f5db27b39700a4e28a066953229967c2c4cb20b044bf8e7cead9", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "TgToxic", "colour": "#55a911", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736874061, "uuid": "3414b895-0794-42ce-a04a-7d7174734307", "value": "T1CC36E0AAE3445669C9F613324E7669B1A18B4DF34B4796E36C047B3E04FB5DC0E24A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736874061, "uuid": "8219ffce-a960-4c0b-b2cf-8a80cc07d8b2", "value": "98304:N3mUMdkaoLKauowNrTuv8pCEpR8bqObfnLxDT8i:N3mUEpauoarTu8pClb9vF8i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736874061, "uuid": "c919748a-a57b-4531-942b-db795cf6e78c", "value": 4915896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736874061, "uuid": "18ebc8a1-9641-45db-8f4a-e1e354e5f3a5", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94a65b1b-d298-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736874236, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736874236, "uuid": "fe3c13cf-2070-412f-9fc2-53ee8cb5c327", "comment": "Malware payload", "value": "1be9477e9c20164ff4651cfd299adfcf", "object_relation": "md5", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736874236, "uuid": "0d9ff234-2519-4241-bbe3-d30e734d38a5", "comment": "Malware payload", "value": "6adcb4e7ebba5f9092cd87d58f77e934e7dbec2dcf95246a407ddfc1643b3006", "object_relation": "sha256", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736874236, "uuid": "a9af1d78-8371-45c5-b895-536b1690479c", "value": "T110063323189598B0DEA3A3715D37E7C477B3BD811D3899C871AC9D78FF99285A84E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736874236, "uuid": "e4eef32e-289b-4224-83ad-d18755e9ea42", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736874236, "uuid": "43e06f24-08c3-449d-8bf3-2655d6b9a4b5", "value": "98304:4Ml9td47zB5uac8tyFil9+Rc5jGpyx9GXwOA37Sbbx+:ZpsuaNYKIOypy7LOALSbbA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736874236, "uuid": "5a5c5b35-902b-4665-b94e-6fa8b8dce1e5", "value": 3676641, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736874236, "uuid": "fc487914-df7f-461a-9a5d-aa005c5ec22d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc363863-d299-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736874427, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736874427, "uuid": "0e7cfe3b-8e16-4d23-8b9e-f8ca50f16034", "comment": "Malware payload", "value": "6eaabbd9677f6cdddbc78c04984948ba", "object_relation": "md5", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736874427, "uuid": "2522fefa-0eae-41f1-ae38-f208a656b8a1", "comment": "Malware payload", "value": "fee13de12fa1b999c2dd19aa6da9272d2b955ccf7139ec46350374d77975eef2", "object_relation": "sha256", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736874427, "uuid": "a598fcb3-348d-43bc-8fd6-42b73e60c1ab", "value": "T18BC32A731107FC8F67BF2F89E8443AA12C6C557BAB1D4158F8C907A890EA520DE79D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736874427, "uuid": "266b6c24-4ae9-4f9d-b8e5-446849fa6fa7", "value": "3072:waQm6eceoU8jH/06kbaAiHnVExoyZYwOiY1LBSUkf2jFgdIVgMbJN+5PVu1Zhn60:eVe/8jH/fkbaAiHnVExoyZYwOiY1LBS0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736874427, "uuid": "c8470d19-333d-48d4-86c4-598f16771116", "value": 122749, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736874427, "uuid": "f26fb68e-5aa8-427a-aa7e-dea617f336f8", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc364ecd-d299-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736874427, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736874427, "uuid": "5cca6c21-d9e6-4d40-9b4c-c7b7a77b70ae", "comment": "Malware payload", "value": "2b60655a425eaa036531f18e96741444", "object_relation": "md5", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736874427, "uuid": "e92d27cf-4f8f-4d59-88a8-ba03cdc4b8f6", "comment": "Malware payload", "value": "930a09e6ee090e9f2b67e1a37270b4c31e3cb4fdad55cd8db34b11519759f145", "object_relation": "sha256", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736874427, "uuid": "5c08161f-4876-48d8-be6f-56fd42aa2f70", "value": "T162B47D3141033C6E37AA2ECEA4006EC10C9D7997BB54D550AE899176B2BE13B4F6D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736874427, "uuid": "59b56579-b258-454e-9700-8b40e284f1c8", "value": "12288:srScfYL0kaO7oNtiE45hXTLr1qwofa54+:1QNtobTL5ofk4+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736874427, "uuid": "ea87592e-ff3e-4139-b0f5-7a2bc4d9e547", "value": 537125, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736874427, "uuid": "22f416ab-20fd-4d81-ac2a-44aa976872b2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc524e03-d299-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736874427, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736874427, "uuid": "2a5f37ff-032a-4f67-b95f-4b75a1704b59", "comment": "Malware payload", "value": "e2532dd0f68b37aedc1221fb6c805fdd", "object_relation": "md5", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736874427, "uuid": "90ebbc47-3ebd-430e-9198-c19583f1fdc0", "comment": "Malware payload", "value": "2fbeb35402b8e7d05d2d1265de6b4645878698193024fa2c8e8e5ad86fb637e4", "object_relation": "sha256", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736874427, "uuid": "9cb1095a-7be9-4145-b22f-ee24892019a6", "value": "T1D7C401321547BDCE8BBF1F49E98429A01C586177AB448094FDC907B952EF9208F7DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736874427, "uuid": "75bd603b-dbc5-4b91-b167-da8658a5a5ec", "value": "12288:El1fOG2gogy1+tARiuKIGK31McrhU5fYyYa+:m8G2Xx1+UKcrGgyc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736874427, "uuid": "3db34ae6-263d-4b5b-ae14-e883067fa9a6", "value": 544632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736874427, "uuid": "4be2305a-6ac1-48f3-b222-23f32ee828dd", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc64d41f-d299-11ef-856f-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1736874427, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736874427, "uuid": "1ab3b348-4ece-4e58-ae06-eceedc9b2012", "comment": "Malware payload (LummaStealer)", "value": "5259076d6fd45bf7ddbb866c169541db", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736874427, "uuid": "703f50a6-8380-4200-9857-05e79c12d279", "comment": "Malware payload (LummaStealer)", "value": "4154e02a0d922fefb72812b972808dbf6c3f0a9108f577b641c9a57cf8d8d342", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736874427, "uuid": "ea9aec7d-bc7f-4e2f-85a6-56a86f20e50d", "value": "T120B46D3240537C5F3B9B2ECEA4006EC00C5839A77618D154AE899276F2FD53A9E6D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736874427, "uuid": "7245d746-ae83-45b4-913f-50260640f668", "value": "6144:eVe/8jH/fkbaAiHnVExoyZYwOiY1LBSUkf2jFgdIVgMbJN+5PVu1Zhn6w/lAVigM:eFwoW2h7dVI42CoeUJ2z6m20VFqwg2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736874427, "uuid": "b9445e14-ee7c-47e1-9f47-a6aaa384f2f2", "value": 538493, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736874427, "uuid": "cfce9c47-c8db-4939-b1b1-d9af48d340df", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f3f1aeb-d29a-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736874486, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736874486, "uuid": "b68d497e-8827-4822-9ddd-bfb427c9fcaf", "comment": "Malware payload", "value": "3dadbc2ea0e8abb7ac1332c0ce767290", "object_relation": "md5", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736874486, "uuid": "e817ff60-765e-431e-8c93-0e436a286919", "comment": "Malware payload", "value": "2b0d8d41f4af45a388cc70677463a010e71e31a5ba6baadae68a83004558415c", "object_relation": "sha256", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736874486, "uuid": "93ae33fc-6bc4-42a4-a8bc-402f14d65eca", "value": "T1FAC32A711207BCCE97BF2F89E8843AA11C9C5077AB548598FDC906B952AF5208F7CD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736874486, "uuid": "48e05939-ed83-415f-8567-3ae044110c14", "value": "3072:U2sz0orzAOok9Y3sOGnuerPkwo67g3Lk7pyFV50GuGdtqphBddqyIFr2JdyPrnx/:U2s1zAOok9Y3sOGnuerPkwo67g3Lk7pU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736874486, "uuid": "7fb001e2-0191-4f3f-bae4-61938d24fa44", "value": 123448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736874486, "uuid": "deaa74c1-1ff4-4e89-9dec-da0b4b9f0e2a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f3f9742-d29a-11ef-856f-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1736874486, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736874486, "uuid": "a18e44b2-b165-4e7d-afb7-721082c036fd", "comment": "Malware payload (AsyncRAT)", "value": "4b3210cb8e8302866bf06ad0fe25f2b9", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736874486, "uuid": "24ebd8f1-535f-482e-957c-4065b8046512", "comment": "Malware payload (AsyncRAT)", "value": "09dd3ed3ecfe134067a2f8b6640cfbc3c3b702a0714328856d2f6b7459342048", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736874486, "uuid": "7e889de0-36bf-4fa4-89e2-c7f49f6980e0", "value": "T1DF045B730103FC8B67BF3F89E5043AA51C68643B575E85A8F9C90AAD60EA510DF39D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736874486, "uuid": "0f1bed29-30e9-4384-9365-f4da25c9e86e", "value": "3072:waQm6eceoU8jH/06kbaAiHnVExoyZYwOiY1LBSUkf2jFgdIVgMbJN+5PVu1Zhn6D:eVe/8jH/fkbaAiHnVExoyZYwOiY1LBSD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736874486, "uuid": "b52ae029-f108-470f-a944-ecff52c679d1", "value": 181457, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736874486, "uuid": "917b90cc-dd58-4303-aa9b-1f17d277ad26", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "458d0b81-d29a-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736874550, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736874550, "uuid": "c2b75a00-15de-4ad6-9dc7-ea432603b4e7", "comment": "Malware payload", "value": "b9a92ce03ee664f7cd0e24447798a857", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736874550, "uuid": "3c1d17f3-4137-47f4-9854-f5a3999f7364", "comment": "Malware payload", "value": "9cd93ff70cc78df9f4a187048a4172a0c92699e224da46b7d6b3552a3f773d1c", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736874550, "uuid": "d98c85cc-289a-490d-94cf-2d9bcc21c2b1", "value": "T1A5853374EE9B81FFC3CE033A42F708697A7522FB16578A96150384B67C93E502D9B0", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736874550, "uuid": "8103eb13-cd1f-4e18-992e-f058b8e74f1e", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736874550, "uuid": "01f247f7-5f98-45d7-99d6-ff5670b5246d", "value": "49152:ecg3dwtBoX2yFKrEP7+5D1OzAMqMPLM9KAsjN:CS4X2GiEi51NeLMkV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736874550, "uuid": "109d9856-bdff-4720-bfb8-ad5520f71a04", "value": 1846272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736874550, "uuid": "407ee965-fcdd-4db5-aca9-2294bd34b082", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82d4d74b-d29a-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736874653, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736874653, "uuid": "969a48b0-6e04-4635-8dfb-315e5d10fa25", "comment": "Malware payload", "value": "03944a329dcb325fb58231eb866d4585", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736874653, "uuid": "1841939a-0d06-46b1-8376-c041af9aa95f", "comment": "Malware payload", "value": "51be59c8c16cfabd3217e7d1e7fb43e59de2aa2421eb0d77291f98c6edf185ce", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736874653, "uuid": "00c37840-43e2-4826-9166-046f3b98385d", "value": "T11047DB8C0EB65EF8F225E01723616BA6E449241FEF453BD8F64D71AC9F04085FB9C6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736874653, "uuid": "3fdd6f9e-41fd-489d-bf7c-a0309a4a5fbc", "value": "49152:Ubjb0T2gfMtGs+ud5M2Dpd/W3XZTvjpHHplwra:Nu/MEdS9plw2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736874653, "uuid": "de9a17c2-4b71-4b55-8de0-a5587055f5ab", "value": 25518665, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736874653, "uuid": "ea0b97db-e5ce-41ca-b714-5d01bb78b3ea", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1501bd48-d295-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736875027, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736875027, "uuid": "e672bfbe-2d39-4fd7-b514-028a4fa4ed57", "comment": "Malware payload", "value": "a228fa6c2bbb2f6e0914808a1af752f4", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736875027, "uuid": "c8c35983-1609-4560-9407-abdaf933b38c", "comment": "Malware payload", "value": "f3c1695c8a86fb6c70dc60d91929ff7088beb43b3a89c947de04d35a3d4e91ff", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736875027, "uuid": "38566b36-ca52-4922-9161-47f1e18c058f", "value": "T1F0F5331221F31CB0F2A54ABEAFAB8A1D347179252B2F5A56D3FDDC1E0E05C90514EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736875027, "uuid": "df9298c1-8c6a-4c2b-9c09-bd1f4fe04776", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736875027, "uuid": "7dd99a72-cc8a-49a1-8b69-577f773908bc", "value": "98304:4cTQPXt08YM41RwMTDGM8RpvrXoIpnm4CEkO3JzqN+:dAXmE41RwSD4jFFmskOZzz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736875027, "uuid": "0699d51a-9192-48fc-9b95-d44863da7913", "value": 3647917, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736875027, "uuid": "4b9e5a3f-9f9e-4ce8-a742-b4ebe73c3072", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "704537cf-ce1a-11ef-afe5-82aee05be84a", "comment": "Malware payload (Xorbot)", "timestamp": 1736875325, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736875325, "uuid": "7207f5e9-8237-456a-8c21-821df1f34ff9", "comment": "Malware payload (Xorbot)", "value": "97a04046aaa544f4f5482c9f0755cbe7", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736875325, "uuid": "4c9253c4-84a6-48ec-97a6-7f140d67a464", "comment": "Malware payload (Xorbot)", "value": "ae6d5f558e08966e3c1ed24a693feb1e091fb41f7a5558ec1fedaaf3fb595462", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736875325, "uuid": "3cef2350-0c56-408f-802b-fbfae0434615", "value": "T16FD012C9D0912DB2D8C489FD25E1F410609341D5DFC63A544CC9FD905448F0DB548E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736875325, "uuid": "ea736732-c4f3-4c8b-8478-9c876e84e56d", "value": "3:QnQzanFCKl2X4HMirLfzVx4LfzVNqRvLfzVaSLM9Kd:lOnFflHMIrVxGrVArVpM9Kd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736875325, "uuid": "ffaaac70-7543-4e50-abb7-64dccf5f1fa7", "value": 208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736875325, "uuid": "06d1071e-13cb-46ab-b142-0fb6bad94706", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25a726d3-d29c-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736875356, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736875356, "uuid": "7e206d57-3123-4598-b53c-56866bd1c0e3", "comment": "Malware payload", "value": "36ca3024f16764bc534f2cc869976c66", "object_relation": "md5", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736875356, "uuid": "2c85a949-4428-4ef3-9c65-4f5930ec20da", "comment": "Malware payload", "value": "d762279ca40daa219aa8254eca56fbe67f2d6fc8f0fef55bb94660d43649a005", "object_relation": "sha256", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736875356, "uuid": "ab9cf54f-221f-443c-8262-e268790ed6ea", "value": "T1911633B306FA808B1C1E1D67C486FB48E7CD0646F3AC9B710818BB69E4E52F693E51", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736875356, "uuid": "b14463fb-06bc-4ebf-b7af-88049fb685e0", "value": "98304:ux+PV2H/LwrmvYyPuoHhcT6vUdv3PIz8Duw6JzI3BQLNeGqIpav46W:uVfLwIDcT6vUxfGK6VI3BQLwGLagz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736875356, "uuid": "710d7302-1ad3-4549-907a-07312ad25279", "value": 4335104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736875356, "uuid": "1373535f-fe32-4d65-b6bf-d6278fe928df", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "504f54c1-d29c-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736875427, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736875427, "uuid": "25e50d32-5bed-46d8-ab2d-0fe4debc31a9", "comment": "Malware payload", "value": "70d2122ea13dedfa81c8b4a3cef24615", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736875427, "uuid": "a42cc901-245e-4dbe-b570-3a002712ea24", "comment": "Malware payload", "value": "b81799c2a811b75201a248522b39a8990d24cf37b6d8243b6fa07f06f7655b31", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736875427, "uuid": "5bfed7f0-e6f7-456f-9e92-5512a16ef0e3", "value": "T19D435A3B7A1B8130D91142F2A43517AB027BFE7107A027C7F7C5DE6A1EA42D59C312", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736875427, "uuid": "7675b8c8-6776-43c2-889c-89b1f4ba4cc9", "value": "73395ae52158ce41deaaf0f1916c9ba4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736875427, "uuid": "f6c01e41-8ca2-4b7f-8b9f-1e2c2be837d4", "value": "768:sfSOvr3bRcGngDcsJJpUfr5JR+rVbnHtA6imRNm8pnSmODX+WEW:kbvREcYpUf7R+rVbNA6ljZOdEW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736875427, "uuid": "cef8cae9-cfd0-4bea-854d-ea9e74ad2b79", "value": 56320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736875427, "uuid": "9853b261-0fd2-48b4-bb39-984ded25b1fe", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "246bf792-d29d-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736875783, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736875783, "uuid": "a11b1366-cd15-41d8-9072-f4f74276a6f9", "comment": "Malware payload", "value": "c94e471225306421089a8245be45daad", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "TgToxic", "colour": "#55a911", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736875783, "uuid": "ee6bb6fd-31f8-47f9-8163-04d81ba0e8f9", "comment": "Malware payload", "value": "7ad578e12b37130c429ed2c199b97ddc02a89cc2fdd3039c38be27096bd57d6b", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "TgToxic", "colour": "#55a911", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736875783, "uuid": "171d193d-886c-4a1c-bc3a-1d2aa656c439", "value": "T1D306BE4AB778472AF87A44F50DEF7AA2E64E5C808D0282C7AD04338C94775985F8DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736875783, "uuid": "02cd6c8a-4ddf-4b0a-abc6-f7ffb6d8cdee", "value": "49152:zgWVwiy8VlJ1mZtQo1BOM1duFr/nNebPXoLmJj+1fOGnRnJzzvv/7cj00o/sz:D1y8VlJ8d5XoIiOUfLDcjzt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736875783, "uuid": "7dafb08a-2d24-4a0f-9215-317225ff8487", "value": 3672588, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736875783, "uuid": "d82608ee-fe23-4caf-83d4-c7047d6f0892", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba5a8a4f-d29d-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736876034, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736876034, "uuid": "6b987932-8cf1-408f-b1a5-5c456b890742", "comment": "Malware payload", "value": "0c1cb79c97e9a657f764811a13ae29f5", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736876034, "uuid": "d89802e3-2c26-4be4-b022-9a908478bd80", "comment": "Malware payload", "value": "a5784e10ac1ff70aa1786c7412bb2cc7f35ab0f077317a86d1036063f89c4696", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736876034, "uuid": "769ff525-3c7b-4b69-a889-9a4bdaec373f", "value": "T13795333CFA232038D8969C34CA7FDA1326A4ACF2047F25ABA5D62955BC5727C17364", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736876034, "uuid": "f9f95bf1-9c37-4f7a-accd-625cbfa9668c", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736876034, "uuid": "5a2dfb44-5877-4361-b891-e1341bded4cf", "value": "49152:KYmFIY7Zw4dRvPfKsCdBJr082f5PmTkE5vLBbLryNYtFh15Q:KvF1Zw4dssCL28e5POvLlrg00", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736876034, "uuid": "ecbe65ac-16c4-4799-b0dd-707b3a953515", "value": 1943552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736876034, "uuid": "c42d1961-65c5-4938-b1b5-ece0e15620ce", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e38f9f6d-d29d-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736876104, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736876104, "uuid": "8aef472c-09d2-47da-9b45-e49329f933e8", "comment": "Malware payload", "value": "e464c264ba809e741f3b24e46e3a862b", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736876104, "uuid": "17f1efe7-1152-40fd-85db-4b7b3f33b09f", "comment": "Malware payload", "value": "2d851235f55facf732b326e8edfbcf5b6a1bd62127b57c69bff6a32640a6a3f9", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736876104, "uuid": "aac208c6-c324-4b2d-a0f9-82ec5d41d686", "value": "T18C435A3B7B0B8160D91103F2A53627A7527FFE6007A427C7F7C5DE2A1D942D4AC721", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736876104, "uuid": "58af5e08-704d-4b2f-998d-89e6051b712b", "value": "73395ae52158ce41deaaf0f1916c9ba4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736876104, "uuid": "1cdb9e43-1164-444b-9306-005111c1bb30", "value": "1536:5TPC1tvGBXi5LFS0tfykb/TYdZmkGh+LGHuOdXA:5bCzrY/eqROdw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736876104, "uuid": "5b44775c-0ccc-459d-a84f-8afbd1ef4aec", "value": 55808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736876104, "uuid": "e7694af7-8444-4d2e-b991-7aae6855c89d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4bf5a8c2-d29e-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736876279, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736876279, "uuid": "8ee44c85-5270-4105-8957-e1f1e849438a", "comment": "Malware payload", "value": "36be92d9c64fcb54de18e8b619843966", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736876279, "uuid": "586fbf13-3caa-4356-9cfb-0e72cd12ef45", "comment": "Malware payload", "value": "30657354cde0b313c484fef9875a10f88c91ce646b058992323c5409546f0b67", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736876279, "uuid": "b4cef3ac-7309-4673-98c6-3be49d836287", "value": "T100435A3B7B0B8160D91103F2653927AB527FFE6107A427C7F7C5DE2A0DA42D4AC711", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736876279, "uuid": "6c84f10b-afab-413d-8a43-e5ec95f7c697", "value": "73395ae52158ce41deaaf0f1916c9ba4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736876279, "uuid": "9f321dd8-8803-45b2-8128-a4a7d619082c", "value": "1536:WT/+1tvGBXi5LFS0tfykv7UFpWASB+TGKqfOdXT:W7+7U32SzeOdj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736876279, "uuid": "539ec177-b0a7-4893-829a-ffeab4b83b1f", "value": 55808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736876279, "uuid": "88ed93be-0a03-446d-b5e4-aa88a0a8e389", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf4dbb23-d29f-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736876902, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736876902, "uuid": "84b32aa7-e6b7-48e0-9b5c-2483d91299c6", "comment": "Malware payload", "value": "55990b24b58fb2560e40877592ef7463", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736876902, "uuid": "ea4d4b38-138f-4597-b857-9ef0b07d930d", "comment": "Malware payload", "value": "b771b3b8c8da7f9dc4043dfd93efebf41025254a97208966d0e426770ad45bda", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736876902, "uuid": "29707bbb-de73-4488-bd73-cc901c96e790", "value": "T126435A3B7B0B8160D91103F2653927AB527FFE6007A427C7F7C5DE2A0DA42D4AC711", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736876902, "uuid": "a6e71968-9631-495c-befd-9b2518e1bf07", "value": "73395ae52158ce41deaaf0f1916c9ba4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736876902, "uuid": "7a4d74c2-bda1-4ade-aa68-1cc4494f83c0", "value": "1536:GT/+1tvGBXi5LFS0tfykv7UFpWASB+TGX5OdXT:G7+7U32S6Odj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736876902, "uuid": "cc5db31b-6b60-4fb9-ae0b-cc5d8b75089f", "value": 55808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736876902, "uuid": "9be7613a-801c-4430-8d1e-de4a780c5a98", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f2289ac3-d29d-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736876972, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736876972, "uuid": "9af4faaf-fdf9-4d19-a75b-8a7a61eeec25", "comment": "Malware payload", "value": "cc2b1aa1fa0b735602e856b9049b5739", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736876972, "uuid": "82f407fa-0e2d-4c8d-b64b-7fb222f12ace", "comment": "Malware payload", "value": "29ade025cd671da987601c661d451568d5aa52e61daa7d04d5add157a18efe9e", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736876972, "uuid": "ed7864b9-9bb5-4335-8ab6-4a2345018515", "value": "T16C3523B2F39D6BD1ECD344BC84AB70090E0A3E8F5B64B08B92936711C49F725E6797", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736876972, "uuid": "382ef924-c44e-4efb-bc5f-a88655ee8ae0", "value": "24576:TciNozj6IhX+dlbk4PjyKZsjaZ5jzwZWWncgw3NQMFuM:TehXYbkAjyK1Z5UKB3NQP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736876972, "uuid": "5ce74d92-3fb1-48e1-8114-13a2cddd1a54", "value": 1158279, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736876972, "uuid": "1def2666-4967-4ce3-92f6-a6c73440b565", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4324a387-d134-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736877010, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736877010, "uuid": "ad20f116-6cb6-442c-a592-25368153cdb0", "comment": "Malware payload (Mirai)", "value": "3b4124dbb5a47d4bf0d81980fc55e4ba", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736877010, "uuid": "c1d2a90f-e420-48b5-b102-5a74e194af26", "comment": "Malware payload (Mirai)", "value": "af4bc8b6508c9c9c9fbe62ec677080a701626a447ba69621f733c0ed47bb7802", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736877010, "uuid": "343df75f-5e50-4e0b-b089-27539006322a", "value": "T12493290374C18DFDC4A4C5390EAFA13AE736F15D2125B25B27A47F316E9EE212F1A0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736877010, "uuid": "3453d4e8-e962-4a4d-bd9b-7673faca8982", "value": "1536:mujL6yaYmSkqJQ78u41ciii7s6ls3FyC5lXmG0syFYPtH/Gxee76WX1:bjL6yaYmSkqJX0iiiUkCbt0sXPt+xewl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736877010, "uuid": "7a4e90ee-f1dc-45f0-86ea-43a346cbc74e", "value": 94192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736877010, "uuid": "9a6f75c4-0293-4fde-b1d5-da9d17bd9545", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1e4796f-d12a-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736877011, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736877011, "uuid": "c70da1d8-9b1e-46e7-b4e6-4b3ebc2f019d", "comment": "Malware payload (Mirai)", "value": "1e609e892b1deb778fe60349f2897fab", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736877011, "uuid": "26e580c2-0fa1-4d02-bb16-50a36b0145f1", "comment": "Malware payload (Mirai)", "value": "403e5ccc52d8866e81b5f85b30c2858f840b63d6658f144da80c7f582a9e9fd1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736877011, "uuid": "f7ec0626-5a2b-4b0b-b7c5-e065e36e8457", "value": "T19CC3AD87B24B9A90C41342F51BC79B9D6FB33142DF07E9D21C4DA23A28BD1DB6C167", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736877011, "uuid": "d7bc5746-06dc-4e38-854c-e6484b95c090", "value": "3072:vZ6hudQVgzxUKQHupn+ALfDLakNXVSnsLq:vZySVnXXmMVLq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736877011, "uuid": "12193b94-75d1-4511-8079-014f7ce7bb6d", "value": 124324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736877011, "uuid": "5377d080-3cbb-460a-95ce-bde8cba3d25a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b7a97f6-d2a0-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736877191, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736877191, "uuid": "46d182bf-41fc-4a87-a345-bc38d85215a5", "comment": "Malware payload", "value": "2ef938214c0a5776ac2eac300f845c0c", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "jpg", "colour": "#89f234", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "png", "colour": "#293509", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736877191, "uuid": "d50ed243-5856-4d2e-822d-ee1880c7572f", "comment": "Malware payload", "value": "9a42d4f5f028c4f7da66edef20c02bb4c36a1970b1084924bf462057a6aef118", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "jpg", "colour": "#89f234", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "png", "colour": "#293509", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736877191, "uuid": "30c1afb0-7cb4-4248-badd-1b546c878a82", "value": "T158D4E1721303BDCA5BBF1E49E4802A901D9D59B7AB148494BDC907E962EF910DFBCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736877191, "uuid": "def553bc-dbc0-445f-8338-ff7f4ddd418f", "value": "12288:7l1fO0K+jtAyrMKKwLeyKroJFuIIqsRHx9tz3UnuoqbnE:Z8AtNr+wQrWnsRRPgDqbnE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736877191, "uuid": "fbbad2d8-f961-4672-95b9-5b4f3fec7b64", "value": 599249, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736877191, "uuid": "0ddcf424-1d07-4d6a-bea9-319374567fc2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a91575ee-d2a1-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736877724, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736877724, "uuid": "9fa40909-83ce-4e58-88cb-4888d522dcef", "comment": "Malware payload", "value": "a9ad47b1f767253927bfa4b0b0af7144", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736877724, "uuid": "379652b6-f3c2-4194-a9a6-363f2ecfbaea", "comment": "Malware payload", "value": "50440e3db726e2a008cba00069218d6cfe07fd4ee5d3a790fe4ab3033430e53c", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736877724, "uuid": "29f64bda-09f0-40bc-a9a9-4da29cb337ce", "value": "T178434A3B7A1BC130D91142F2A43517AB427BFE7107A427C7F7C5DE2A1EA42D59C312", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736877724, "uuid": "69ba0b4e-7054-4899-a061-aa0947b5d0ac", "value": "73395ae52158ce41deaaf0f1916c9ba4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736877724, "uuid": "3fc28f35-85a2-4f27-9d28-857ba4c61b8a", "value": "768:dfL9r3bRsGvok0Jxp0Xr5xB+TVbnHFb9+RNm8pnSmODX+WEW:ZLRR8kop0XzB+TVblb4jZOdEW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736877724, "uuid": "22598755-7739-48b5-aaf9-6ac05c214f2e", "value": 56320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736877724, "uuid": "6112c56e-f785-474f-a0ce-45bb6b10848b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "907da360-d2a2-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736878112, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878112, "uuid": "6f39089b-49c2-446b-a90f-c7d5a8f27166", "comment": "Malware payload", "value": "3846eb5048c0b49ec7a741c75169429e", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878112, "uuid": "59104ac4-164f-4ddb-a1fe-4ca177cbd14e", "comment": "Malware payload", "value": "d9576735ee7363197d0d81e274448bebd1aa9f07705d7c1616f125655ff7fa60", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878112, "uuid": "8bb82764-b51f-49e6-99a7-7af1be550c3c", "value": "T177434A3B7A0B8130D91142F2A43517AB427BFE7107A427C7F7C5DE6A1EA42D59C312", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878112, "uuid": "a57ac56b-bf3a-47c6-ba9e-2da42930540a", "value": "73395ae52158ce41deaaf0f1916c9ba4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878112, "uuid": "91290d4e-326f-46c9-ad79-c5bb5e4472a3", "value": "768:MfSOgr3bdwG7gzooJV5BSbr5Vh+rVbnHtInmRNm8pnSmODX+WEW:EbMd0oA5BSbPh+rVbNImjZOdEW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736878112, "uuid": "06f5f6a6-4c97-4e77-8f31-fee3639be353", "value": 56320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878112, "uuid": "89928773-a46c-4626-a107-8aea809a3fcd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "953607db-d2a2-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736878120, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878120, "uuid": "cbe33932-6ba8-4440-80ae-8e05c5a7bdd5", "comment": "Malware payload", "value": "f45cf1c179dc670babc26393884c7d09", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878120, "uuid": "c4f0650c-a1c7-4bcc-886f-0442795f0033", "comment": "Malware payload", "value": "b2fe3e4191126bbe8da40c3971c0f604953956494e5ac71b26a6e3cb12131fa9", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878120, "uuid": "4921c245-719f-4823-a5f4-87ab6144cf38", "value": "T1E2435A3B7B0B8160D91103F2A53627A7527FFE6007A427C7F7C5DE2A1D942D4AC721", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878120, "uuid": "43869cc8-7300-4add-96f0-feb5bbfb1c2b", "value": "73395ae52158ce41deaaf0f1916c9ba4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878120, "uuid": "c6e995fb-971d-4017-84c1-7bbf19f58557", "value": "1536:yTPJ1tvGBXi5LFS0tfykb/TYdZmkGh+LGnhOdXA:ybJzrY/eqqOdw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736878120, "uuid": "5f49eed9-685b-4477-b33a-5f6e850f5474", "value": 55808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878120, "uuid": "22a8290e-723e-4058-9f8f-5c432fa41423", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4eb0e324-d2a3-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736878431, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878431, "uuid": "f30e33ca-2ceb-401d-bd13-135b1a920aed", "comment": "Malware payload", "value": "3ba00998cde3bcdaccd5c71b15bf13c2", "object_relation": "md5", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878431, "uuid": "8c004329-89e3-493f-a650-0bb801c97eb0", "comment": "Malware payload", "value": "ca55a0dea0f3a434a2aef5e8b90fe17dbf33effaaa8ecf547b0c03cd8efc5f48", "object_relation": "sha256", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878431, "uuid": "40ef96ae-1eb1-482d-be8f-fbfa8b12ad77", "value": "T1F44423F65BFA593D8BBD415A3FCF3F72C08C056D3518226006D5797809E50D27ACBA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878431, "uuid": "16b37b18-b965-49e5-a82c-8021886b07c6", "value": "6144:A9jbzGbPIL6Gw+UoYu3kFGAnQ8Fs0Gpag0OYhQ5siuIWg63z8M:4bzwPIo+U+U68mj96QadIWgC8M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736878431, "uuid": "d9536818-9e68-4039-a620-febcbe7b7eea", "value": 271872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878431, "uuid": "5d2da827-9979-4ce5-aad8-44ff097cb7ec", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0220e80-c44c-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736878447, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878447, "uuid": "f8c0de4d-76f7-44b3-9bcf-0e34f134ea5e", "comment": "Malware payload (Mirai)", "value": "adfcefd9636b9f373b21ed1d4690b0dc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878447, "uuid": "a8c9c3f6-d8fa-4c48-82f0-e7cfe7709a0f", "comment": "Malware payload (Mirai)", "value": "dcfb19ed1f4b5967522be8dcd01424d5c232e07eb3d8345b45119a2c734c48da", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878447, "uuid": "8f669966-1590-4679-a79f-ed479f30628e", "value": "T14623D606EF450FABCC6FDE3746AD065235CC548723A53B792274C938B65E50B8AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878447, "uuid": "02aa5e4f-9822-4f93-8703-5b702b6b7f53", "value": "768:wOSXiI0eGt4eDnOSojGMykuU2Cr4e15AIUwcA05D8fI:93bt44RBMhERItx0Dc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736878447, "uuid": "78526829-ddc1-4913-a4ea-2dcd05983324", "value": 46972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878447, "uuid": "4ccd975a-b053-4c8f-957f-71e378006cd3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7cec40a2-c44c-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736878447, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878447, "uuid": "211387f7-6f0e-4e3e-84bd-2cc5e6fb97eb", "comment": "Malware payload (Mirai)", "value": "fbe0d1f553f15eb2d0ce15560457ed0b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878447, "uuid": "86059701-fd26-43ca-8b91-0c92d422a965", "comment": "Malware payload (Mirai)", "value": "ec8eebf8c70f7ff3188b177cccae23353409f9d5c0037a911456b9c2251eb680", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878447, "uuid": "3e51a746-f769-4192-8151-cc1cc1900b78", "value": "T15DF22A95FD419B02C5C26577FF5F4348BB2A4358E2FA33039A2AAF20378B9560E3E5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878447, "uuid": "921a510f-4058-48a1-ae78-c6f01a6fc3af", "value": "768:JMEr+tnvcouQjXKOOYnUKmgIMKewAmD9m+1Y92I:JDCtnEoRXKOO6rKw2Y+GE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736878447, "uuid": "03429aa5-20b3-4d32-b16f-a25d55c99807", "value": 34620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878447, "uuid": "ab0eab76-a08c-4c1b-b4b6-6817a80db3aa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f05e8ae8-c6c9-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736878447, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878447, "uuid": "fa25d50d-503e-4bff-aafb-9e78f4ba0714", "comment": "Malware payload (Mirai)", "value": "aee409402a7c1980505af834b6fe3a04", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878447, "uuid": "6341c251-800d-48cd-ad99-f38e701e223f", "comment": "Malware payload (Mirai)", "value": "cd44328020df255ce80ecb77abb602ce908a810cafd9ad2bb65b03cecbb13fa4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878447, "uuid": "2a659515-b2d0-441e-add5-fa44783d3a44", "value": "T123F24D41B30C0943D1A77EF03A3B37E1D39EF69121E8EA44354EAB869172E315586E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878447, "uuid": "0049e3f9-3adb-4c7c-b991-a2aaf9c9ffde", "value": "768:/EgR41W0VHvLGQsG996gxfSqv+tROVIhg:6E0F/96uKqmrOVEg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736878447, "uuid": "aeec85b9-c863-4741-abff-a593f1e34515", "value": 35368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878447, "uuid": "ebe326ff-70b9-4a5e-9a65-d579f4c70b0b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13e67bb3-c6ca-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736878447, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878447, "uuid": "0e28cdfc-3d26-4aef-bf3d-68e43d6113fb", "comment": "Malware payload (Mirai)", "value": "f959a760d6a06c0a4831f88d94c19713", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878447, "uuid": "3aeff570-68ff-4de9-9894-ff0e73244b70", "comment": "Malware payload (Mirai)", "value": "7ce3ac6d9c9eca9c2c7e08d212d0bae8aedd46da92af317932505ee72039e275", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878447, "uuid": "e26af6cf-c70d-4d8a-a828-a1f47b40a233", "value": "T1BE133A36BE621D2BC5C5957A61E30335F2F6874A24BC8B2A3DA10E4DBF74A0032577", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878447, "uuid": "8d0ec40d-87ca-42d5-9daa-561785b91044", "value": "384:vAJ4/FU+pOvXHI7h0tDWNpVIoWQT2BDfL16iqgLCnBSqdqtLxYG0dGhTtV2SRJeV:w4/O+6XHI7h0tDmVmzvv52GyG1thI9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736878447, "uuid": "d50bea9e-c1b3-47ff-9eaa-a50767a210fe", "value": 42504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878447, "uuid": "c88c3b9a-bd8a-4f69-84dd-7719fc2d14bb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0623c8f-c6c9-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736878447, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878447, "uuid": "a087d7df-a9d7-4499-b638-2b3e58575065", "comment": "Malware payload (Mirai)", "value": "47890856775a24ef2fda0a57c0882710", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878447, "uuid": "3b278d09-68b3-41c7-a26d-9718b55a058d", "comment": "Malware payload (Mirai)", "value": "209d42ece6a1a52ac2ac579eb6ae4e1288dac7c7d429f276dc3f32c6152c6911", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878447, "uuid": "12358451-bbbe-4749-9aaa-9aa58d280548", "value": "T11C533959FD80AF01D4D624BAFE4E124973534B6CE3EE72119E249B2523CBA6B0F7B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878447, "uuid": "def672d2-1b28-4724-9697-0cf85a6fa186", "value": "768:qb9fsDt7NEzSScvfCxpMLZKFYXiv3NZkI/whac97KSA7CyaYiDemIS:e0obTxpMMCXiVmaIKbraYiDh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736878447, "uuid": "9b38a895-10ca-4ae3-91af-5b51e6648d87", "value": 62504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878447, "uuid": "597b6aa9-5e2b-46dc-a74f-0c0d100b8316", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13adc985-c6ca-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736878508, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878508, "uuid": "ad239ebe-5544-43f7-9b9c-6f6e56782e1b", "comment": "Malware payload (Mirai)", "value": "26d2d9c3301d4ed5e9060b8d4938166a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878508, "uuid": "1637eec9-077f-487e-8d98-eb4f718de212", "comment": "Malware payload (Mirai)", "value": "0397e06e03ffdbc98fbe3ef41aef893faf0b936fa8454acc54fa1e1bbf475ec5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878508, "uuid": "b1c3cbdf-201e-4a49-b3e8-39064be2bb72", "value": "T1BD822A43DA43D8B5ED631374E9B7AB026B32E97DA416FE86C72E2A31CC1211087177", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878508, "uuid": "8fb22e85-4a3b-465f-a757-2c99fe473863", "value": "384:fCrTg1LA9+xCUg6KyJe9AJsO7oyb1rFoJsBZ9wSS5k:6XmxvgwQ1OkybBFVBZ91S5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736878508, "uuid": "0c188f7f-913b-4990-bd4c-716c785f0a2d", "value": 18024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878508, "uuid": "a6e9bf25-6d89-4d94-bd21-180122da2d57", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7cf2992c-c44c-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736878508, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878508, "uuid": "070ae1a6-1cbd-434f-aad6-e7d1420801b3", "comment": "Malware payload (Mirai)", "value": "6a8dfc80f9cb76e725a1c5e658f4ba2b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878508, "uuid": "5f614ef6-827c-4d97-a83c-6c8c3523c979", "comment": "Malware payload (Mirai)", "value": "a6776abf1c2df364d89ac1995361e1ec66339edfaf97336187ff056e846d4dd8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878508, "uuid": "3557793b-964e-41b0-8cb9-4ecb2c7bda57", "value": "T13723F8D7F800E5B6F81DE73B48934809B230F7A2059216763767316AEC7B1A91937F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878508, "uuid": "607663c8-f484-4c16-bb38-bd7343d3a342", "value": "768:UIK+s8tIikepdyxX7PiIygZzGBoNgGLTa03vyDzEpTvClIl:UIKj8tI2pCrP3ygZBp1vyDzEpT6l2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736878508, "uuid": "5489998c-8a4b-4e5e-acfc-29a1ed652cbd", "value": 46452, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878508, "uuid": "fc3fc83d-c62a-498b-95dd-665b9e193ade", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a01edb7e-c44c-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736878508, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878508, "uuid": "ed9916aa-04c0-4df1-9ee2-6c0b5ea865c0", "comment": "Malware payload (Mirai)", "value": "533a0f1135f23ed7d329e58f432a7bfc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878508, "uuid": "fd669c12-18fe-4ed3-8e91-feb7d7f5dfee", "comment": "Malware payload (Mirai)", "value": "9d62a1aa743653df21ce9292ca782f1538806042f77c16accf3d839dfdd91595", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878508, "uuid": "1d1014f0-26ad-4472-a003-1452165fb5fe", "value": "T171D25C62C8212E18D29ED9F0B1209F396BA7E46482875F9E3166C37C9543D8CF6093", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878508, "uuid": "09d40fbc-9c43-41f5-a710-d265e2903f9a", "value": "768:7JZZOty6oGZSLTwVK2d85aZRK9EfIY8CaI:7JZFd5L4K2d80ZkTCa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736878508, "uuid": "686d8b67-b00a-4627-9406-33754036ace4", "value": 30460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878508, "uuid": "ced6730b-c68c-4545-b739-a3c820cb0506", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13d7c2cf-c6ca-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736878508, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878508, "uuid": "d12ed1f7-3540-45bf-b6c2-482f90122646", "comment": "Malware payload (Mirai)", "value": "f36b2fdb85fd0ac58c92bd70b5dd65d2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878508, "uuid": "39cb816e-191b-431d-8bf8-6d7380941017", "comment": "Malware payload (Mirai)", "value": "7b95bc95d544c96ca8eb67fc12bd56c73be5a3b7019113a796b6e55ef07c70dc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878508, "uuid": "443b0f22-2ee8-4ec7-9078-7c35bce5d8d9", "value": "T1B6231896F9819B11D5C1117AFE4E124E7323077CE3DE73265E24AB34678797B0E3A8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878508, "uuid": "d3761b4c-8333-4e45-8379-783d5b026695", "value": "768:JczdSk4rkssH9dpZAzJiPWvHmWrkimnSawha7bl0iKpWJt5UYSI:Jkdf4rknzWelimn0a7R0iaa5UYS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736878508, "uuid": "bd14b912-32ee-4bfe-896d-edd32eb15888", "value": 50092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878508, "uuid": "bb27e452-be63-405a-99a2-a7043e35bf6b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7cddb8db-c44c-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736878508, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878508, "uuid": "2a414fbb-bcfc-4c62-9af8-2b49eda6ca21", "comment": "Malware payload (Mirai)", "value": "b7ce8c005230695e4e599183ee8ff4c6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878508, "uuid": "7b275a45-8a8b-4d39-aa56-cd04bf19b0a8", "comment": "Malware payload (Mirai)", "value": "7fdccb5ff457162a785d2f393f5da133dd59b333f1bbbe837d1d5462d5456f55", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878508, "uuid": "2dc8798f-d950-418d-ac3f-57a2341ee084", "value": "T10623D8566A219FEDF16D873447B30B20A7A973D623E19684E2ACC5005F7038D546FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878508, "uuid": "a436ef3f-325d-41d5-86a3-92df286ed598", "value": "384:bxvfzKfVtfNH8fHutj0rYDAsW8I1WS5UU3BHIeyuAXVZZEW1m2AKybH05n3TaaB+:9efXfddj0mI1flBcZ7Lyb6RIPAOejIv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736878508, "uuid": "f444fa77-4c6a-4bec-8555-13faa17a1611", "value": 46972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878508, "uuid": "0e35beb6-5766-4b6b-b0c2-c38d94d85680", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ce342a2-c44c-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736878509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878509, "uuid": "b859e323-9972-4658-9304-e1786d44fbac", "comment": "Malware payload (Mirai)", "value": "acd7c7a2a18636280bd5025da96f1109", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878509, "uuid": "434dba2e-367b-4931-892f-50f8a7a9f807", "comment": "Malware payload (Mirai)", "value": "5a6581fc16835b2f456ee6734446a6c1bcd26b5f6dc936ece61ea26c67beaba1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878509, "uuid": "611a6ccf-42f7-4d99-8afb-26c6c2d9c0c0", "value": "T167032A95F9019B03C6C25577FF5E0249BB2B0398E2FB33079A2A6F21378B9560E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878509, "uuid": "8f4c425e-69fb-4fe2-b36a-9cb847e6d139", "value": "768:zMEjxtvKr6QjXKO95/nnKmoRMVewIm+BKVsZGv7I:zDltvWtXKO9swVYLYKwv7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736878509, "uuid": "4d3335ab-f265-4a50-9a52-7effe1588e39", "value": 37816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878509, "uuid": "18aed9ce-fd59-4d63-8374-cf7f61c9f0e4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "87789088-d2a3-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736878526, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878526, "uuid": "ab0659d7-52b4-420f-b288-77c5d79fb403", "comment": "Malware payload", "value": "36732e5c51433bc6b6c9a549d38b3669", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878526, "uuid": "8a00771d-912a-4136-a019-ccef6377903b", "comment": "Malware payload", "value": "f802be634f1b974ccb840fc0d033c43e757ac59020a1cc3f4cd4778ff048f6fd", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878526, "uuid": "dfbcf8ba-2476-45de-90b8-c3f14ef1aa86", "value": "T13D434A3B7A1B8130D91142F2A43517AB427BFE7107A027C7F7C5DE6A1EA42D59C312", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878526, "uuid": "b416c809-e83c-4b21-9039-91802f68861e", "value": "73395ae52158ce41deaaf0f1916c9ba4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878526, "uuid": "1cddd5cb-b63f-42d2-833a-932f2f2e59f2", "value": "768:jfSOvr3bRcGngDcsJJpUfr5JR+rVbnHtkHmRNm8pnSmODX+WEW:jbvREcYpUf7R+rVbNkGjZOdEW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736878526, "uuid": "5303670e-80ce-48ca-85d6-f80200a29be6", "value": 56320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878526, "uuid": "c0225638-3d77-4d69-83da-54ecb44c4ec5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99802793-d2a3-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736878556, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878556, "uuid": "c4ca714d-d431-4dad-9a46-2989fbd8c565", "comment": "Malware payload", "value": "1d373d244d6ec65e1aedb7f7eadd98d9", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878556, "uuid": "a84b5ff9-d30c-4a1d-880a-6d44b8a059a5", "comment": "Malware payload", "value": "374e90cf9019d6433d229d7e308e6d8e36fefa9e15ba32f7c862160889a0eacb", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878556, "uuid": "ff5f4999-b7f3-40cd-a4c1-04a3af38d8b9", "value": "T11D434A3B7A0B8130D91142F2A43517AB427BFE7107A427C7F7C5DE6A1EA42D59C312", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878556, "uuid": "13766471-9a54-4455-aa34-4af082eb298a", "value": "73395ae52158ce41deaaf0f1916c9ba4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878556, "uuid": "a9d6efb5-1ef6-4bf4-a5af-d42889e8efc2", "value": "768:OfSOLr3bdwG7gzooJV5BSbr5Vh+rVbnHtIZmRNm8pnSmODX+WEW:Cbrd0oA5BSbPh+rVbNIMjZOdEW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736878556, "uuid": "b78998cd-45b2-48a1-8239-c2ac7439dba2", "value": 56320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878556, "uuid": "f36dc362-de13-4ce9-b3e3-10c51ee90113", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "28771928-d2a5-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736879226, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879226, "uuid": "9fbd6e1a-df16-4e6a-bc2d-bc8d0c041342", "comment": "Malware payload", "value": "c95261eab6c76d4e65624919ccb13cd7", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879226, "uuid": "9e0948b6-0b52-4161-9fc5-b12fd5777f39", "comment": "Malware payload", "value": "6a8a6457a46f87a5d42d578b4807bee42305920cbf1bfb0402d8f3ae0c91ae30", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879226, "uuid": "bea60274-e2ea-4e2e-89a6-467773f1044b", "value": "T1BCF25C4477904325C7EDAFF46DB2A2020578F6079913EB5E0CD8859B3B33BC18A123", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879226, "uuid": "06325ecb-9633-47f1-a9bb-d02e90c42a90", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879226, "uuid": "8a43041b-d5f3-46ee-8c35-d9109b747a87", "value": "768:RIiiy23/1RExouvEi7boVFyw9zw8O/h8yo:Rk3teE6b2Fr9zNO/iJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736879226, "uuid": "778cface-69a4-48c4-87b9-a18957259a46", "value": 36352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879226, "uuid": "f09e6d0e-05fe-4f2f-b74e-26d859b072e0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b70dadee-ceac-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736879646, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879646, "uuid": "d1726a9d-6c1d-4e82-864c-d2f67a41fc50", "comment": "Malware payload (Mirai)", "value": "ca7d53348328148262fa42e15e15cedb", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879646, "uuid": "e404600d-0806-4048-bd0e-027ba771318f", "comment": "Malware payload (Mirai)", "value": "2ca5d5f82a20417e2cb3f7f590c1cd728d93ad85574dac82d5c190a5704ae24b", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879646, "uuid": "d7597b9f-22f0-4ccb-87be-f938de4425d3", "value": "T169735C4AD7CBF9F0CD410678306BAB35D93698323234DFF7E7D8B557AA56212A0422", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879646, "uuid": "9c3b336a-bf29-4312-aed8-23c826f0ad4d", "value": "1536:7NKUBf1J2hoQYjSwScT87ARNpz7ZVS9QAkP8:7N11CYel7ARNpz7Zk9kP8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736879646, "uuid": "9101660c-da9b-4236-bff7-20a2a2273353", "value": 74328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879646, "uuid": "7bfdca6c-3211-4081-938c-879fdb1117ba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d354aecb-cea5-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736879646, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879646, "uuid": "e5f03294-012f-4a82-a9af-4a8c0f76d7ff", "comment": "Malware payload (Mirai)", "value": "10db565293a031da9a1649165f1556bc", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879646, "uuid": "a1cd32dc-4df8-42d8-a99b-ea4e6311d3ec", "comment": "Malware payload (Mirai)", "value": "6e4eff62d57f1b552383f1378223892305cdf7a75492a0da82c7635689ca206c", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879646, "uuid": "d11fa016-4c81-466b-98e2-853ff9de2006", "value": "T18C831986BC819E11C6C51377FE2F108E331267A8E1EE7312CD141FA4778AD6B0E6B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879646, "uuid": "0a07409b-08a0-4e0c-9ffb-64d0e7c8d8bc", "value": "1536:dtn4hRfby0yZAui3V/S2I6G+uDRBPOf/VdOU31MorFXBPyQ7IziIpiZTum1/Sy:6RfOBARdtXGHl9k9dO21Mo5xqWTum1/d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736879646, "uuid": "94f38355-fc64-4db0-8b90-e0638bb35110", "value": 87344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879646, "uuid": "ebe6c124-76f9-4c6a-b4bd-5cf4ad927981", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15bb8c92-ceba-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736879646, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879646, "uuid": "fff40c7f-73ae-4385-8d9f-41fcb9849aba", "comment": "Malware payload (Mirai)", "value": "9d600777d4c0bdba2103b48d5df7c6b7", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879646, "uuid": "9859e087-5de2-421e-969e-ba335a241cff", "comment": "Malware payload (Mirai)", "value": "d0769a3ea55c3bebd5e4ab09058e1914e125013b83978be090ee5459ad24c0b3", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879646, "uuid": "5f1277ae-0802-4bc6-9e28-44e0ccdf5f15", "value": "T128638D76D578ACA0C04889B576A8D9B44703A804A6F77EF1CAC19F59080BEFCF1497", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879646, "uuid": "2068a207-7955-4ee0-809b-e1217a9915c9", "value": "1536:n/THhka1wt+nxjYraYtfNSmJemJjQQjSY2LC0py:nbH+Grx0rnv9emHjSY2Lfy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736879646, "uuid": "56b254e0-205d-458b-bd78-0f77494189dd", "value": 70648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879646, "uuid": "f9e4f24a-bc8e-4443-94a0-68b512f5e323", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1a0805b-ceb8-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736879646, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879646, "uuid": "872519ac-a8ab-4ca5-954e-48afd546629f", "comment": "Malware payload (Mirai)", "value": "88f6e7e24c6bc9060cd01e3918414a31", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879646, "uuid": "d91d39be-4838-4701-aba8-d51cff9c5842", "comment": "Malware payload (Mirai)", "value": "14d853398d50d61a0500da08b99857f50bd36ae26779e54856bc918f1ed3e892", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879646, "uuid": "5a9a4563-1d70-4ee1-891d-a6649a9f4306", "value": "T106634A0077588E07E5EA1EF9283F17E4C3BEED4011F4F4846A0EEA1A4235E73594AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879646, "uuid": "47503fd4-2fc6-4c7e-b9cd-faab61c4b014", "value": "768:l5yraeHdAlaDjuAcoqRL9ChO7p0cyk+g8g/TpMHm97xCPHFJL4R5PZkE8FOS7uUN:he9moqmO7p0gv/13Ylt4Kro5kubIayB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736879646, "uuid": "bf97e8f6-c71d-4feb-979c-7418b39d357a", "value": 71056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879646, "uuid": "2a6f4dfb-015b-477f-8fd6-7058b1a0dec1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69fcdce0-ceb3-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736879646, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879646, "uuid": "f432a739-3f64-4d9b-b769-b01999657ac3", "comment": "Malware payload (Mirai)", "value": "5a7465d45aae789d257ca9887ccff0ea", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879646, "uuid": "a4e6dff5-71f4-4ef4-98fb-790c2f2d9166", "comment": "Malware payload (Mirai)", "value": "38df10f58e558a78a8a10db7c7a6fc084f5efc600be2088110315850de13461d", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879646, "uuid": "4089ad6c-4129-4b24-b81b-da002482e538", "value": "T117E33C86EA409E13C4C51776FAAF514E3322E794E3DB33028D185FB43F8AA5E4E576", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879646, "uuid": "2a28083f-d680-4689-bbcb-a12abc90b9ae", "value": "3072:PxRizSAt/6R6Ii24dO21MiFN3ZOfU1CUeYJoMeNAy7ap0kM/9lnr:PjizSO/6R6I4bGfU1CU7OMm7apnM/9lr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736879646, "uuid": "68329443-1e9f-40d4-8abd-b855bf14aaa0", "value": 150354, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879646, "uuid": "000a66ad-628a-4cca-9db9-b6d72c26e0d0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4ec9a12-cea5-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736879646, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879646, "uuid": "3e760596-3b0b-4b0b-9f21-f57a0accffe7", "comment": "Malware payload (Mirai)", "value": "ef2f615a4782fe9c6114e525efc20b36", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879646, "uuid": "0cc72228-dfd2-4340-b21b-403c3b826d31", "comment": "Malware payload (Mirai)", "value": "a297356968802bf004cd99b1e2ce61c2327f01357b9f17a3f648ef5f5468c971", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879646, "uuid": "b7e234da-a78a-41bd-b121-37cef0ae5e84", "value": "T155630986BC80AB29D3C01777ED6F109E3300B7D8D1DA3246DC245BA47B8ED6B0D66B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879646, "uuid": "4074685c-0ee3-41b6-b51f-f4604b8e33e8", "value": "1536:LCgZ+L5cRqi7fDyHe9ZAeSjgLf1XfU2/AkEy:GY+L5c/XASfFM20y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736879646, "uuid": "debe6392-9b1a-4b8c-9967-130d54cdc5ce", "value": 67564, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879646, "uuid": "6b5d0385-0b89-4914-8ef7-b0f2c94054fe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09e7cd41-cdd3-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736879646, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879646, "uuid": "38d57167-44c2-42f6-86a6-74e96b988a37", "comment": "Malware payload (Mirai)", "value": "71f3bc6a44ff8d1fe2b4792280aa2814", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879646, "uuid": "96f62c02-7127-42f2-9d65-6f3981ccce73", "comment": "Malware payload (Mirai)", "value": "39e481b27f1e047f26bee9a5bb2849232c76031589700f46ff6d1c9945917b8d", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879646, "uuid": "20ac61b7-bd56-445c-84fe-4cdd6fc99e67", "value": "T1CB714CCA1229A27B6D61C79272F781EA70F0E1D1A1D66E07E1C838F6514DD0BA471E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879646, "uuid": "907b54f6-3e8d-4814-8dba-e5e5dd49ad14", "value": "24:vSObOBSOGOjJSO9nO9HSOfOhSOQON3SOLnOLtSOqO5SOP+OP/SORONSO9wO/SO9J:vsBF6HArgBH7/ufmw7b7Nr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736879646, "uuid": "3519252b-2ad5-4615-aa08-b76edf9bdbd9", "value": 3552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879646, "uuid": "87595133-7abc-478c-84d8-cd4df96cfc44", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1978b5c5-cea5-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736879646, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879646, "uuid": "72effc0e-bf35-43f3-9eb9-ecc30d65de0a", "comment": "Malware payload (Mirai)", "value": "05384cc06243dbf631c6053f05231f98", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879646, "uuid": "bb2e58d8-08df-40b7-8a1d-51a111c63846", "comment": "Malware payload (Mirai)", "value": "7a55e92aa4e32797f50100c28d18501d5c4c85166d7ebdc7c2a6f921e4ce362e", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879646, "uuid": "5098ac4e-c25d-441a-9a3a-71ad0441aaf7", "value": "T18D732814E97D2E2BC0D8A27E12F7CA16F2E5360E10B0862D7D350F8EFB54790A5467", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879646, "uuid": "9e5410b9-9527-4178-af4e-02c55c25e342", "value": "1536:jeHRbSR2YQTaL6lJfSF6ZoIk4ct9c8weleYPkAVFDB4wz:MReR7LM6RjcfoPnB4wz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736879646, "uuid": "df687c19-a94c-40aa-a490-6b9d4ea28fa7", "value": 79640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879646, "uuid": "b2626a90-6e8d-43a5-9841-f7338236cfc4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc12afda-cea6-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736879646, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879646, "uuid": "f218c461-c16c-4fbe-8881-d639a9d64416", "comment": "Malware payload (Mirai)", "value": "f6cadb9b9681f7d75b590b47bc3525c5", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879646, "uuid": "323d1de1-c893-43d0-b60c-99411bff43c2", "comment": "Malware payload (Mirai)", "value": "2aa67052ab69866887e288d3d5c1b95cb7ff5cafd71a0ed91e38cdfdeb9ef55e", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879646, "uuid": "af956dab-fe0e-40f1-999d-32471ca6022c", "value": "T129A3831ABF605EF3ECAFDC77499A2745208D141A21897B78BD70D814F64E24F19E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879646, "uuid": "8ac6f40b-a00b-44fd-b9a0-575fab40babf", "value": "1536:277/BCaYLJcHPasWK20j+QNIxhRQmnDRZNdanoy:0LAaYeHlWK2ABaDRfy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736879646, "uuid": "681cbd8d-b864-40c8-b458-a2409e9a9378", "value": 100468, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879646, "uuid": "900f8cf7-1076-4485-b8c4-e40984c3adde", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "232d5d38-d2a6-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736879646, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879646, "uuid": "548aea0b-1009-47f9-80d0-8d5cf933df68", "comment": "Malware payload (Mirai)", "value": "b8299420792a8b06a236971ccc84101c", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879646, "uuid": "89b0eebc-5e48-4087-9c15-a22496254dbb", "comment": "Malware payload (Mirai)", "value": "bff38e582d1f063e21b73387b079a75d0f8babb63e792b39450382fa449e6cd2", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879646, "uuid": "05478356-c16f-47de-ac5a-587a772ff479", "value": "T134730786BC40AA16D7C04777FE6F108E3314A7D9E1EA32429C255FA07B8EC2B0D677", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879646, "uuid": "55c37651-84a2-44ab-8c35-ea2e53f86d0a", "value": "1536:iKt99e9By3CuMDyHMA3OKSXDtuTktGXfU2/h0BcBr2y:iK09By3CscXmktOM2qcBr2y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736879646, "uuid": "635d28a6-c612-4764-9dbf-b1d89f75dbd8", "value": 76452, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879646, "uuid": "b006b111-200b-46ae-b2af-f36eb75bc361", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea190654-cea5-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736879647, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879647, "uuid": "5c5660bf-3bac-4dbd-81f4-2c4e67794a79", "comment": "Malware payload (Mirai)", "value": "8e54588e20a4fe6a73261939d7a73b43", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879647, "uuid": "a939e91c-78a9-433e-a722-0b4ebefd4045", "comment": "Malware payload (Mirai)", "value": "fa6e5267f4a45172e32c4c916b0d182f2684089ab13b17f9ac6e57d55f83dfc0", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879647, "uuid": "35162996-57d2-4ada-b464-1a024cc42476", "value": "T1B1632AD9B4019FBCF85BD9FA41264B0DF52162009E530F27B627FEA33E620A6D943D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879647, "uuid": "670a0a7b-82cc-4658-a7f3-33295ce212b6", "value": "1536:6Zw62k7o8PlqnnqJktfM0wq4hfQJ5PBv7Sl8plvO:fVk7XPlqnnqJKM0wqkItv+2lvO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736879647, "uuid": "3eac99b3-b63a-4247-ae5f-eca94737b386", "value": 72728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879647, "uuid": "8de01981-1337-42a0-83b3-553e2ff0ccda", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7036a8f5-ceb1-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736879647, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879647, "uuid": "39b8c38a-414d-4f5c-8610-30203246fb1d", "comment": "Malware payload (Mirai)", "value": "962849bc598cec787fb30c0c39e63302", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879647, "uuid": "1c85bd02-0429-4c65-b3b6-c2bd1086a348", "comment": "Malware payload (Mirai)", "value": "de01c8221070cc32264de6ca8d749fe4604f27a8c389116992a8c5476a70995d", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879647, "uuid": "a1999fc2-a781-4412-a696-7425a9ca9b40", "value": "T115733B85F9C745F6C9178934A0ABF23FCA31E5794070966DEF896F32DA27B0191122", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879647, "uuid": "154002da-7d26-4daa-ac10-89771e66fd1d", "value": "1536:Kt+qZs87flIJGrw7VODopsKqhGqTvkzdit5m5avigkRMSl8Q:Kt+grLqJGrw7EDop4hGqT9oaqgkRzl8Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736879647, "uuid": "b13fc14c-82aa-4839-a968-bb61f5b53317", "value": 78608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879647, "uuid": "fd2e9866-bad5-48e3-be88-ee42dbb6973a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20a90569-ceb3-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736879648, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879648, "uuid": "b16a19c0-bb5b-4aad-a23e-17570a12ef85", "comment": "Malware payload (Mirai)", "value": "9b058b5b7465acfa604b55da47aced78", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879648, "uuid": "c9174b00-f2ad-45ea-8a89-27885629c6fb", "comment": "Malware payload (Mirai)", "value": "8794dc824977091e7451a1663764c17d16310423fc1621f7e3c6eb0d0ba240a3", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879648, "uuid": "3a8ca7b2-f8b3-4bce-8cb8-574011dc8a3a", "value": "T1D7633BC8A5C3F9F0DC150A3D707AAB725A77E53B2139ED9FD7A81966A902302D4023", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879648, "uuid": "344494dc-9d97-48a8-93a4-d1e9202e6a6d", "value": "1536:mOhjXtM7ayXRulHeEqPZTS0LDi8eK5J3jw0hwdQ4:mkXO7ayUJeEmZTSSD9eK5FEQwdQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736879648, "uuid": "1ad0820a-92b0-4df3-898d-7be9a236db34", "value": 70416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879648, "uuid": "3f336df2-d9e1-46b9-b4e7-1b3f5a33eb25", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1567b7fa-ceb6-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736879648, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879648, "uuid": "786fdd4f-ad4c-4309-915b-4a8420d2829f", "comment": "Malware payload (Mirai)", "value": "88541ed76411e259c0b44706211ae4fa", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879648, "uuid": "1a179fc1-c8b9-48b8-a028-603f6086ce0a", "comment": "Malware payload (Mirai)", "value": "37e6bed205fff2ee6a700142008d3cfb4a0350da259ad2e65790a8a5758af708", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879648, "uuid": "62524116-1997-4f3d-bca1-8a40ea2dbc63", "value": "T12A93524D3E314F7DFBAC823987B75B209209339626E1C584C1ACFE021E7479A745B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879648, "uuid": "996f5259-23c4-4cb8-b98d-970d44da92ec", "value": "1536:jvW+e7A26T90WlWGTd06/+vTf9l36nntYLls9adCNyB:K+eA26TShGTd06WTH36nntYLls9akNyB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736879648, "uuid": "a31101c1-220e-453d-8abc-000a76e38174", "value": 97508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879648, "uuid": "e88a97f0-fbc1-4842-9904-432c35f20168", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af44a6e9-cea8-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736879648, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879648, "uuid": "f857b5f5-06a8-4649-b575-d61472619a94", "comment": "Malware payload (Mirai)", "value": "b34ddc516fcce918035df6442d0e5ac6", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879648, "uuid": "0348c667-22da-4375-8a3c-faf4cf5a8a4b", "comment": "Malware payload (Mirai)", "value": "a769a12edb041a6e87ea892e47f75ff7a4dd6ba57a4ed5a8f8dcf4a9dd74b5a3", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879648, "uuid": "7a132bdc-abd5-48d3-972c-05432b963252", "value": "T16F733A03A98599FDC088E07943BF7276C556B07D233AB1D777C8BF1A6805EA01F1E4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879648, "uuid": "729b49f2-d3ca-4c28-8f82-b7a19afa5159", "value": "1536:LqO1qNU3qK2iAQDEI3QSzuig2UOXS4gT6Z6ojiQjEQ:LBqG6K23QDEIgZdOXZgTUqQjEQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736879648, "uuid": "0493c88a-f2f8-4d53-aca9-bd1dbb3623d9", "value": 73632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879648, "uuid": "008618c3-edd8-4644-89f2-62458de58e2d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6adb2917-ceb4-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736879648, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879648, "uuid": "d6057f6f-4ac6-46c0-846f-8db8ec208e0d", "comment": "Malware payload (Mirai)", "value": "1ac81eceeff8941a5fd7597a4528e5ad", "object_relation": "md5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879648, "uuid": "83837cf1-0a4c-4a73-8a65-d2102554cacf", "comment": "Malware payload (Mirai)", "value": "3685fb6f1821df4279b3313dc4bf9b8acb9dc288f652157f06aee9415a313feb", "object_relation": "sha256", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "eld", "colour": "#9c4268", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879648, "uuid": "6c22c28c-c446-479f-9abc-efe120255860", "value": "T128733A753A46F63CE9A590B8F44329D525220A083FDCD5E37C83603ABF71B89716CE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879648, "uuid": "b9b0e827-bd69-436f-8c19-9a67b1b1c510", "value": "1536:/UgbFv0B4ahtuOtKG3gDMtQVBIVCCfy0K9ufC3n:/Ugb10B4bOoXDpuha3n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736879648, "uuid": "a2026e0a-97c6-4c0f-9840-8646643b4ff9", "value": 75132, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879648, "uuid": "b24cc954-b2bb-4bf1-a4ce-ad2f4d84d2ef", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e638c63a-d2a6-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736879974, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879974, "uuid": "3f25f229-9a52-41d0-9599-2e32ae4ed983", "comment": "Malware payload", "value": "5d3660afd92e35757511fae3886c0829", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879974, "uuid": "83239700-7807-4a84-b3d3-28b5b96aeaf9", "comment": "Malware payload", "value": "8794ab933d6192fe67a86d93a7388c749864d659a4c72a0fe5ccf1fd5bda424a", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879974, "uuid": "26119091-87f3-43bc-94b1-28f0ddc3065c", "value": "T10F435A3B7B0B8160D91103F2A53927AB527FFE6407A427C7F7C5DE2A0D942D4AC711", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879974, "uuid": "c659f83a-9353-4060-9253-98083f0688d5", "value": "73395ae52158ce41deaaf0f1916c9ba4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879974, "uuid": "df88b504-f79a-4537-ae7b-6fe8581a5e26", "value": "1536:nT/41tvGBXi5LFS0tfykv7UFpWASB+TGjuOdXT:n747U32SlOdj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736879974, "uuid": "91eca2e4-5d81-4ef4-ae66-3769e1edb0a3", "value": 55808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879974, "uuid": "e239ebe3-9342-42ff-9eea-bf80971962f6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7cf432c7-d2a7-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736880226, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736880226, "uuid": "8e3487a6-f924-4fa2-afbf-ef6cd78546b3", "comment": "Malware payload", "value": "b80e77577c82f3d79715c6f7a7f833ca", "object_relation": "md5", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736880226, "uuid": "815b643f-0f8a-435b-8419-3f84cd6acc23", "comment": "Malware payload", "value": "57f789cf6086f51a8346a9773b66893ad404b7adf9d38a0102edcc0d37e73e43", "object_relation": "sha256", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736880226, "uuid": "16cd13c4-9fea-48ca-8ddb-86a37c4967e3", "value": "T1BA063311D8C5B672F06099B80D15D84B667F76D73C38F4CA326E88CE1F971A0EA2E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736880226, "uuid": "fb8609f3-311e-4edf-929c-0aa7f2d31b65", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736880226, "uuid": "71534bab-cd42-4fd7-9855-54e434035a9a", "value": "49152:e9G2S/ePcprfjjWBqqwD7ujReQW2yRxI9p1410p7C41eAv:4GTW0rfjjSq5D74RW2eW9n410p7HX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736880226, "uuid": "5e9d69d8-cfd1-4702-8814-f705d2ca8a13", "value": 3717209, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736880226, "uuid": "10925685-13af-4adf-aef3-617aa031fcbe", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1ef2436-d2a7-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736880369, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736880369, "uuid": "a0f9d210-835e-4085-afa0-9f1f5bdb7be2", "comment": "Malware payload", "value": "93a7a5d23e8ddbff4f23d4dacb892510", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736880369, "uuid": "80981fad-94bc-4e58-826d-d213c374e5cf", "comment": "Malware payload", "value": "d62d35df3782cfd9c043a03b7480f032544fee2a87024cfb38f4f031b91aaa76", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736880369, "uuid": "3b7d7e3b-4747-494d-a803-83b8b6906f89", "value": "T157435A3B7B0B8160D91103F2A53527A7527FFE6007A427C7F7C5DE2A1DA42D4AC721", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736880369, "uuid": "19f5ecba-fd11-419e-a708-9e21d28bd1e0", "value": "73395ae52158ce41deaaf0f1916c9ba4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736880369, "uuid": "ff9e9f97-881a-453f-a7f1-7e21fbd72575", "value": "1536:HTPC1tvGBXi5LFS0tfykb/TYdZmkGh+LGLrOdXA:HbCzrY/eqIOdw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736880369, "uuid": "407230b5-cc6c-4208-b097-c1ea66a5e03b", "value": 55808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736880369, "uuid": "30a97fa6-6da1-49ad-b1f2-081a5a65bd82", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d2388e9-d2a8-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736880549, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736880549, "uuid": "e7937976-2b25-4f4c-b0ed-747a1d102158", "comment": "Malware payload", "value": "de8978213f1b8f21ba0603695d67e83e", "object_relation": "md5", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736880549, "uuid": "f61bed36-38e8-41e1-af45-835e8075566a", "comment": "Malware payload", "value": "a370da79f8adb052d062866a426a0b41b814f54ccb123913a07da669e6bcf361", "object_relation": "sha256", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736880549, "uuid": "37c324c9-a16a-42a8-aa07-cb702b4c38b3", "value": "T1620633C1B5357DF2C128C13D1A2E683F2233B129B9723A1E21ADCA4C6756DC9C997B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736880549, "uuid": "22b4174b-9b2f-41ed-bad5-cfb0dc0ed43c", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736880549, "uuid": "7ed9b523-c032-4dbd-83be-ab88e3539a9f", "value": "49152:e9sqH+QA1jFwvIlCZLmGT7GRrVu8OiCi1jVCbUDjJ2U/6D0PFP/Q0fbjOp4EP1eM:4x+5UxLm1s8bC1b8HU0PV9/k48X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736880549, "uuid": "16ee6839-fc9d-4a81-9316-5ce348168ae4", "value": 3673235, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736880549, "uuid": "be975458-fe8e-4270-b7ea-1db0696bbb5a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07ea5c79-d2a9-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736880889, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736880889, "uuid": "946976b2-7fce-47fa-821e-61f54224cbd3", "comment": "Malware payload", "value": "58a5987c60067e973d275932a32377db", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736880889, "uuid": "ce8caa97-d96f-48ad-abd1-3f72da93e0fe", "comment": "Malware payload", "value": "48b94660775e1fa2f2c0f221cc5adec57b313ef9df7f010373e7365418eee995", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736880889, "uuid": "166114d2-4f40-454e-9522-0e5c07cd0871", "value": "T10F435A3B7B0B8160D91103F2653927AB527FFE6107A427C7F7C5DE2A0DA42D4AC711", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736880889, "uuid": "e552d5eb-5781-4204-abc1-e9bf74c481a6", "value": "73395ae52158ce41deaaf0f1916c9ba4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736880889, "uuid": "e70a414f-9251-46c7-a99a-0e235364d413", "value": "1536:ST/F1tvGBXi5LFS0tfykv7UFpWASB+TGMbOdXT:S7F7U32SXOdj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736880889, "uuid": "90cd6a43-f21c-42fc-afcc-a4a003816a33", "value": 55808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736880889, "uuid": "359100ff-77eb-47bc-8738-6538040c176c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ebf16808-d2a6-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736881179, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881179, "uuid": "1d11518f-5a4b-40db-ab29-52ebefbc2f5e", "comment": "Malware payload", "value": "35e8c4517fb6864a64e1692425171e9f", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881179, "uuid": "7a42df69-e75c-4a7b-942a-dc7748321cb2", "comment": "Malware payload", "value": "f14345afcd55ae69de86446f4af3efae28e1c5340d41f699f5bc8eb93f4f28e6", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736881179, "uuid": "5568ad7f-aa02-474f-920d-cee1ea7339f3", "value": "T11D7412BEA5183D01CF5A4AF9857170F35C4EFFCBACAA0893D57B2C1864C42527AF84", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736881179, "uuid": "062330cd-4f59-4c22-ac8d-8bec5c8b668e", "value": "6144:Bz4hWdNvlVPpG6h5SnG5YTPNK6hfS94zWDQvGYJWqvpJF8n5Qx3T:d9P5oG+xupDxqhgnAT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736881179, "uuid": "39fa315e-be95-42b6-ac53-5e1f1de8584f", "value": 362856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736881179, "uuid": "9eb6ccdb-bb28-427b-88cf-398b27d51e30", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc337129-d2aa-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736881675, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881675, "uuid": "de6fbb25-d4c5-4dc9-b166-49b6151405fb", "comment": "Malware payload", "value": "8859c31322b3a9df8137f9cacb5446a4", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881675, "uuid": "6100749d-0992-45dd-9450-6cbe0e1caf55", "comment": "Malware payload", "value": "d6c201b4e85f24963893510ed750548b524dff309504eb5ba7b13b624a67d866", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736881675, "uuid": "9ed77bec-2276-4622-86c1-69affc6e3d0f", "value": "T1D747DB8C0EB65EF8F225E01723616BA6E449241FEF453BD8F64D71AC9F04085FB9C6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736881675, "uuid": "62ea25d4-2205-4c18-a481-37d20473efce", "value": "49152:Ubjb0T2gfMtGs+ud5M2Dpd/W3XZTvjpHHplwr7:Nu/MEdS9plwf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736881675, "uuid": "7530fd12-c0c8-4ef4-9bf6-68c6903621e6", "value": 25526815, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736881675, "uuid": "4b6d251c-cbd6-48f6-b187-2650c1d33813", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "121ae2f3-d2ab-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736881765, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881765, "uuid": "7bcbb685-5b40-4d9b-9085-f95cad188ddf", "comment": "Malware payload", "value": "35e95725519eddde74a3b0cc0fa39a36", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881765, "uuid": "a0df503e-cc8d-403d-a4d3-bdcb9e123112", "comment": "Malware payload", "value": "959929041d644682fb514f66c1a3a77c1994a51966f7f5aca470449067454933", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736881765, "uuid": "efd16086-499f-426f-8a90-6bfeb48cdd06", "value": "T11E435A3B7B0B8160D91103F2A53627A7527FFE6007A427C7F7C5DE2A1D942D4AC721", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736881765, "uuid": "44c901d0-0ce9-44d2-858d-d06ac5a0d558", "value": "73395ae52158ce41deaaf0f1916c9ba4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736881765, "uuid": "2b6e3982-0198-451b-90f5-2ccb9904b083", "value": "1536:STPC1tvGBXi5LFS0tfykb/TYdZmkGh+LGxBOdXA:SbCzrY/eqcOdw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736881765, "uuid": "34f646ac-c32b-4207-90a2-f7b83b66b2b6", "value": 55808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736881765, "uuid": "b2b57857-5afa-4a71-b6fd-e40cf923db9e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2454e962-d2ab-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736881796, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881796, "uuid": "41a4433f-d73b-48e3-82c9-1537b3625868", "comment": "Malware payload", "value": "36e723cff77d9e71abacbc72988edbf2", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881796, "uuid": "ec319fca-d538-4054-a877-a03a59b0a71e", "comment": "Malware payload", "value": "8ac8aadc976ac2482f10dceb1a4857fcc7db87bdbf6cf90a7dc4875a1d9c2f62", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736881796, "uuid": "2f62b27b-0c78-4cdf-8775-e30e2ecbe26f", "value": "T116435A3B7A1B8130D91142F2A43517AB027BFE7107A027C7F7C5DE6A1EA42D59C312", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736881796, "uuid": "d9f00a1e-1c6b-4b25-8dd9-613269c36cca", "value": "73395ae52158ce41deaaf0f1916c9ba4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736881796, "uuid": "b6b68f5e-197b-404a-bb7b-4c982d60d505", "value": "768:GfSOvr3bRcGngDcsJJpUfr5JR+rVbnHtP8mRNm8pnSmODX+WEW:KbvREcYpUf7R+rVbNPjjZOdEW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736881796, "uuid": "b977c4a3-0140-4c72-85c4-77cadfceaa97", "value": 56320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736881796, "uuid": "5e33cbb6-6cdb-44e1-b1ee-1924e656721c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae4509cf-d2ac-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736882457, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882457, "uuid": "e32055cd-8754-4090-b308-9bfef6c206e7", "comment": "Malware payload", "value": "602a0051229f7814ab4e540d615133ce", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "TgToxic", "colour": "#55a911", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882457, "uuid": "22512fcd-59c3-44a8-8ecc-b41907ebf863", "comment": "Malware payload", "value": "9cdd6fd14668dacf83135ca3cacf2936388f6e563813ef8cb19dc9c44e5f0a62", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "TgToxic", "colour": "#55a911", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882457, "uuid": "f6b3ff88-45e8-4416-a0a7-4f0e439c5b2b", "value": "T1C236C082E37A966AC5B313374C7269A631076C558FA386D36884733CA4B75D84FCB6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882457, "uuid": "3e67deab-666f-4e05-8a99-6e683e31ae09", "value": "98304:o3mUMdkaoLKauoUo/uymnTsL9NGllGY0O1ZxI88:o3mUEpauoJ/tmoLxY5I88", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736882457, "uuid": "67f590bb-1396-4035-b297-74379cf2fcbd", "value": 4915889, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882457, "uuid": "06f58342-dcd6-4362-a15e-4e048c00ebe7", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa9d6132-d2ac-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736882585, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882585, "uuid": "40f7c5b9-c08b-4a5c-8109-ccc453145716", "comment": "Malware payload", "value": "b855e0c2ef370abb3acb2bce987e26a0", "object_relation": "md5", "Tag": [ { "name": "31mOfficial", "colour": "#10dab2", "exportable": true, "hide_tag": false }, { "name": "31mQbot", "colour": "#04fda1", "exportable": true, "hide_tag": false }, { "name": "31mUsername", "colour": "#48097f", "exportable": true, "hide_tag": false }, { "name": "36mPryoxis", "colour": "#689add", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Pryoxis", "colour": "#4cdb40", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882585, "uuid": "b9b258e8-05c1-48f8-a1de-1ddc21c0c123", "comment": "Malware payload", "value": "61cda9afabb4494a461e5317381f782b0bdedc66c0625b8e805df57ebeb5c818", "object_relation": "sha256", "Tag": [ { "name": "31mOfficial", "colour": "#10dab2", "exportable": true, "hide_tag": false }, { "name": "31mQbot", "colour": "#04fda1", "exportable": true, "hide_tag": false }, { "name": "31mUsername", "colour": "#48097f", "exportable": true, "hide_tag": false }, { "name": "36mPryoxis", "colour": "#689add", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Pryoxis", "colour": "#4cdb40", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882585, "uuid": "352b57e1-c0a5-4861-9ac6-90c81c2e6766", "value": "T11A41C387225206B03C52D5773369AD6071D9B25EA4C5BF4FBAEC38E5088CEB579247", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882585, "uuid": "82788b30-e868-4acc-998d-4aaf24d8a590", "value": "48:v3th4t//aLaMalsJHdHp4H/3Ac9oTIQfEvja17T3fQ9RlkXyA/FiQszbsRlkXT27:v3th4t//aLaMalshdpe/Ac9o0QfEvja7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736882585, "uuid": "b072b420-68cc-4e59-9bd1-c985724f4560", "value": 1994, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882585, "uuid": "5dccaff8-6f27-4b31-b9df-4572150ed33f", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65e32762-d2ad-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736882765, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882765, "uuid": "bf4c32af-0a5a-4ae4-baf5-0739c3b96588", "comment": "Malware payload", "value": "764da4a15d2881d0a782d07b9b582916", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882765, "uuid": "bd9ca9b5-5685-497c-9429-17e9c02ffb29", "comment": "Malware payload", "value": "5cdfe01ce92f6c063109a8263a34b8aa245f19854afcf06054cbfa7ffc3a5508", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882765, "uuid": "72797f5e-4476-4fba-aeb3-06c97cbb890a", "value": "T1BCD2E171A2978725D41634BE2F5D7CCB9050930EF1485AD8BFD89BB7BC62FA13A042", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882765, "uuid": "66715625-c923-4279-960c-eacf2c43c6fb", "value": "768:3KNkRo43bpHlMyVj9FPwPwmnBH4DyvDDWSfJjnbcuyD7Uryqp:5xbpHlzj9FPwPwmBHk6DDfBnouy8mqp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736882765, "uuid": "fe905b3c-4f9c-47f9-bcf5-2c69951b3667", "value": 28884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882765, "uuid": "5518823b-1355-417c-976c-95a56ec96020", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8acbbaee-d2ad-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736882827, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882827, "uuid": "e34b9d26-2deb-4652-836d-446dad89db65", "comment": "Malware payload (Mirai)", "value": "4abd9f8d315c83d39c0d6fde3b9241ed", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882827, "uuid": "398dd61f-f761-404f-a118-e86491bdee46", "comment": "Malware payload (Mirai)", "value": "2bf3bd6d6d28044e2ddd80c2fc39f71f76f14f1827117aadee1c05c4c12aaf6f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882827, "uuid": "0caeb6ef-ac21-4c6d-9a3f-2626f88118cb", "value": "T13D04D81AAB550FBBCCAFDD3706E90B1139CC954B22A83B363674D528F54E50B49E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882827, "uuid": "8976a7b6-a97d-40d9-b440-11deb204f6bc", "value": "3072:ueEksFM+wX5OAaVR8H3NaMZOTTMJxt9U+7fKbDE:ueEnO+wXYVWdaMATwJHy+un", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736882827, "uuid": "fcb236a2-c20c-45da-af13-4472d62852ed", "value": 177860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882827, "uuid": "4f9f7610-d680-4edf-ab94-8e097f11dbd1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ae4e9bd-d2ad-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736882827, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882827, "uuid": "c54fb301-586b-42a8-95a1-72f71e5d2dab", "comment": "Malware payload (Mirai)", "value": "7426f332e60411ed899695a8481a0d91", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882827, "uuid": "4bc9158c-d396-4e93-988d-cad36e397e50", "comment": "Malware payload (Mirai)", "value": "83e373eebcef06de4834b28e51ffd4bc358c4257c64fd7ca7454542837c20310", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882827, "uuid": "3a5ebf4c-e30b-4cd8-a4e8-cfc90e440d98", "value": "T1BFC31945FC415B17C6C212B7FB5E428D3B2A17A8D3EE72039D216F61378B95B0E36A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882827, "uuid": "88787f3d-fccb-4733-a628-5f9355adb204", "value": "1536:JiDwI4fG50nVg/QrEA9+19jAd424V8G2TTZll9qLDeJ1budVLqlUewyw6FPRbpG8:sDwLYhQrj019jc4r2/Zll9qobuj86bI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736882827, "uuid": "fc773c65-9b8c-463b-bf89-835ce319b477", "value": 129792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882827, "uuid": "432be303-cc52-44ba-8877-ef850b969843", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ae5a2d3-d2ad-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736882827, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882827, "uuid": "fdc8f6f0-56c8-4749-93f7-cf44f9bfb8f6", "comment": "Malware payload (Mirai)", "value": "73e9f8adef7a11c9ef8cb1f04e3515b8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882827, "uuid": "d22f02e3-7e66-4901-b3a0-32e4295e74ae", "comment": "Malware payload (Mirai)", "value": "c07b4d74b4a9d505d7e4f06d7ce14a0e2171491b5767091ae116848371e9a979", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882827, "uuid": "e9d9c344-a079-4409-8e8e-d57b0ce8b4f0", "value": "T1A2936CC5F683D4F5E89304B1613AEB339B33F0B52019EA43D7799932ECA1511EA16B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882827, "uuid": "fc3d3b36-81aa-4662-a915-db01568e4b86", "value": "1536:xpmWc2AcighsZ82fJxfcLHH1mSsM8y6Q+gBQ9TnkISGtAdR0xZ:xpmX2riED2frfsHVmL1Q1Q9kVTR0x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736882827, "uuid": "2a071311-2fcc-4fa7-94e5-2d0469e9f40f", "value": 89576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882827, "uuid": "e4779bc7-1529-4365-8926-009232e71fc7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8aeac719-d2ad-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736882827, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882827, "uuid": "3dd25507-e40d-45fd-8149-721d4a910355", "comment": "Malware payload (Mirai)", "value": "0cc08f4a05617ac60f71fdacbc83197a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882827, "uuid": "c2c8cf15-4e48-4dce-a468-4e6b670a2a75", "comment": "Malware payload (Mirai)", "value": "fa9b4f2a2844cf22205f1142b181fc0b19d938234f39c8c85716074f8e08ff5f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882827, "uuid": "86a15021-a06e-4d6f-8895-dc9b36cba355", "value": "T1DEB35A77C8292F68C259D1B4B0B49F792F63A58182472FBE54A6C3B64083DCDF505B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882827, "uuid": "53e781ce-522e-4c8f-92c1-9635e1b0fdb3", "value": "1536:+aVTHW/qIAmLqgwHFGEWCRrK5KFvLTlvKiLzMJWdkTxeo4f/z5:+qWLGgwlDWMO5mNvKC0WaTxkfb5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736882827, "uuid": "82f052ed-f7e5-43f9-a998-24825736738e", "value": 117568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882827, "uuid": "95674c3a-bbaf-4c41-bc68-d8353af16f14", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8aec3cbf-d2ad-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736882827, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882827, "uuid": "b720b194-6d96-4e5f-96bb-eda8d591234f", "comment": "Malware payload (Mirai)", "value": "c6e11c1214ca1ea879110619e1ad7a19", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882827, "uuid": "410975dc-f14c-4fc4-b7e2-e0ee4942ab87", "comment": "Malware payload (Mirai)", "value": "bc18cf64af3cb82b1f9af7b27bd40f3b55e87ced22b694494c2a0949e4063090", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882827, "uuid": "f185edac-2678-4dc1-ba15-2e421632bb24", "value": "T116D30945FC405B23C6D612B7FB5E428D3B2A17E8D3EE72039D256F60378A95B0E366", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882827, "uuid": "669dd16c-4273-4964-90bf-f6615b0e5736", "value": "1536:VHQeHIjFlGz/r5CQpi/lFcAPWZf4VTyqsTgDdw4vb7u2/IIdWl1k9wyw2FR4soWn:VHQeFCQE9FcT4YZMDdw4dAIcIFibo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736882827, "uuid": "4219e2b2-1bfa-417d-8093-a58661bbb888", "value": 133888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882827, "uuid": "ddbce770-6420-44e0-96b4-7c93d8494dd3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa8fcd48-d2ad-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736882880, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882880, "uuid": "b4a9079c-a847-4b6b-8435-2722a7bddbd2", "comment": "Malware payload", "value": "262bb088fd8c552acf523e35188235bf", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "TgToxic", "colour": "#55a911", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882880, "uuid": "9f4f60c5-5458-4fee-9507-0c60501e391a", "comment": "Malware payload", "value": "f34ad4031f195ae2df5e9104ff2991c096d31318e0e8995c76dcd95e98357ee5", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "TgToxic", "colour": "#55a911", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882880, "uuid": "3bed5e9f-af44-43fc-8106-b82c70d7748c", "value": "T1FD06AC4E7B4646BAF87302B10DDA6B31D88FDC408D0696D7B946338C167FAD42F49A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882880, "uuid": "147f7163-e295-4c6e-8a5e-985dc9e7a833", "value": "49152:MgW3wiy8VlJ1mZteo1BOM1duFr/nNebPXoLmJj+1fOGnRnJzzvv/7cj00o/TJ:+1y8VlJ8D5XoIiOUfLDcjz6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736882880, "uuid": "ff4ad860-8695-4d63-82f6-218c6f8dc3e3", "value": 3664396, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882880, "uuid": "91391846-d0b4-4636-a7d5-2bed8ccb47d1", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae0531cb-d2ad-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736882886, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882886, "uuid": "b25bb9be-45dd-4f4f-bb69-264b407fb6e4", "comment": "Malware payload (Mirai)", "value": "e09ffba71a590c70a0f91944c94436c6", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882886, "uuid": "d2df1da9-f8b6-419a-a011-94910c471675", "comment": "Malware payload (Mirai)", "value": "f4bf3fbc58427fccf85572e45fb1c7471c9f50171973e81af366d0a3c19160df", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882886, "uuid": "1549d7b2-bf6c-44a6-9e78-02615906634e", "value": "T186E30A56F8819B12D5C111BAFE1E128E37131B7CE2DE72029D246F747B8A97B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882886, "uuid": "b257287f-0885-4856-8ecf-439cca8378d7", "value": "3072:pUkePXtU2u9hRXR8EtDYeaNLkoTaeCO3k1RpX:pUHFlIRXe4DTaeyH3k1Rp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736882886, "uuid": "4e37d8fa-f6f1-4b99-bcd6-8c02f226b88f", "value": 143292, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882886, "uuid": "45e3d29d-75d0-45f3-8295-d1ca92e3fd85", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae13b92a-d2ad-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736882886, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882886, "uuid": "ba464c3e-300e-4c46-bfac-5260d6e14507", "comment": "Malware payload (Mirai)", "value": "ac81eac831251b872e31ba7a603f0f2c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882886, "uuid": "00ec5609-c20f-4ed4-add7-d725d8af5ec4", "comment": "Malware payload (Mirai)", "value": "48acbe2362aa9a5660e9d868d1bc54be171a1c94f532f7ec608c0060fcdb3a82", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882886, "uuid": "ea197f77-b27e-4982-ae4b-6ac9185e6550", "value": "T1E9042A46EA404B13C0D627B5FADF42453333AB9497EB73069528ABF43F8679E4F229", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882886, "uuid": "84eeaec2-62d4-41a3-8acf-afe06bbd0610", "value": "3072:uk/uc7BbBLHcBCkAabwdyqkkUbH/6EBpmO/hJjogM/RkyfqM:uk/BBLHElAabwdybkQ1BAO/XMgM/RkyD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736882886, "uuid": "32dbdbac-2b8d-4946-b418-c68ac41c6b92", "value": 179821, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882886, "uuid": "7931d660-ee1d-48f1-baad-1a91414d2fec", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae1a354d-d2ad-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736882886, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882886, "uuid": "aba30eed-c6a3-4cfc-abab-d05c1e1c90c1", "comment": "Malware payload", "value": "bb4df366c4354b4647132ec5eb40ff5f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882886, "uuid": "3c4cb515-0c8e-43b9-bf3b-b9028ae509cd", "comment": "Malware payload", "value": "d0de805728d7ada0b2859287ba65b37a2be3f094791327b43e4ea18c5e6f2945", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882886, "uuid": "866a867d-4d16-4b62-bcc2-458b0877e15d", "value": "T152D31A06B30C0A47D2632EF43A3F67D093EF9AC121E4F640356FAA899171E365585E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882886, "uuid": "94db890c-7077-4ebe-9f75-83d37c1aadd9", "value": "1536:a0nwryWvmn/qZITiSL98z+xpnvTnNoMfBIdegp7PMXgvAtId0DD2h/qvc8kpd/zQ:BWvmxie8z+x57nBKeglPMVtQpdbCP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736882886, "uuid": "cc9d92db-acc1-4806-ab40-082d9d3cf500", "value": 132344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882886, "uuid": "647eb034-5d4e-4d07-b4ec-215c3e9e1969", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae27a494-d2ad-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736882886, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882886, "uuid": "3c11422a-d7d7-46ae-bdc3-2dbdd2ea0107", "comment": "Malware payload", "value": "2cdd62f3b8eee9dbf1616d9e10111387", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882886, "uuid": "c874d07f-abc0-45f8-88fe-95c8f76a501f", "comment": "Malware payload", "value": "9f0ee7ab35bac152e63f87212c7859e464985fc3cbd2509dc9c7ce28f71cad7d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882886, "uuid": "99674479-017a-48f8-bc99-af6fef0ff2ed", "value": "T154E32ADBF800DDFAF80AE3374853080AB530B7E155925B372257797BED3A1991863E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882886, "uuid": "418e9c1e-0c0d-43ad-b9ac-01ec57ef5b00", "value": "3072:RhRsZJRhrvKP5asp9DAr68lg1VrjbiTLrxo8yyEot3a:Rvs0RpxAxlg8LrxyyE23a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736882886, "uuid": "b3def202-a6d7-46df-97f5-570a56682251", "value": 150464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882886, "uuid": "1e374afb-493b-44cb-b55b-35b8366b4fd9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1846358-d2ad-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736882945, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882945, "uuid": "cc80cbe5-62fe-47c8-9cb8-d9c64062b394", "comment": "Malware payload (Mirai)", "value": "f0b16f2bd1291806dfebe873a52cbbec", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882945, "uuid": "c9c75df8-cc41-4965-bb6b-0121b1011eae", "comment": "Malware payload (Mirai)", "value": "14c2f2acb973fa38251edda7ed747ce464aed13c23baccd7f039ef193c6f0eed", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882945, "uuid": "27f2df0f-e311-4eb1-b8ef-62370a3df438", "value": "T1CFD33A17B5C180FDC4DAC5B44F9EF53ADD32B1AC1238B16B2BD4AA221E4AE315F1DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882945, "uuid": "e7c693db-9d15-4ee7-b042-c17f29825854", "value": "3072:tGtwnNiaOnUTMFKPT9OSQ7AOaogjV2iZlBWCgriA1QPdL:tGtwnNiaOnUTOuLyB1QPd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736882945, "uuid": "5c81f559-4b0c-4fb5-88be-f2f3d71187b3", "value": 139576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882945, "uuid": "75564064-1adb-4cb6-8bf4-49eb7e20f101", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d186bc78-d2ad-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736882945, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882945, "uuid": "7d117da0-3f11-48ae-b5c0-0dedd6a60277", "comment": "Malware payload (Mirai)", "value": "3325c432947fc38a1b5b469d2a8a69f1", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882945, "uuid": "39f521ae-c15a-4471-a6ea-4b2f097dfa7b", "comment": "Malware payload (Mirai)", "value": "e7dc0f3748ad5bc380c3d7d73b80b245b66d510d4d2acc6bd865407e998bd72d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882945, "uuid": "77c782b8-2a3f-4975-a9fa-cada9518d287", "value": "T1A604885E6E228F7DF668873447B78E25976823DA27E1D644E1ACC1101F2039E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882945, "uuid": "c75d9fb7-2ffa-42fd-9938-6c301e7226de", "value": "1536:Cl2JvnXPvLmQuchMJdDNsCK9H1R8cA2iQembSM+xV7TfF+hPyO0Hb/zLt/Y:Cgv/EcwZsCK9VRhAX+bShFSP0HbbLlY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736882945, "uuid": "f40c179a-54cb-4cd2-a77a-5decdfe1ec19", "value": 173796, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882945, "uuid": "ce69a9d0-123d-4094-bfef-36828b82f3bd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d18cc447-d2ad-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736882945, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882945, "uuid": "2efdc094-feb1-4c42-8036-62d258cefc12", "comment": "Malware payload", "value": "645ce6e25dc4844fcd8d5fdc56b8fc68", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882945, "uuid": "d16ff5d2-a7c5-4672-837a-88863119abd3", "comment": "Malware payload", "value": "8a6455f4ad839d7036fa053ebf4da4e269fc66e826b20a6bbf81d96484dec493", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882945, "uuid": "3055a80e-318e-4df2-afa7-b8f12272dccb", "value": "T1B8E0C2A4109636967E535E10B62ABBD17581AC45A610452EE3BABE234CBDF017B0EC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882945, "uuid": "4ed6df3d-a378-4cf7-a1b6-5e3c6e8d2978", "value": "6:hduZi0OXOZYzBqlQXZRlzTjafaqUZtL57bNwb:XVOZYzYlE/jaC3THGb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736882945, "uuid": "d937d908-1dc4-4a8b-b915-aa78963afe94", "value": 330, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882945, "uuid": "0343fe67-9890-4487-9353-4961480f7169", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f8556ff-d2ae-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736883210, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883210, "uuid": "3f790fbb-4ed0-4375-be77-4655d53b4403", "comment": "Malware payload", "value": "5656804f400b93cbb388d010784c3870", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883210, "uuid": "078d909b-2b36-435c-9c41-b068f99c3344", "comment": "Malware payload", "value": "85e0991214ebcffc9e16016b13767cc3c28be5b19c327f702210bc1df8d24e55", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883210, "uuid": "1549cd8d-ac84-4ff3-bf83-122b433c673a", "value": "T1CF434A3B7A0B8130D91142F2A43517AB427BFE7107A427C7F7C5DE6A1EA42D59C312", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883210, "uuid": "d659b51b-76ad-48b0-ba0a-f9bc795e99a7", "value": "73395ae52158ce41deaaf0f1916c9ba4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883210, "uuid": "a8cd9292-7b85-4a40-9898-3ccb3a8f1dfd", "value": "768:gfSOLr3bdwG7gzooJV5BSbr5Vh+rVbnHtjLmRNm8pnSmODX+WEW:wbrd0oA5BSbPh+rVbNjKjZOdEW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736883210, "uuid": "0f605612-2142-474a-958b-839ca10d46b6", "value": 56320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883210, "uuid": "30aac250-abcd-4a31-b980-751fa3929783", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3814f410-d2af-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736883547, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883547, "uuid": "cbc074ec-647b-4d9c-8ff6-453f8b3b1c96", "comment": "Malware payload (Mirai)", "value": "50eb5cfc9f61d9e7d1fe6231bd9cd0be", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883547, "uuid": "dd15bbed-7f30-413f-8b76-ee62732fbae4", "comment": "Malware payload (Mirai)", "value": "392c4f6f5f2f6f203b4223758eae9f36382269b5c9679392a261123ec295bbb9", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883547, "uuid": "48e7891e-3b84-4b56-997d-e5c99bace1ae", "value": "T130E30B46F8814B12D5D111BAFE1E528E37131BB8E2DF73029D246F647B8A97B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883547, "uuid": "ad4ea2b5-8b50-473b-8381-c9bbdb435d73", "value": "3072:DHea4CTSUjnwJIXMb6kzz5aTHACdYV8P4eLg:zePCTSQ6IXu7zdaM38P4eLg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736883547, "uuid": "a90a9037-6ad7-4103-a2c8-f3c5db61ad21", "value": 144156, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883547, "uuid": "7baf447b-9fee-429a-860c-c7cec0b86ee7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "381add58-d2af-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736883547, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883547, "uuid": "8fcbb58e-8f37-4df4-b9cd-5932cd09bdf8", "comment": "Malware payload (Mirai)", "value": "f4569ca72c00d273c3ed5be4676f9a4a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883547, "uuid": "c9d0b657-b1d0-4735-bfa0-6c6b0f0600a4", "comment": "Malware payload (Mirai)", "value": "764cf8d721d76089cbd5d61fbdd7125d11b839caa60e0b4d8cd5ebdcefb31dc4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883547, "uuid": "f4db66a7-2387-4041-b5a2-33ad724f6219", "value": "T11704881D6E228F7EF668873147B74E25976C23DA27E1D640D2ACC1106E6029E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883547, "uuid": "1f2ba222-c0b7-491f-b2b6-8cdf7e55f653", "value": "3072:jg57RW7LHZwbq1YSBan1yvbysxr1uGSKI:jglRW7LHZ0Bqyy1BSKI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736883547, "uuid": "fe7df1dc-576b-49b9-b224-318344ace292", "value": 173888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883547, "uuid": "93bda5cd-55a4-49fd-8b5c-69d4a3e5ad70", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "381be22d-d2af-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736883547, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883547, "uuid": "4b76e9b0-bb76-49f3-8d94-3cb7e4c01406", "comment": "Malware payload (Mirai)", "value": "e100c163a024640740e2b05fb6ce70e3", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883547, "uuid": "e3d4766e-ab74-44f2-87a3-bd6f8db990c5", "comment": "Malware payload (Mirai)", "value": "ef1094bb5b05ced1dfc9756360a192469187c4fd6eaa66b4623250f64002951f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883547, "uuid": "8bfbdbb6-7e02-4061-9395-2e3ef9663052", "value": "T1C5D32A06730C0A47D2632EB03A3F67D197AF9AC121E4F640355FAB8A95B1E335586E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883547, "uuid": "36ce85af-5f4d-4858-9e1a-3b9d4969e381", "value": "1536:troGHNTUZNilIBUiCxfytmtewMDNna/w4o7lbEJvAhh3rp+JuQfqAg87+3p:3mNUiCxttqCwZ7lLhrI63p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736883547, "uuid": "e1c1c803-63c1-4213-bee8-86931929e9be", "value": 134036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883547, "uuid": "3ad199bf-b5cb-41d9-8e04-a26b8939b3cf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3823cb8c-d2af-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736883547, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883547, "uuid": "fb7f9c6e-f98f-4c5c-b339-3fc4cdfd8a54", "comment": "Malware payload", "value": "ebc668052fe672e883e1b7abb38dd057", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883547, "uuid": "eb38bd9d-2324-4523-a4db-180543ec114c", "comment": "Malware payload", "value": "09327e2b0853acf3bbd47e46388be272c5092b7c7016901e6afe53f3907058de", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883547, "uuid": "42f6c894-2db8-472d-aeb5-2966795851b7", "value": "T12C41749A11F111783CE5AE6EB1F68804B980B152BAF5BF1499EC3DF7888DF2434417", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883547, "uuid": "e74ef54c-fd81-4c3d-b119-f810172a1235", "value": "48:wmB+Hbyi+lur+Hcn+Kw+85+YxFq9++O+g7+GS+SVc:wmsHby9Ya8+K38EWl+BgKGNSC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736883547, "uuid": "00df1827-a903-4d30-8f34-93124db646a8", "value": 1979, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883547, "uuid": "ce8abecf-6e11-46a6-bfc6-d6e27ea885f5", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3828745e-d2af-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736883547, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883547, "uuid": "62e16df7-3a15-4133-9771-b1a8e2bfde73", "comment": "Malware payload (Mirai)", "value": "83bf8f58ab8cbc5b3813a0f4ffcdbdae", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883547, "uuid": "28fefbe0-0ae5-4ade-b7dd-8f638e5fdd7e", "comment": "Malware payload (Mirai)", "value": "314e1aef00d0c9d95e4f39bf140601a0af0ac312714f319cf79e94935c82222f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883547, "uuid": "67e76fcf-877e-44e1-aa79-023ec969265a", "value": "T1F104B719AB510FBBDCAFDD3702E90B0139CC955B22A93B363674D528F54E50B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883547, "uuid": "238a5134-31c5-4d50-9ef6-eaf1ff51ffe7", "value": "3072:nKpzG1eNkSfcQqmav8SqaRVlnYz65AVt:nKY1eNYQqmeqavlg65A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736883547, "uuid": "25845cc1-e265-4d1a-9561-efb579151c41", "value": 177760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883547, "uuid": "73e20548-0d30-4cac-9231-d64933a84f02", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3829199d-d2af-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736883547, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883547, "uuid": "cb971d4b-7fb7-4c48-ab42-d344eb013910", "comment": "Malware payload (Mirai)", "value": "6cfa7a58ced26dd13823bf9cfcd8408b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883547, "uuid": "81dae8a9-219d-41d5-8f6f-43b13508e299", "comment": "Malware payload (Mirai)", "value": "fb4f3ebde959a5c238f7346340417abdb035f015e26a21805f1cd00dbafc9d9c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883547, "uuid": "7bb998bd-4f62-4a77-b0ae-7ce017e69ec6", "value": "T116D35C17B5C180FDC4DAC1744F9BF53AED32B1A91238B26B27D4AF222E49E205F1DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883547, "uuid": "e4c10cee-d9fc-4426-95c2-0be23564a6bb", "value": "3072:79eSuygEPjt6qkWqXdKmDnYMb0gBd/gQyVGsdqml6saj:79eSuygEPjt6qkWq4eH2lasa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736883547, "uuid": "a4a81960-e668-4bf8-bd82-e8c6e710c3e8", "value": 139800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883547, "uuid": "97029494-462f-4997-a298-66b086b8bd2e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38297561-d2af-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736883547, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883547, "uuid": "94b7f557-7800-4777-a77f-3667582ff3c3", "comment": "Malware payload (Mirai)", "value": "dc83be99f00c2cd75f6d8541b63c0396", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883547, "uuid": "0ce158f7-1847-4c31-870a-7dd693083896", "comment": "Malware payload (Mirai)", "value": "4715a6e7dbdb77f247e40766d056ba659d3efbce1df6cc938c029e34987fea11", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883547, "uuid": "38dcbc64-b017-4493-9fe7-c1e0dc32a171", "value": "T1B4B35BB3CC26AF98C655D074B0B18FB92F53A59482471FBE19B6C2B44443D8DFA05B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883547, "uuid": "2f93c894-1a56-4789-a2ef-956dbfe65724", "value": "1536:OTW/VCxsHZusQ2Li62C87mKjR5fvPVWARouW8j3W+gJH73:OytCxsQx62NVjzVWxuWM3byj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736883547, "uuid": "27b74d2f-d070-41e5-8d4c-9ee4870a8d14", "value": 117568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883547, "uuid": "eb54d8ea-4b5a-4e97-bd4e-0f2192e4874b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "382e93fc-d2af-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736883547, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883547, "uuid": "e56faef8-2841-4e78-b0f5-22f4bf23714d", "comment": "Malware payload (Mirai)", "value": "7b003a1c1f02485904fa6f2b094dba83", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883547, "uuid": "b09f7e93-8ee2-4da1-8363-c7ed0288e07e", "comment": "Malware payload (Mirai)", "value": "c124b235a742c4de16afd4e957f7859352cf87acc280458d8530dbac20538672", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883547, "uuid": "5166a2d7-fbd1-4dab-bb6b-5b4a5b412603", "value": "T1E7E32AC7F900DEFAF80AE33748570905B630BBE115921B372257797BED3A1991863E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883547, "uuid": "2c6af535-a53b-4685-83ec-0c7926751d49", "value": "3072:GmzTDH86Jl78HenJljAX0Gidw+w9EEVvjbiQLZrEyqKYHf:G2TDH86JRHjAX03dC9EMLmyqlHf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736883547, "uuid": "44588ec4-9eea-4701-81e7-51d1f25aa505", "value": 150464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883547, "uuid": "23e57a31-68e3-4fbd-88d8-37413bd2f0ab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "301022b1-b565-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736883547, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883547, "uuid": "381b0f1a-219c-42a4-b7e2-e3ee59a679dd", "comment": "Malware payload (Mirai)", "value": "a4002c2191fa050f41157f6417fb1a1b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883547, "uuid": "6b500e41-fed1-4464-b15f-259dd9311a9f", "comment": "Malware payload (Mirai)", "value": "206679beaa28e87bc288606b982f905e76ef20555f1c2b4863e99331d623aa7c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883547, "uuid": "8670ac85-89b1-4170-8f3f-ba5133676d86", "value": "T12E042945EA404B13C0D627B9F6DF42463333AB9497EB73069528ABB43F8679E4F12A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883547, "uuid": "6c896c0a-74ba-4868-8e16-27ec772a3bd5", "value": "3072:OLe6vhfZQIvuCeeuaMuTuRez43IVIL9ZQy38YhTfYo+M/RgDlplLn:ee6vheIv1ruaMuTuReErL9738+x+M/Ro", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736883547, "uuid": "093e8486-2908-4491-a70b-8a7784baacfa", "value": 181474, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883547, "uuid": "fa565607-275e-4ad4-9830-d0907dbcf128", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38376baa-d2af-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736883547, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883547, "uuid": "d0a9e67c-a33c-43f6-b150-46d80e8d2881", "comment": "Malware payload (Mirai)", "value": "e83500a5820116bf99314e217732d927", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883547, "uuid": "6d5bee1d-b8b3-41dc-bdce-946d57f3ef12", "comment": "Malware payload (Mirai)", "value": "0b989f5edd1d46b8774785dc874ac436f5ce9a8e56ce6b1886d06f5762d680e0", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883547, "uuid": "524fe159-9370-457c-9177-6bd64b2bbc3c", "value": "T1DD937CC0F683C4F2E84705B1507BE7379B32F1B9101AFA43D3699A72DC91951EA1AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883547, "uuid": "d770e788-8796-4a1f-959a-8d8c3a88940c", "value": "1536:W/QCZaxGdvts3i5JPho0sxPu++4HRsUIKqI4FrS4LSv:WYCZa8dvm3oJPhpsxP5lR+KfUmDv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736883547, "uuid": "28865117-51a1-4735-8b47-ea2a8770a0be", "value": 89992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883547, "uuid": "461ba014-9ebc-4418-98c5-0815a50aa052", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3843b6fb-d2af-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736883547, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883547, "uuid": "a472e257-2b49-47ae-aa77-1e4abf5a6c5e", "comment": "Malware payload (Mirai)", "value": "313a7eee8a04b96e78ea5cfcbca62047", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883547, "uuid": "14bb746a-6fa5-4e7f-91eb-e9bc8de76f9c", "comment": "Malware payload (Mirai)", "value": "d50c79ee0b00e5b35bd11e2fdac9aed74742eb567ed6631ecee7ac27ab21623e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883547, "uuid": "4963002e-532b-4560-bf42-3a94629f17ac", "value": "T1DFC31B45FC405B23C6C612BBFB5E428D3B2A17E8D3EE720399255F60378685B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883547, "uuid": "f6d76cc9-13b9-47b9-b20c-828d90a44fd6", "value": "1536:p/Ka0rG5yC/cMChygtVOBdWFAcJX4VlgXTAXYFkWUGZrSo51WhrV1l3GwywEReQT:ZKaprMh7TOXWFh4UXcYFkWpZlvWNUmj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736883547, "uuid": "4bf03196-0255-4d4b-851b-d0aa507ea7a4", "value": 129824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883547, "uuid": "08cd8cd4-6f81-4431-be22-1e1485dad572", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af732cbc-d2af-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736883747, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883747, "uuid": "ec407522-8933-4c79-b4de-1a8c6088ee3b", "comment": "Malware payload", "value": "e7c37895d0bb2299b9f1f4ca3a68b4ea", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883747, "uuid": "dc449676-b4f5-4b59-82ef-189730d5aa10", "comment": "Malware payload", "value": "e1e631bfbae4cc7e9b82358901c1ed61107248915a220383cd2db608813578a0", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883747, "uuid": "6e09de0e-c39c-4f2e-b1d6-092704afc250", "value": "T1D38533763E50A4FBD249AAB131D5229C6B8CFF74FCCDBC6D4D6D60148A7076292060", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883747, "uuid": "36f63ffa-95f5-424f-9bf8-d6419c441dc1", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883747, "uuid": "f399b1fa-0754-4775-9190-8f4127c6e1e6", "value": "49152:iG7avrSvyXIBSE97+pYv4jC0Y88nqiqcgGZYJ5cM/Ev:l7avCyY9Jv4+06b/amM/E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736883747, "uuid": "aa83e9f1-4fa2-435c-969d-56cbe714cee1", "value": 1790976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883747, "uuid": "28fe1d57-5f67-4ccd-af54-b4aa64133c1e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45a89ff0-d2b0-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736883999, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883999, "uuid": "083c7b6d-92a6-492e-b8b7-903c27fc1f44", "comment": "Malware payload", "value": "410a13ab391ca5d743d7875bbc27669f", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883999, "uuid": "bb1ee678-beb3-43ff-9fa9-e151e2ec363c", "comment": "Malware payload", "value": "14308597d6a1f2a5c2d309803386d5936736c1bc44c893f5efaaaa02cedb8347", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883999, "uuid": "20f349a5-4228-47eb-bf55-02c7c9d44f38", "value": "T1FE8533A83F2431B5D69EA97B11D709328B748C2FA682D357FF664738D6967183AF0C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883999, "uuid": "db7e97ed-bfa0-415a-bbbc-575c5ad4914c", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883999, "uuid": "7bc9f665-27f7-4219-99b7-2e9330b6c398", "value": "49152:Zru3er3I4MVbyPpwcPsP9VPQtyiXu0A1cf:ZK3qZcOPphs1ZFibAk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736883999, "uuid": "258bf457-3b04-4c20-81ba-0dea455d8048", "value": 1865216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883999, "uuid": "b9ec38a1-f910-42f0-92eb-f306838c7621", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5637f2a3-cc85-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736884028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884028, "uuid": "d78d8deb-9395-4e43-ac25-c196b22371ef", "comment": "Malware payload (Mirai)", "value": "52740e8c935217afa3ba5ffc90fae98e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884028, "uuid": "030b3374-3a31-4929-a532-277d49bcb651", "comment": "Malware payload (Mirai)", "value": "353a0eea21d8c7e1c745ce4a776797f373d6de116da44c68a99163b116ddd531", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884028, "uuid": "a057c627-38ff-41eb-9f12-9f2db5121be1", "value": "T13C04B719AB510FBBDCAFDD3702E90B0139CC955B22A53B363674D528F54E50B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884028, "uuid": "563cceff-61a3-48e0-abdb-b888266bce6a", "value": "3072:nKpzGEeNkSfcQqmav8SqaRVlnYz656Vt:nKYEeNYQqmeqavlg656", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736884028, "uuid": "6ab51279-4375-482e-965b-6633ffcf1d45", "value": 177760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884028, "uuid": "3a229264-21d2-4de5-b37c-df93b1e2882e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b1faf32-cc85-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736884028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884028, "uuid": "c4843145-f37a-4353-9ca0-75fa6baf0349", "comment": "Malware payload (Mirai)", "value": "ad1a985224f852e9200ad567a55b8c23", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884028, "uuid": "3e5a643b-3d8c-467a-b8e5-91a28da819d3", "comment": "Malware payload (Mirai)", "value": "50bc50030d6b645f04283124856fe09c6b3d23d85217be892fd876d70696f0ef", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884028, "uuid": "24ec7671-9fd5-4bb6-8d1b-aafb4b3194b3", "value": "T1E1D35C17B5C180FDC4DAC1744F9BF53AED32B1A91238B26B27D4AF222E49E205F1DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884028, "uuid": "2682e2e7-4748-4e3e-85b9-c3f1a9db275a", "value": "3072:79eSuygEPjt6qkWC2dKmDnYMb0gBd/gQyVGsdqml6Iaj:79eSuygEPjt6qkWCNeH2laIa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736884028, "uuid": "e39efe5b-4561-4720-a2a9-ff49e47895fe", "value": 139800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884028, "uuid": "401e30ad-c10b-4ff9-9b24-1d81a15d591b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c9a48d4-cc85-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736884028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884028, "uuid": "4a9e444b-1285-4b96-a094-a8ae80d71a25", "comment": "Malware payload (Mirai)", "value": "bf71a2b749ef63b91485d0ada442c1a9", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884028, "uuid": "4fb999ad-6a9f-4311-b808-1353d5a6f50e", "comment": "Malware payload (Mirai)", "value": "97b248cf2f6dc58b84881d1f19d8961dabbd51d265fc3ece47f67cbbd275228f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884028, "uuid": "e6787fbc-b876-4c91-8621-575108b1747d", "value": "T118937CC0F683C4F2E84705B1507BE7379B32F1B9101AFA43D3699A72DC91951EA1AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884028, "uuid": "9a723bfa-80ae-4a3b-940b-8cf58b230390", "value": "1536:W/QCZaxGdvts3i5JzhofsxPu++4HRsUIKqI4FrS4LST:WYCZa8dvm3oJzhisxP5lR+KfUmDT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736884028, "uuid": "8b4c349d-5d47-456b-bf4c-21edaa193147", "value": 89992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884028, "uuid": "fcf0f7f3-c808-4ce2-b9e0-afc5d3e504f5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c13a6ec-cc85-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736884029, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884029, "uuid": "33947cc8-3c16-440a-b131-fe5cff4492fe", "comment": "Malware payload (Mirai)", "value": "5074911f14ba83c1069c875fb327db79", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884029, "uuid": "135349e9-8cab-4c61-ac34-3bfdb8cea0d6", "comment": "Malware payload (Mirai)", "value": "448bbb75be76f2ffe8691b893c02506eeda06cb50a62ccfb184ddf6f293cae45", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884029, "uuid": "ab3d5a26-1394-4255-8501-be2cf13b1145", "value": "T196042945EA404B13C0D627B9F6DF42453333AB9497EB73069528AFB43F8679E4F22A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884029, "uuid": "d81a768b-5e77-48a4-b7ac-6982e91ade60", "value": "3072:vLzeUTxG84oALv2eEQakGzORu28zw99LvJ3fqaooGM/RXCMI5Ln:vfeUTeoA7TEQakGzORuhGLvJ3fvVGM/4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736884029, "uuid": "caf189a6-d8c6-4633-a393-710f26eeb89d", "value": 181482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884029, "uuid": "39d067d1-5bf5-46fc-9f6e-799bb708f02c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ac1c8cd-cc85-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736884029, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884029, "uuid": "d843d262-468e-4e16-b081-9df99e6ae10f", "comment": "Malware payload (Mirai)", "value": "e2081a02eb6e792e9c182fc49b204074", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884029, "uuid": "415c7175-fcd1-432c-96a0-2e5e717b9e54", "comment": "Malware payload (Mirai)", "value": "be45248014875fab593ca56e7bf2d038bb0b337b7aaaf866a71478392521b298", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884029, "uuid": "3277a7a9-9320-4754-a5ef-51a142b2ad62", "value": "T15204881D6E228F7EF668873147B74E25976C23DA27E1D640D2ACC1106E6029E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884029, "uuid": "0e86605c-f6bb-4aea-9758-424c76e16c20", "value": "3072:jg571d7LHZwbq1YSBan1yvbysxr1uGS0I:jgl1d7LHZ0Bqyy1BS0I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736884029, "uuid": "ed47956e-8994-44a7-a3b4-6df02e274dd8", "value": 173888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884029, "uuid": "18ba4a67-3a2a-48b2-a1dc-588bddde6191", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b9b2468-cc85-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736884029, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884029, "uuid": "9551b960-90e5-4eb0-9a86-62dbc0018ad0", "comment": "Malware payload (Mirai)", "value": "a26012803d1cf63e5c0b505e9929d403", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884029, "uuid": "d03c6fec-1df3-4be2-aa5f-e437356a4d72", "comment": "Malware payload (Mirai)", "value": "e4c3aea2c963f7488c6f64a4448fed020eb0dd9938c4b75b8c7cce51fbbfe24f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884029, "uuid": "9b668d43-c8d8-4323-bfd7-2409c052a38d", "value": "T1FCC31A45F8405B23C6D612BBFB5E428D3B2A17E9D3EE720399256F60378786B0E375", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884029, "uuid": "69b6b5af-d501-4aa8-bc3e-034f211c2970", "value": "1536:pbK8pxG5lwpVMFhyrvNOXOWkA8BD4VJIMTV7H/b6zO5430vizHCV+lHFwyw5R+1m:9K8UGuhI1O+Wkt4AMpH/bSOyOMiXdV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736884029, "uuid": "ab268c71-0c6f-469b-8f05-b537d3d65483", "value": 129824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884029, "uuid": "bbd9a570-a233-426a-9397-80448a1b9070", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5aa07810-cc85-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736884029, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884029, "uuid": "56f2d8a0-2b8e-4d2c-b973-aff6e608d0f7", "comment": "Malware payload (Mirai)", "value": "4d4020a8f3817fbb1f9b5f96d1fe0420", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884029, "uuid": "44b6527b-3713-4ad5-9374-38882bef1e36", "comment": "Malware payload (Mirai)", "value": "0935e9e17dc218ce3c04997bab9efec8fc21274eb18046f31c1ffe748d6ca6bc", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884029, "uuid": "bd1284a9-c074-40a3-bb6b-c6eefe8e4268", "value": "T182D32A06730C0A47D2632EB03A3F67E197AF9AC121E4F640355FAB8A95B1E335586D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884029, "uuid": "f45be413-a56d-4319-8f5e-2a7212a11915", "value": "1536:troGHNTIZN95IBUiCxfytKteQQvhDajwso7lbEJvAhh3rp+JuQfqAE87YnJ:3GkUiCxRteKwF7lLhrMMnJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736884029, "uuid": "022251f0-a1c6-45da-9eb4-471a10897c21", "value": 134036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884029, "uuid": "eecff276-1fe7-4f46-a215-cb389b1e39b5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57ca9673-cc85-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736884029, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884029, "uuid": "ef0f6463-92ea-4511-9ec9-1091b738603e", "comment": "Malware payload (Mirai)", "value": "715b0190ba9e129cba1cc63f0328b5a8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884029, "uuid": "f55d0080-aac4-4e1c-b24c-1c825d18e5a1", "comment": "Malware payload (Mirai)", "value": "fa4f00af8eccf45c726ea3be9e9782bd84ade201b13f8e0f9b4eb2f5dc68fdd2", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884029, "uuid": "1cb0a50f-b549-42de-8329-972b157446cd", "value": "T173E30A46F8814B12D5D111BAFE1E528E37131BB8E2DE73029D246F647B8A87F0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884029, "uuid": "83a78787-e238-4073-9d61-e099626ed767", "value": "3072:dLeakCLoU9JbTpXETdcrjuaX4vWt/z0/JsLG:deTCLoC5pXmqr6aKq0/JsLG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736884029, "uuid": "7ca70b57-5ff2-4c04-8242-e7d5f1802609", "value": 144124, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884029, "uuid": "e93a81fc-4c13-43d3-a87a-c7f01a6fb646", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5cfa183d-cc85-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736884029, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884029, "uuid": "794cadf2-097c-4d43-b2e9-5458ce9cbf37", "comment": "Malware payload (Mirai)", "value": "e2177a97ad784aea09e6a02a5f01869c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884029, "uuid": "788d8527-4469-4e5e-955e-5539660042f3", "comment": "Malware payload (Mirai)", "value": "a2e355cd5d3ec4784b36e8f6daf097466c59b4ad9bc3a18635988fbe0cca8f79", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884029, "uuid": "8221c00f-5bbb-462a-bebf-a591bf537d22", "value": "T11BB35BB3CC26AF98C655D074B0B18FB92F53A59481471FBE19B6C2B44443D8DFA05B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884029, "uuid": "dfd83f1b-8e13-4896-a46e-d3783b7525ba", "value": "1536:WTW/VCxsHZKsj2Li62C8XiKTRpP/PVmAVoWWczTW+A1P7R:WytCxMjx62N1TbVmFWWMTbWV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736884029, "uuid": "86d3c0a0-6672-479d-b6a6-595e8142e45e", "value": 117568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884029, "uuid": "4d5a4826-e6c2-4535-919f-d411f6526bc1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "589d6931-cc85-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736884029, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884029, "uuid": "0089930d-d226-4036-840b-a913505a123c", "comment": "Malware payload (Mirai)", "value": "9f8c69fa717911389eaedc6234ae34d5", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884029, "uuid": "1fb19c66-e4ee-45d8-8e98-d2b40a3dd245", "comment": "Malware payload (Mirai)", "value": "a87d4152d4eccddee53a5c7f71a59181f8edcb768e710e2245ae53ab365acde3", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884029, "uuid": "fc9ef4a5-4da2-4c61-a367-b6b501985156", "value": "T14DD30845F8504F23C6C612BBFB5E428D7B2A17E8D2EF720399216F60378695B0E376", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884029, "uuid": "30c18b44-ae1f-482e-ae23-a60be3745fdb", "value": "1536:QKbrC1BZPlA+b3q8f38aAZgU4VVTVETK32+/cxfRe9d5kQcDZbXlC2wywRR1cvyA:QKbcLFf8aS4HOi2+/yfsG1Z6lHmVz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736884029, "uuid": "88c82010-2399-434c-b003-72144a799208", "value": 133920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884029, "uuid": "86fc45a3-696c-4cc9-aa27-3cad5a6a4b81", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5bd9926f-cc85-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736884029, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884029, "uuid": "8739bcbd-a1de-4759-9fd9-ef6d06abd2a3", "comment": "Malware payload (Mirai)", "value": "c92bafa4cb12f4729235d2d8017401a0", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884029, "uuid": "3375109a-bd52-4eaa-9d8a-32c751d31346", "comment": "Malware payload (Mirai)", "value": "59f9b3044e98f8d55996a29261e80733dac4a913432f8e6b5c6e5a736009b913", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884029, "uuid": "fac91e74-727e-4b0a-a3a7-f07c729e1868", "value": "T1ADE329C7F800DEFAF80AE33648570905B630BBE115921B372257797BED3A1991863E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884029, "uuid": "5abf3df8-8d0a-46ec-820f-15dd2544fa8c", "value": "3072:GmDTDH86JM781q5lZjApqGidS8w9aeVvjbieL/VCyIOH8Tn:G6TDH86JqPjApq3du9a4LcyIrTn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736884029, "uuid": "3b4f5dec-e836-489e-9e79-b44fd2c93d11", "value": 150464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884029, "uuid": "66fa0f12-163a-4534-9e7d-f8549edbd6ed", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "092363f4-d2b1-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736884327, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884327, "uuid": "627641fe-5acb-41b0-a335-293a919c69aa", "comment": "Malware payload (Mirai)", "value": "6d34e87c765dc723ccd44eac88a5f5c7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884327, "uuid": "1d1d8137-813c-423c-a5ea-ecccf540dc9b", "comment": "Malware payload (Mirai)", "value": "5dbbba1309c491d84619aa8b287f0ab540b8bb328559dc5b26bc8c8913915f8a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884327, "uuid": "5d6f8999-1afb-40ed-97d5-369203fc94e6", "value": "T12663B61A6E628FBDFB59833447B78E21AB5823D527D1D641E25CD6002F6034E681FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884327, "uuid": "8f14860b-6e67-4405-8795-a03751449894", "value": "768:bPWek0n4CjdGQKKWxmg0EhFkFkeYA+QotFXyApGqFDjOZ2uyyQ5NeNTP4wnIIZ:bj/hSmmjAotdym2Uu6eBPZnIq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736884327, "uuid": "8d9507d8-16c9-4225-a3e3-3f2145c43368", "value": 72628, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884327, "uuid": "c9e8dbaf-249c-4366-b2ba-7e1c0c4a2b27", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09247d70-d2b1-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736884327, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884327, "uuid": "ac0b8ca7-529f-4d04-be5c-5a1f2ba1bbb7", "comment": "Malware payload (Mirai)", "value": "a92e1869bd5d0716e30ea16df527e287", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884327, "uuid": "906afe4b-c690-412f-8a44-2878eaa0f4cc", "comment": "Malware payload (Mirai)", "value": "3efd6c4bed8ba71ec37ebf9a2f779589cd2168eb81b1f3fe0eff921b3af76f89", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884327, "uuid": "79dcd6b2-2e6b-47c2-afe7-486c6a555dc0", "value": "T193433A31BA760E27C0D1A8B661E74B25B6F543DE26E8CA0B3DB10D9EBF715406503A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884327, "uuid": "1918d457-ef90-414f-82c1-afe666036f2b", "value": "1536:fvf20dYmgHg1We/mrYF6RQW+75MUtydN2A:f20KKG+VM1N2A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736884327, "uuid": "b0b8b159-5eab-4baf-bb17-7a11e8946c1d", "value": 59864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884327, "uuid": "be50d017-dcd6-432b-a863-718e5ccc2822", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09eab79c-d2b1-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736884328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884328, "uuid": "9126e58a-6d0d-43f5-bfb8-cfa1c5d15d43", "comment": "Malware payload (Mirai)", "value": "2ef223afc609231aad1308eb30c83c95", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884328, "uuid": "fa79a786-6d07-4ca3-bac7-4cba246d33aa", "comment": "Malware payload (Mirai)", "value": "c193b07ca5951da7881d724bc5fb52cbd4c6d5b651790882686810f3e3e2562e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884328, "uuid": "56688aad-1884-41d4-a068-25b64f66b2ec", "value": "T196334AC4F643DAF9EC4705701177FB339A32F5E51229E743C3A99A32AC52602A906E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884328, "uuid": "a03eaf64-ca91-4084-82d0-e1b807c0df4c", "value": "1536:GWa2d5sf1Gg+ya+nlQ5F2zjHDffwVsp3MSfCYk:Gt2d5sf1GCammr2PjnMW3dCYk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736884328, "uuid": "3f968145-502b-47df-97ae-41bf7aa35f89", "value": 50256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884328, "uuid": "2a6d8cdb-0adb-45e1-8593-ae8809b63810", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a183ec6-d2b1-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736884329, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884329, "uuid": "54ecb840-147c-4b62-90e9-13db18fbae63", "comment": "Malware payload", "value": "43674865ddbcc3420a275f178cf72252", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884329, "uuid": "cc0f0aec-9765-4e73-9d76-86be806401cb", "comment": "Malware payload", "value": "9a5b9ef36c3df8461f93ce2725b40f14ce6b5de00b04d1c4b2f6679424080a00", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884329, "uuid": "2589306e-82b5-4548-998c-d9edef4ff175", "value": "T180533C9AF801CE7DF85BD77B4457090AB632B3D102821B3627A7B997BC731991D23E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884329, "uuid": "90d689e6-423a-4a7a-a32a-99ed742bb68d", "value": "1536:K04ggXHYK+T3mg8TD6vy+DG5T7D/juN6gayX8YAe:K01golT3mFoDsTfurX8YAe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736884329, "uuid": "383c35f3-ef59-4fda-911f-63e4e4b72c09", "value": 61704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884329, "uuid": "baa149d0-32d5-4a30-89f0-e44f31365d01", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a232fae-d2b1-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736884329, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884329, "uuid": "a4499164-a245-45bb-a2dd-07dcda99072d", "comment": "Malware payload (Mirai)", "value": "ec30de867899acceeaf92cba9c615d81", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884329, "uuid": "ca7fdee4-a7c5-4647-9045-b0a11960b9b9", "comment": "Malware payload (Mirai)", "value": "e9902aeac7bff931df48c866b1cd90a7540ed397831d364e689b5b55052549c3", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884329, "uuid": "8bb2c3fd-8090-4351-b705-002964af9c60", "value": "T1DC73C61AFF620FF7DC6BCD3745A8170239CC554A12A47B3A7534D828B65B24B49E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884329, "uuid": "ef7300ff-8507-4a1b-81e3-ada5e7dd066c", "value": "768:K3sJmkq/lhWHgJvd8p6E95Des4ReDB2wJ2iwgugBI2ZpMIXi5Ij7+eOcIoJhwnUS:KcJmkC1+5B4RcBvC8W2ZpMe7+pcI3nU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736884329, "uuid": "a5ca46e7-0cee-4cb8-b3f7-0e37cf831945", "value": 73796, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884329, "uuid": "fb8ae86d-2aab-4ed3-9612-eaa359cdf6d4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a23392c-d2b1-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736884329, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884329, "uuid": "2a3f1539-e3e2-4b47-9a62-f34124dbdc6f", "comment": "Malware payload (Mirai)", "value": "30ed56d9e437807398da07f1ff2bc033", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884329, "uuid": "31de351f-1d32-4e82-88f0-2fc192dba99a", "comment": "Malware payload (Mirai)", "value": "b991250f250e7058c1d45cd8d24451e0a5970dc851691315296f8ac0241f92c4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884329, "uuid": "81e68afb-ff28-4535-b87e-4bb917a5f9c6", "value": "T18E434A50F8819623C6D1127BF66E468D3B2613E8E2DBB3079E225F2037C686B0D77E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884329, "uuid": "ec26477c-e5c6-45bd-ab3d-ea9379d45ec5", "value": "1536:pjzQgyzv4qsU9KHU+0FQL2g4TtiCsyXvqnI:pjoQ/0qLh4p9ZqnI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736884329, "uuid": "c1292941-b477-4991-9369-ebeff88c99fc", "value": 59640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884329, "uuid": "d1073208-2374-40ec-a6f0-f887d2b169f2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a237a90-d2b1-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736884329, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884329, "uuid": "f3f24360-fc4a-448f-bb9d-a21ebdd693d9", "comment": "Malware payload (Mirai)", "value": "4177907471d681e84a1a0ae20139864a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884329, "uuid": "f2c52882-15d6-4547-aa93-58e85cc10dcd", "comment": "Malware payload (Mirai)", "value": "e8afd8f097dafada61298add7b968fda19355e95eb54966f44d43ee281370b27", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884329, "uuid": "d6a1fce3-ce95-4b12-a728-86ef6f140e12", "value": "T1D3F2E951B8854727C1E41379B6AE5A8E377073EC92CBB62BD8224B207BC591F1D63F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884329, "uuid": "68ba3afa-fe10-493a-8a21-6196bc48cd70", "value": "768:VxwgXqSoG5M1ImBHGaBwO3iRtWV5za9ZSFH13RCTXpoc3tSwn:VRqZG5MRxGaeVKSUVB+Xjn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736884329, "uuid": "40a61a77-fcfd-4bc9-b0d9-2930780a7f43", "value": 34864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884329, "uuid": "c3d7cd80-39a7-4e4b-bb7d-b8160ce6cf0e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a5d43ec-d2b1-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736884329, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884329, "uuid": "1ecf11a6-5136-4e76-bad0-3c31e3f47509", "comment": "Malware payload (Mirai)", "value": "9139136a094d6b1360c30866c48a6234", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884329, "uuid": "8a1e2100-764d-4c9e-8b82-45ee8b5418ed", "comment": "Malware payload (Mirai)", "value": "ef0b4da7818058e601d91ca06e8bc56d50e9fbe2f5fe64e978ce84444d7cc890", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884329, "uuid": "66376755-de39-4a11-ad02-38096710e261", "value": "T1ABD31A56E7408B13C4D61775B6EF42453323ABA4A3DB73069528AFF43F8279B0E639", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884329, "uuid": "bea872e5-46cb-469f-a14d-1d59bf8c287c", "value": "3072:lS6VGvX5uazAFEsHYw3NK8YwxGnMp+SQkM/9CH:lS6V8uazAFEs4iNNgnMp+SDM/9CH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736884329, "uuid": "3e1633e1-a44e-43ee-a6f3-2bcc19d9e1a8", "value": 140758, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884329, "uuid": "25e90fba-a912-4af2-a087-f205b5950604", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a8ea1f4-d2b1-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736884329, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884329, "uuid": "1032f3ae-fade-4740-b840-daa2e878581c", "comment": "Malware payload", "value": "01f18ef4776059f74976a5e02f86d894", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884329, "uuid": "96e1faa2-c2f8-4b36-9bb2-d6c4fa83a09f", "comment": "Malware payload", "value": "6e7760aa130c122774b1434c309be83fe85e8cfbc90b12d41f9ac6c8fcfdaa7b", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884329, "uuid": "544cd9fc-c66b-4e1d-a0ca-dabb1619bb27", "value": "T1D7434A02B31C0E47C0A31A70263F5BD097BEE9D022E4F689711E979A9671E375586F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884329, "uuid": "ad15db0f-21b9-49da-98b1-eee237bb1dd1", "value": "768:EbpJYxjEJf68CRZGRloQUEqdeKPOkdUUF9umfSmi1j5GMI4gJGcFRxtafS+wn8IK:q/mqzq3PJ2GuSfi+MI4gcAxgfGn89", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736884329, "uuid": "397bd004-d20d-4dd1-b75e-b1e3a512ff3b", "value": 55160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884329, "uuid": "6a91fa31-2370-4da9-87df-f95ae2c2feb5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2cc74423-d2b1-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736884387, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884387, "uuid": "a3b56ed0-36d8-4af3-b2da-0a968b22f64e", "comment": "Malware payload (Mirai)", "value": "5f681d9b58d189bc7e58b03b44bcfbbf", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884387, "uuid": "82c8e1f9-ad07-4db0-8c55-119ff599e54d", "comment": "Malware payload (Mirai)", "value": "de95f8843acae40a3ae0c0defaf2176cda2aac7f52c76caaed6c2a226d9f57d7", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884387, "uuid": "87116017-aae9-481b-9cf1-db7941564a67", "value": "T16D436DC6D143D8F6E80B0570603BE72BAE71E8EA2219FF47C7689631FC86641A5179", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884387, "uuid": "dafd89da-fd91-4cc0-ab4b-c60f12f7e517", "value": "1536:DIqD1xfYqyDgZtmYX38pJmpYUz2jMY5ts0Aj+ISeWYeUu:DIqDXfYqykZ4YX3IJmplsMytzG+MWYeT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736884387, "uuid": "36a9bcb0-eaf1-40e1-93de-66838041b8de", "value": 60080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884387, "uuid": "48d3f72c-4de7-4ab4-a0ad-a99cfd118533", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2cd128f8-d2b1-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736884387, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884387, "uuid": "ac4f744f-b45b-4c1a-84f7-f0bbd8ad15cb", "comment": "Malware payload (Mirai)", "value": "038db4bdb77384c1cc30766f29a580ba", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884387, "uuid": "156cea3e-1716-4be5-8a33-0ea5814c59b1", "comment": "Malware payload (Mirai)", "value": "85b7c47093f5625fb229b78d2c184aa266830ca9e67e4cbeac0ffd1d30aff5b9", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884387, "uuid": "13493180-a06c-4e6c-8242-f617c827e7e0", "value": "T1C9337B77E46A5E84C086857075249F351F23F1C893932EBB16EAC2B95483DACF509F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884387, "uuid": "bd284af2-a1a2-46db-8f57-7832408c04de", "value": "1536:oaini/krGATVWDMKwlGWE81CCVghNnILT:oVniaGAETwe81ChNnIL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736884387, "uuid": "7f294f2e-7b36-4a28-9550-742f6ea12779", "value": 50580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884387, "uuid": "2d1cd215-3a4a-42fa-8790-8f3682363c87", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2cd50c1b-d2b1-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736884387, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884387, "uuid": "938f82d9-5445-457e-bf46-4c7f3691cf5b", "comment": "Malware payload (Mirai)", "value": "5bba0cb364f2ff98c27b8a7f8be214e8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884387, "uuid": "734afa09-b358-424c-93e4-8edfa37cf2f6", "comment": "Malware payload (Mirai)", "value": "37d45343fcc673ec7be66df7b14a77a2126b8ccd9ba8bec009d6837636bcd785", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884387, "uuid": "1e7260ad-ddc8-448c-b515-c81bda453aca", "value": "T1D5330907F681C0FDC49AC174476BBA3AD93771ED0238F2A67BE4EA223D95E611D19C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884387, "uuid": "8ebd2e25-6e49-47ca-a6d2-72a6e9378feb", "value": "1536:Ru31CxXVpHlCrxsNnVfvj56+Hr2r4DaEXzd0OCUjCYU:Y1sXV5lCKNVfvj51L0GaEDOVUjCYU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736884387, "uuid": "b90e4280-320c-4d10-8b01-01e233c6df5c", "value": 55104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884387, "uuid": "6c04609a-3e53-4555-8c39-e770612d8dce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2cd9cac5-d2b1-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736884387, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884387, "uuid": "7d82fbf6-afe8-4b93-9bbf-017727185f60", "comment": "Malware payload (Mirai)", "value": "9964205b1cb755e7a1e32fcb6398fbc5", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884387, "uuid": "408f81aa-e668-4b98-a26e-a7450b7392ea", "comment": "Malware payload (Mirai)", "value": "d5d8259ed277f8ede045525ff6474a983a17fc20a7bf806e08fac5e7d8c421ed", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884387, "uuid": "a8d31aba-a498-46d2-9e2d-6f13526899e1", "value": "T1F2630956F8814B22C5D5027AF92E118E332357FCE3DEB2229D206F2077C696B0E76D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884387, "uuid": "e7a4d56e-53c4-48e7-a099-5e86ae20c716", "value": "1536:dpnqh/sOR5YbAP+uppI4NEoq1aHg1zGI7ic8I2+lhCS5bYon9:a/9R5MEzMaG8I2+lhCSRBn9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736884387, "uuid": "d12e77bc-7082-4114-87e7-f0a79fcceaf1", "value": 70964, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884387, "uuid": "4e6ee032-a5ae-43bd-b1f4-e1879900d930", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33d5039d-d2af-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736884394, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884394, "uuid": "eb643392-8718-4164-9f8c-ddb105edb9e7", "comment": "Malware payload", "value": "62ead12035f8a3ba04b6441f0af55191", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884394, "uuid": "d7d88ae1-db12-4f55-8e55-bdc20ab823ba", "comment": "Malware payload", "value": "f666863c30bbd4c7706af3513ddc48becf07d3f78a94b81eecdb79a22005d9b9", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884394, "uuid": "3ce56508-e126-40e5-9ead-e924b3653fb4", "value": "T12E85338FD6C0470AC00E4B327EFB4757DFB2898AABED41A7760C5261494FB6190A46", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884394, "uuid": "18b28e4a-6585-43e1-aae1-b8b4b330b388", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884394, "uuid": "7c0c34f9-132d-4358-9a4c-4eece60d56e2", "value": "24576:RnRvebkKr82dkTeSBKRaB1rFk4vTgiCNLi7vUaMwhbE2GTDFbABWzCF:VR2HASOeR8B1rFkqw87vvhbTCRk0i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736884394, "uuid": "99a19a23-80b5-471b-9b5a-3e827b1372fb", "value": 1716224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884394, "uuid": "76ccdabe-1c10-4881-bd9b-9899258719a4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76bbd4dc-d2b1-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736884511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884511, "uuid": "a2ad368d-c5fb-4a32-b5b4-f0e04c19b2b3", "comment": "Malware payload (Mirai)", "value": "4026b4ab4cd83038aa5b042cffb14c41", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884511, "uuid": "ddc50e80-de63-4459-8056-45a756164d1f", "comment": "Malware payload (Mirai)", "value": "b1b4aafa447dfc68b1020df946d97f9d7aa0bfff97f38ca56258f733b10dda3a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884511, "uuid": "903012cb-ab5d-47ea-8b36-87e66c61b322", "value": "T155D35C17B5C180FDC4DAC1744F9BF53AED32B1A91238B26B27D4AF222E49E205F1DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884511, "uuid": "ceb6276a-8ce1-4475-a5ce-b32b740adb7a", "value": "3072:79eSuygEPjt6qkWqVdKmDnYMb0gBd/gQyVGsdqml6Saj:79eSuygEPjt6qkWqGeH2laSa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736884511, "uuid": "d6bbdc3c-47b3-467a-99a0-d6c605e787b2", "value": 139800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884511, "uuid": "e09007d1-da20-4084-8fec-13fe9fe248cc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76c27d5d-d2b1-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736884511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884511, "uuid": "10f5d73e-3b4b-4971-80aa-97446edcc979", "comment": "Malware payload (Mirai)", "value": "827fb5a38f743f9ee4a4b50a0a2615ab", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884511, "uuid": "aa07b35c-44f2-4fb4-868e-b4bd42a742d9", "comment": "Malware payload (Mirai)", "value": "ca6156cbafd69d5a428dc1966f509d141a1e819a3e37e5abd76fa6eac46268f0", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884511, "uuid": "29cb534c-bc3f-46ba-898e-6dfb01516341", "value": "T14F042945EA404B13C0D627B9F6DF42453333AB9497EB73069528AFB43F8679E4F12A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884511, "uuid": "289b75de-652d-493a-8d59-2281660e93dd", "value": "3072:OLe6vhrZQIvuCeeuaMuTuRez43IVILJZQy38YhTfYo+M/RgDlplLn:ee6vhyIv1ruaMuTuReErLJ738+x+M/Ro", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736884511, "uuid": "263dd53f-132d-4351-a16e-2af3748cbd1c", "value": 181474, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884511, "uuid": "7470f963-b05b-400a-8d50-64d75d46f535", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76c6d8e5-d2b1-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736884511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884511, "uuid": "c9a7646e-6bef-4d04-a49d-adc2e28d619e", "comment": "Malware payload (Mirai)", "value": "97e79c408605310b0ceb96b727725fcb", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884511, "uuid": "34954260-cf24-4f3c-80d6-a312e3b4b34e", "comment": "Malware payload (Mirai)", "value": "a179daf446f9d2bd3e38fa7d66e7c62a621581758b172c907514a75e3d68698e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884511, "uuid": "a40e534f-9d29-4a11-a495-70bb49b56463", "value": "T1A8E329C7F900DEFAF80AE33748570905B630BBE115921B372257797BED3A1991863E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884511, "uuid": "b9e764af-7b49-4557-b5e4-be7d77e6b998", "value": "3072:GmzTDH86JT78FenJljAX0Gidw+w9EEVvjbiQLZrEyqKY9f:G2TDH86JpHjAX03dC9EMLmyql9f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736884511, "uuid": "818a7590-1071-4922-8371-f69745202bbb", "value": 150464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884511, "uuid": "8fc45293-9273-414c-b1cd-77e5aa3c065f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76c86538-d2b1-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736884511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884511, "uuid": "1a3c754f-d585-4311-ab3d-027cea8f1218", "comment": "Malware payload (Mirai)", "value": "9bbf63a3f5d56098c7a4e0dfee22fbef", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884511, "uuid": "8e39fccb-dcf0-40be-981d-ab8a5dcaa73d", "comment": "Malware payload (Mirai)", "value": "fa7e920069ebae014713e66f8631977106393fc39296a49dc914889c51b5829b", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884511, "uuid": "ab2f3c39-8e79-46ed-9023-b44cb28f649c", "value": "T1A8D30945F8504B23C6C611BBFB5E428D3B2A17E8D3EF720399256F60378695B0E3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884511, "uuid": "b103d66e-b31d-4fa8-b209-edb68042a935", "value": "1536:UFKdzElm18uZJNb4AOFa8eAZHk4VB7fzTTr71igYSvGueqZvd2UlqKwyw6RNPYTq:UFKp50ZU8e947Lb71izSftBdRalKz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736884511, "uuid": "bd73c3d3-540a-4b02-ab59-33f60ab4059d", "value": 133920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884511, "uuid": "a5a8c204-6157-499f-ab1d-31065ef7767e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76d37f02-d2b1-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736884511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884511, "uuid": "f9c46bc3-4bfe-47b3-9807-1dfe3fa3cb0d", "comment": "Malware payload (Mirai)", "value": "95e52c62166bfb9bb341e24f193fd662", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884511, "uuid": "a3b3e881-8006-4597-9bab-61f64fa4e2c7", "comment": "Malware payload (Mirai)", "value": "b6b212b466ff562ec65275a85f2a0b3c9af07dfcd5634a5a80f562b131f2f3ea", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884511, "uuid": "78df6a66-309b-4a21-9218-bc8467f1b3dd", "value": "T12D937CC0F683C4F2E84705B1507BE7379B32F1B9101AFA43D3699A72DC91951EA1AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884511, "uuid": "873399e1-3b13-4549-9e38-2093ebc5394e", "value": "1536:W/QCZaxGdvts3i5JPho0sxPu++4HRsUIKqI4FrS4LSR:WYCZa8dvm3oJPhJsxP5lR+KfUmDR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736884511, "uuid": "32483523-26dc-49ad-b829-dd8e79b70de2", "value": 89992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884511, "uuid": "7b3b9122-4d8f-4eb3-b00a-765ea4a41dea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76e4c133-d2b1-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736884511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884511, "uuid": "c0a01e2b-ee4f-40c8-8e08-1ab52e7c99ce", "comment": "Malware payload (Mirai)", "value": "be7f0efc749dfd78b7b572d8fec3a5a0", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884511, "uuid": "e0e34f8c-d24a-466d-b741-a1bf15d8d108", "comment": "Malware payload (Mirai)", "value": "5cf1897573fd00b666fbb2581d27629973de1e71b15a4f0e10100887709bbf55", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884511, "uuid": "61d062bd-e166-4281-91b2-72175c7a55ac", "value": "T164E30B46F8814B12D5D111BAFE1E528E37131BB8E2DF73029D246F647B8A97B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884511, "uuid": "23e23c27-a785-4d61-96cc-f9fdd26a82df", "value": "3072:DHea4CTWUjnwJIXMb6kzz5aTHACdYV8P4eLE:zePCTWQ6IXu7zdaM38P4eLE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736884511, "uuid": "360fbd1e-e7af-4a6e-b4d9-ad1557a0e4de", "value": 144156, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884511, "uuid": "d482e1b1-e487-4fac-95cb-133e84915a69", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76e4cc1b-d2b1-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736884511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884511, "uuid": "17571384-3f13-44bd-98b3-2f5e86e713a8", "comment": "Malware payload (Mirai)", "value": "c0cc2d80bc8bb550cb10fbfa03d8354a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884511, "uuid": "f880479f-c77d-4c00-a209-dac40ad837b9", "comment": "Malware payload (Mirai)", "value": "c1dca97560f0b30c1746e3741864cbd6c9ae18e38c60cd7b34e5baaacfbdd793", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884511, "uuid": "4e9fc4b0-e87e-4a75-abbf-58f671e6bc3b", "value": "T1C8B35BB3CC26AF98C655D074B0B18FB92F53A59482471FBE19B6C2B44443D8DFA05B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884511, "uuid": "0918a5e9-a6d9-45c8-875b-8405b8041570", "value": "1536:OTW/VCxsHZusU2Li62C87mKjR5fvPVWARouW8j3W+gJH7v:OytCxsUx62NVjzVWxuWM3byz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736884511, "uuid": "479fadcf-d3c5-403b-b400-3d1ade26e726", "value": 117568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884511, "uuid": "9a6c68af-fecb-419f-8134-1b030627feb5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76e84bc3-d2b1-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736884511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884511, "uuid": "d6d6692a-4644-431b-b500-ac8101a95fb5", "comment": "Malware payload (Mirai)", "value": "1e95bbe2048962ab3156987eae03a024", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884511, "uuid": "383b366c-55fe-4bde-af24-7af0562de464", "comment": "Malware payload (Mirai)", "value": "76ce0599a41bbf6db0a214a95516a7c96bbf931e7610be634a88ca315c4d928d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884511, "uuid": "6adddc51-ff7e-49fd-9da5-77a4dfb884a7", "value": "T19BD32A06730C0A47D2632EB03A3F67D197AF9AC121E4F640355FAB8A95B1E335586E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884511, "uuid": "69ac9c2f-5947-4107-9cdc-b8b0227bf268", "value": "1536:troGHNTUZNOlIBUiCxfytmtewMDNna/w4o7lbEJvAhh3rp+JuQfqAg87G3p:3mRUiCxttqCwZ7lLhrIq3p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736884511, "uuid": "21782ef5-f9a0-474f-abe7-af974968fcf4", "value": 134036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884511, "uuid": "00d79588-06dd-4dd0-b7b4-f05494c372a9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76ea1ffb-d2b1-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736884511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884511, "uuid": "bd9338ff-a006-4ca9-915c-3ea35704db42", "comment": "Malware payload (Mirai)", "value": "8a2e5a25555ab1bbec2725a203a31cf7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884511, "uuid": "84c17eda-81c0-4c2c-ba14-d0c7426e7a1a", "comment": "Malware payload (Mirai)", "value": "fadf0a909a483407f8788fca492efa4a447a99d8a4e907b4dd23c64372b8d02c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884511, "uuid": "129349e8-09c9-459e-b027-309178d1c351", "value": "T16A04B719AB510FBBDCAFDD3702E90B0139CC955B22A93B363674D528F54E50B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884511, "uuid": "d6f7c208-838e-4181-a051-8da9f9c55483", "value": "3072:nKpzGJeNkSfcQqmav8SqaRVlnYz65sVt:nKYJeNYQqmeqavlg65s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736884511, "uuid": "f3991b77-35a3-4a49-9ceb-742d0662ed17", "value": 177760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884511, "uuid": "d15bec74-9491-424c-aa84-0653fdf6f582", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "770e034e-d2b1-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736884512, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884512, "uuid": "ff6d96c4-094c-4aa7-9d03-6855a4fbc306", "comment": "Malware payload (Mirai)", "value": "11aa996f406e0926775479effeca2e8c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884512, "uuid": "ee5a5696-6a34-4ba5-a88b-13c72aed4096", "comment": "Malware payload (Mirai)", "value": "681a7f122cdc2aa780982d432e27a61489dbe1bdf5ff8ec70c96e9f43c9ae735", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884512, "uuid": "321529d4-262b-4c68-9792-5adc15499a16", "value": "T1A504881D6E228F7EF668873147B74E25976C23DA27E1D640D2ACC1106E6029E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884512, "uuid": "3d147614-855a-46f4-866d-5a0398e23f9d", "value": "3072:jg57RK7LHZwbq1YSBan1yvbysxr1uGSmI:jglRK7LHZ0Bqyy1BSmI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736884512, "uuid": "6941bdd7-61de-421f-8c21-874c91eb7ce4", "value": 173888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884512, "uuid": "019edf1d-221c-4fca-874e-0c4a5d6addd6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77203b55-d2b1-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736884512, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884512, "uuid": "ee0a71c9-e6fc-4433-af75-bde90b6c7fb1", "comment": "Malware payload (Mirai)", "value": "4a936a4a005b5d63f0ab46690b6d221f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884512, "uuid": "3af7f351-93b0-4fd7-bbd4-3011e6ae8731", "comment": "Malware payload (Mirai)", "value": "4789d2c6004ad857f5f1f54128afc16a2db2f51887815eb8e0de18ce171bbf9a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884512, "uuid": "06f00544-fc98-4a4e-b696-73e4e659d7a3", "value": "T1EAC31B45FC405B23C6C612BBFB5E428D3B2A17E9D3EE720399255F60378685B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884512, "uuid": "301abdac-865e-401c-9e88-c20e8def33ac", "value": "1536:p/Ka0rG5yC/cMChygtJOBdWFAcJX4VlgXTAXYFkWUGZrSo51WhrV1l3GwywEReQD:ZKaprMh7nOXWFh4UXcYFkWpZlvWNUmz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736884512, "uuid": "40cfbf08-1060-4c41-abb7-f22876ae45ca", "value": 129824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884512, "uuid": "356f101e-b693-4fd7-bf05-5b70a45a994a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ffcae995-d2b1-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736884741, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884741, "uuid": "d0465530-9dbf-4862-b49c-8312b9910751", "comment": "Malware payload", "value": "0a445b36236c8f54b839c10a27e3335b", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884741, "uuid": "73f0b255-a608-4b5d-8bce-2d37d87cf50e", "comment": "Malware payload", "value": "a3b3193b0855104d39bf755a037ca5554741116bd0ff852086c7f871095fbf5d", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884741, "uuid": "c2d5dbca-48fe-4dd0-b00e-85ffd6a8742a", "value": "T19753F97766623E0D9233480CB8C5B6C87718C453D4075AEDE9BAA62CC3CBDC691727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884741, "uuid": "961fb845-1942-4cd9-a2d9-afd79e1a7066", "value": "768:aA1fh41SnvHgRNv+f5AfpUxnHeob4f1u0eJwO0H+UJF/t9QR1X1t1RB1pydP2sAQ:aA1fh41P6n2vQR1X1t1RB1pydO1a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736884741, "uuid": "8f57cb3e-da84-4da2-8a92-6dbe9270eae3", "value": 64450, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884741, "uuid": "52eb8b6c-5a73-48c3-bc4e-e90d0a623771", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "914b1428-d2b3-11ef-856f-82aee05be84a", "comment": "Malware payload (Xorbot)", "timestamp": 1736885415, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736885415, "uuid": "b8e678ca-c124-4cf4-8785-521bab23c2b6", "comment": "Malware payload (Xorbot)", "value": "a8254ace58cc01bc682a3efc57f4073c", "object_relation": "md5", "Tag": [ { "name": "37.44.238.67", "colour": "#c4bd8a", "exportable": true, "hide_tag": false }, { "name": "37.44.238.75", "colour": "#3E8279", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736885415, "uuid": "019c6f3a-ebc5-47aa-b7da-8f90aae62acf", "comment": "Malware payload (Xorbot)", "value": "d5da616ae98aef0ef11826ab88b34e93cbfbdaedc4e0aa16d0ff0153fc7ebb13", "object_relation": "sha256", "Tag": [ { "name": "37.44.238.67", "colour": "#c4bd8a", "exportable": true, "hide_tag": false }, { "name": "37.44.238.75", "colour": "#3E8279", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736885415, "uuid": "d272efa2-e70b-4c38-9194-de5d5127f5d0", "value": "T1EA22B0D4015916265DF48E1B792A0CE12958BA846CDC4D5CDCC825F89B0EFBF30E7E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736885415, "uuid": "504e26fe-f7a7-4cb9-ab06-eceea304e21b", "value": "96:Yi6tLws41+1u1vIUfCaXDLIEILcgGL5R9V1yU+u9A8uKCsLO+LvXnvLvHlFGLO+C:CsKavIUL8C0w1KavIUJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736885415, "uuid": "97744471-1987-4a50-8350-cbd97caf7202", "value": 10830, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736885415, "uuid": "8fbb2002-1460-4d88-b6ac-8b7808b1e259", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b5cad76-d2b3-11ef-856f-82aee05be84a", "comment": "Malware payload (Xorbot)", "timestamp": 1736885431, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736885431, "uuid": "66f074f5-9d09-4c95-8e51-eea2e7337d77", "comment": "Malware payload (Xorbot)", "value": "1a26c79c3b5f778818fd291ecd8db5c2", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736885431, "uuid": "22a860fa-463d-4aa4-8662-df22bb7b8a00", "comment": "Malware payload (Xorbot)", "value": "7abb572423b3016d963f76df1ef896f929d5d6b055e822d76a68aea6e0655faa", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736885431, "uuid": "ddd0237e-7e82-485f-8af2-d8f5092dcf9b", "value": "T14B22EDD603C46235DEC445966A26C681F541E2C4F8E72FCCD4CA4AF47308F7AB8A6E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736885431, "uuid": "a8232c33-2ac0-47a7-b66e-1a017f1ab3c7", "value": "96:Nuv/vIU6DhLEX7XcYzyOzhYXcYfvyrXuEuv/vIUn2v+:Nuv/vIUKhLEXWv/vIUt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736885431, "uuid": "9ebcffd2-e4cd-4090-9a9c-db1b864dec6d", "value": 10578, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736885431, "uuid": "cba0d267-21d4-4f06-b910-f4ce445d8554", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "110bd6f9-d2b4-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736885875, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736885875, "uuid": "9c369b8d-97d1-454a-a38c-3080cec41d4f", "comment": "Malware payload", "value": "47482139eba7ae077b83ced0eb605689", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736885875, "uuid": "71708ac6-1423-4e8d-ba12-75dbe0091f84", "comment": "Malware payload", "value": "79d641b325fd13f8619fb640f340f1956a2017d1bd3f45819e27cec619255460", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736885875, "uuid": "9dfb0373-0d49-468e-ae12-f04da6c0f04c", "value": "T1E28533A3DF67ECDCF01CA13AC07E078FCE623A355D7ACD201B9511218619299D9E1A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736885875, "uuid": "37a849f0-25d6-4ce3-b75c-b300e31d11d7", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736885875, "uuid": "be855de3-4e17-4e70-a583-8fe480240283", "value": "49152:Kab8Pb90RGO4/9x40bNLW3HAYhR8sM2OqGIGSu:KaIW4/9xPwAOM0av", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736885875, "uuid": "b693d616-2c33-462c-86c6-93245b6c03fb", "value": 1853440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736885875, "uuid": "ff2e391a-621e-4974-99a4-5ce27b91fd99", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6080c97-d2b5-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736886308, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886308, "uuid": "f1180a39-e3c1-4bc0-9725-0c798d60a56c", "comment": "Malware payload (Mirai)", "value": "707e3a4e47b9b44ebdf722b7817d04ea", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886308, "uuid": "746d3b80-512f-46cd-a04b-c4662664a54b", "comment": "Malware payload (Mirai)", "value": "e4bc151bcdfed7bb506ddb88af171a4d87736f84b7d58cb6dcd962c7ffe6fd57", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736886308, "uuid": "7c618eb5-7a16-4d79-b7eb-05d0e40e846e", "value": "T1C0D32A07730C0A47D1632EB03A3F67E193AF9AC121E4F640355F9B8A9AB1DB25586D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736886308, "uuid": "a3595e9f-4647-410f-ba92-70845b33bcdb", "value": "1536:MTOpf0sDY5Myu2CaNnZIBUyKxfytvtewdyHFaawIQ7lYsJvAhh3rt+iv3q+93877:v0xxu2ClUyKxEtDGwx7lWhpmv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736886308, "uuid": "ac718a67-186e-40c9-99bf-e2ebe9f1d5d8", "value": 134036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736886308, "uuid": "0a71feb9-7fa5-458d-bba1-f64ac5979130", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a60e99e4-d2b5-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736886308, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886308, "uuid": "993a9412-23bc-4c04-9d69-a1f95d9356b8", "comment": "Malware payload (Mirai)", "value": "a06ee3adaeb4ff8529e90512e4d71abd", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886308, "uuid": "399fba91-f20a-468f-8ddc-6f1d52ca3e40", "comment": "Malware payload (Mirai)", "value": "ef563c5bddebae953ec24ab3e1eda3be1dbb0feee05aaa8a821547d9ef6e696b", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736886308, "uuid": "4b830ec9-5f77-4da8-a81b-629afc170fa9", "value": "T107934BC7F643D4F6E85701B1603BA7325B32E1B5112AFA43C3686932EC925D1EA16B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736886308, "uuid": "68d7807a-3ddb-4115-b285-f004466056d1", "value": "1536:MaCQv3NdYtyYgeUrNzHDfvMXygEjnNcef4SBLkP:Mafv3NdYtb9UrNzHDHPgenOMlc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736886308, "uuid": "7c31c9d3-1ef0-42d1-94df-040ffaec0559", "value": 89480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736886308, "uuid": "842953b3-ea95-44f8-be43-8323d0e39381", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6100c47-d2b5-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736886308, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886308, "uuid": "520ea45a-9109-4e16-a69b-6294a64501f7", "comment": "Malware payload (Mirai)", "value": "5f37b91921e122b8607dc147ba6f1c22", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886308, "uuid": "222a7c1c-4b33-4c0b-adee-bc3fac21587f", "comment": "Malware payload (Mirai)", "value": "f8ad02a896599e6ffe544590585622a995c4c80cd18e0cd29e8fb1444bbe1c44", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736886308, "uuid": "70076eef-cc1c-4229-af53-b6cc6ede7b1b", "value": "T129E3F947F8819B11D5D111BAFE1E134E37131BB8E2DE72029D246B647F8A8FB0E3A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736886308, "uuid": "a588e5ed-e5e2-44e5-b177-5b5a7f0567d2", "value": "3072:DFietGULnrMxXJaDYzZa6V/jdtiv/5MY:pietGwgxXIDYda6+v/5MY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736886308, "uuid": "275f2d55-f5da-46ce-abfd-cab9ac958aa3", "value": 143388, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736886308, "uuid": "6370c7a0-c12b-4fa1-9d82-e73df462adfb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6121c94-d2b5-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736886308, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886308, "uuid": "d18c6aac-c79e-47be-80a7-0de04b85afc2", "comment": "Malware payload (Mirai)", "value": "30cf23aa5da7f73cde6cc4d767c15503", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886308, "uuid": "32438200-f89d-45d0-8700-536bad6854f8", "comment": "Malware payload (Mirai)", "value": "2c17d2dc840a0239ad7df9a2e867f2fa279508fcf769c85761c4f4c15b908b2b", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736886308, "uuid": "c7caa013-8c7f-4d3e-b104-028d8e48874d", "value": "T1FDD3F946F8404B23C6D611BBFB5E438D7B2A17E8D2EE720399255F203B8799B0D375", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736886308, "uuid": "69aa291f-2a96-435a-869c-e0889fce0a7a", "value": "1536:fKdGXBzHzt+0vXMDcQb8eUEF8VA5c94Vs9ImTR1/11KXB538r8VBIbArlKDwywnO:fKERzo4lw8Vv4stL/11+BKocb4del", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736886308, "uuid": "cfbffbdf-cc8e-41f6-93c0-104516245ac6", "value": 133920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736886308, "uuid": "0460b989-4e74-48c1-b0b5-b551c6e77d93", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c87d3c65-d2b5-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736886366, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886366, "uuid": "db163003-8193-4c6e-9fdd-b344ff58570b", "comment": "Malware payload (Mirai)", "value": "33be94c493ebae082098a6b804ecb2c9", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886366, "uuid": "33b31b2a-1e18-4f4d-be41-6dab5c093d6b", "comment": "Malware payload (Mirai)", "value": "479d69877a54149a02a785a931e2e320d7fd77fe824ad01b7e6104dd7ea74327", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736886366, "uuid": "3b14cc3a-0cc7-4872-8a78-bc9544db31e7", "value": "T110041946BA404B13C0D627B9B6DF43453333AB9497EB73069528ABB43F827DE4F229", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736886366, "uuid": "440644c6-3b58-4f93-bc52-9ea49fe2ceae", "value": "3072:OoPdgICQgvd2e1aJIcumVMXf3Wel+3yQBmiomM/R9du7Ln:HPd0QglT1aJIcumV8vl+3yGcmM/Ru7Ln", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736886366, "uuid": "5ee41e5d-36f6-4d9f-94ae-f0b2d804a576", "value": 180991, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736886366, "uuid": "534e1228-f443-4707-9066-2515a3d5efdb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8a27ec1-d2b5-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736886366, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886366, "uuid": "2155a466-9484-4090-968a-294172c76b27", "comment": "Malware payload (Mirai)", "value": "f7e5c8372790e0bf8264e9c6c22080b4", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886366, "uuid": "7dc809e1-c1e7-4b09-b414-27d6f8ea77e9", "comment": "Malware payload (Mirai)", "value": "550fcf6ea1839ae38eef6860340ef03dc20daf0acd9cb6d8d094adde361fc162", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736886366, "uuid": "c1340d19-5c82-4a4d-9a0e-f23d8f97efea", "value": "T148D33B07B4C180FEC4D9C1744B9BF73BDD32B1A95238B16B27D4AB222E49EB05E1D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736886366, "uuid": "de7bc674-24fd-4fee-8635-7b7444a7f6e2", "value": "3072:+CUbNL5CfgnDKaJ3k1rRF9XUfbBqagQyxz/8p0MUQ0/y:+CUbNL5ConDKaJSkkxjXQ0/y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736886366, "uuid": "eac9b3e8-5c06-422c-bae5-ce89c7095973", "value": 139288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736886366, "uuid": "a865ee2e-d4b8-49af-a5d7-bc3f49b6f904", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a633effd-d2b5-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736886426, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886426, "uuid": "b46573f0-9a59-478f-baf6-fe2908e16320", "comment": "Malware payload (Mirai)", "value": "87c5bc372d79d1a54f0f11b6453c4944", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886426, "uuid": "13990a30-646e-4ca7-a71d-11bc05fcf376", "comment": "Malware payload (Mirai)", "value": "be6c82246a1d6f42d46efe087e1b290554c786398ed8caddfcd0b258835ad912", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736886426, "uuid": "02c4aaf9-ddf7-445f-be2b-c360e6f2aa10", "value": "T19304885A7E128F7EF668873047B74E25A76823DA27D1D640D2ACC1106E602DE641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736886426, "uuid": "1eac4803-f791-4f61-9561-04499a29993d", "value": "3072:66uhuWP61zDfkf2j+dnx0bNva0ao0qDsDdR:6FA661Bj0avUorD6/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736886426, "uuid": "482c6b60-d778-4535-a58c-87991ed39279", "value": 173668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736886426, "uuid": "900ab300-3942-4bb6-b55f-4537a53b33e0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec67fc1f-d2b5-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736886426, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886426, "uuid": "3f997cb4-04bf-49ef-82b1-2a1993424c12", "comment": "Malware payload (Mirai)", "value": "b431636505906bb9b4c94f21dfd21e36", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886426, "uuid": "3638cc1e-4aed-463f-9345-4b4d90bab98f", "comment": "Malware payload (Mirai)", "value": "d21faf2989ce38f77d96951777e4cc3bdc6408dbe1edb589ee2b918c1fca0462", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736886426, "uuid": "cec52809-3180-45a8-b387-dca71c26865c", "value": "T109B338B3E8256F58D655D0B0B0A48F792F63A59082871FBE19A6C2B44C43DCDF605B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736886426, "uuid": "9907e281-8d51-4af7-a830-9e3d150c438e", "value": "1536:tfW/FBgLYZ/jLDpWtUVGmC7DEKQRN6Sy62h9BOW3EKIi6MY7R:tedBgOHTVVWrQO62pOWUKI5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736886426, "uuid": "4176ce19-1490-4de3-b7c4-208237c370e7", "value": 117568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736886426, "uuid": "489d30be-8371-4b35-92eb-d8e4ddfe60f7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c88720f-d2b7-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736886910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886910, "uuid": "cd93262f-fbf9-4057-92a5-bad14f8c38e5", "comment": "Malware payload", "value": "5f235e9bf24b685ec6092e996e02189f", "object_relation": "md5", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886910, "uuid": "b8d12a95-99c1-4e55-9479-549dac65bd4d", "comment": "Malware payload", "value": "88996d47655243b3a2fc1062f99a0e5e6ff6ea9623d824df434eb72fbf274c73", "object_relation": "sha256", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736886910, "uuid": "cd724a11-44c2-473a-824d-596280c8af51", "value": "T19AC401321547BDCE8BBF1F49E98429A01C586177AB448094FDC907B952EF9208F7DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736886910, "uuid": "9a19bf15-4f34-4983-9045-fd7aaa2af5b3", "value": "12288:El1fOG2gogy1+tARiuKIGK31McrhU5fYyYaQ:m8G2Xx1+UKcrGgy+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736886910, "uuid": "4e93595b-b974-4116-b042-e30bf7196df6", "value": 544641, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736886910, "uuid": "338a113b-2d33-442f-8d82-1b7c470a7c8e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96cafd8a-d136-11ef-856f-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1736887990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887990, "uuid": "70150c1c-87b5-46ea-a37e-2921138e8f4a", "comment": "Malware payload (Gafgyt)", "value": "716acf3098d97f869e2a9c3966ba156f", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887990, "uuid": "6285ec6a-d9eb-4054-8bd9-e89f4fbd766a", "comment": "Malware payload (Gafgyt)", "value": "8b3196459da36aec40c71203ce271a58279ca12a2f162f31a5bbdf154d3ffb5f", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736887990, "uuid": "6504ac5a-2882-4a8d-a1f9-fb773f55e00d", "value": "T142A137EC39125BB60D51DF1DF2238D617882DD9506A08F986AAD31FCA8BEC48E9345", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736887990, "uuid": "a2dbab13-a75e-42d4-9fbd-957b98e61364", "value": "96:1xbhkuLkGcKzXl5HtY6zkKgS3XP6ltXhB2TFv:dXnXl5HtY6zk5S3XP6HXhB2TFv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736887990, "uuid": "0450ebe4-af69-440a-996f-905813274633", "value": 4670, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736887990, "uuid": "f666c614-87eb-4891-afd8-ae7af7d8b29d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a2669ec4-939b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736887991, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887991, "uuid": "cec8a6f7-0fc2-49e2-92da-365b40fe621f", "comment": "Malware payload (Mirai)", "value": "353a49ca2c9b8b35fb036b2de1587fc4", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887991, "uuid": "a1aa8669-5c0f-47df-aa4a-4a62e583c7cc", "comment": "Malware payload (Mirai)", "value": "cee029b1438797b749a740be099fa82cffbbaa7a7507476f995c95a2d35a23d3", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736887991, "uuid": "3c6b930e-10a8-4b87-9f67-dc06b135434b", "value": "T14093E605BF510EFBDCABCD3746A9070135DC941722A82B3A7974D928F54B64F1AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736887991, "uuid": "56c93121-0474-4900-860a-1a4c1fb8fa63", "value": "1536:GJTjy914iDyIV6n30taWKqlpbfc/SLuZ++5+BJoK+mcS/:GJTj614NNczc/0ublmx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736887991, "uuid": "0b4b711a-97ed-4b30-8058-2890f756fbe4", "value": 89400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736887991, "uuid": "ae8b7be6-dde6-4a9f-a634-17d3a6b1d22c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ce4c23a-cece-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736887991, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887991, "uuid": "2f5e86dc-57a8-44de-bc49-00775cf84aa9", "comment": "Malware payload (Mirai)", "value": "8475e38d25fc95b20daa1eb1326533f6", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887991, "uuid": "56558775-9de3-4577-9754-0195efcbde79", "comment": "Malware payload (Mirai)", "value": "44f84493e9210c57cd71b7cdc2d9ad18360574746754683361e4f99379eb3d9b", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736887991, "uuid": "f4d868b5-4b6d-45c2-8a53-a838f7b88870", "value": "T18B332985FD819612C6C112B7FB6E428D372A53A8D2EF7303DD2AAF61338795B0D7A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736887991, "uuid": "47ed29f4-6967-4c55-949e-58e636eecc7e", "value": "768:a8H/19STmiWBOfnDQ2ax8h4KngUQoCYpchIHL3C6TMT2VvxQHjBm1v2q1o31/I:vfDImb8aKx9chujIT2VJkBMuqil/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736887991, "uuid": "e1576939-25bc-47c2-a51b-e61569d2a8bc", "value": 54644, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736887991, "uuid": "7335942c-5e9f-4d5b-85d2-5cd084375a8a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "849a6db8-cece-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736887992, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887992, "uuid": "ee0aee86-b080-4c4d-b2c8-b94e2d4ac41a", "comment": "Malware payload (Mirai)", "value": "0cdbca5cdabb90b9205a6977fe54543e", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887992, "uuid": "773b0030-2ff9-4a4d-886e-671b5f3b5d92", "comment": "Malware payload (Mirai)", "value": "5e06ba9a4218fb391ddcf5e29561f4d5ccf1db3c639ff3ee449b13d2b5622f2c", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736887992, "uuid": "825d27a2-19c2-42ed-b9e9-d584672a90cc", "value": "T1B6333B42B30C0947D1A36EB0373F57D193EBB99121E4E784750EAB8AD272E325586E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736887992, "uuid": "43f8f74f-c2a9-4f57-8788-f37d8ff00227", "value": "768:vC3TynVxYwZo63ln2tQL1LR9G9TlZp7q+ZJIt+TQFyatp0WvIUz:K3ennMkZd1bGF7p7qoJIMTzaT1vb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736887992, "uuid": "361274d8-d012-40d1-9ca0-f82ba0784a94", "value": 54744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736887992, "uuid": "588861c7-5f99-497a-bc3a-26dac2e00376", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "616df820-cece-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736887994, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887994, "uuid": "72dadd9f-423e-4e22-9b62-2d9988cc336d", "comment": "Malware payload (Mirai)", "value": "03a971f8e22c53168040e9c828dfcb05", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887994, "uuid": "1d2a6f14-0915-4cfe-b284-4b752c20c7d0", "comment": "Malware payload (Mirai)", "value": "b0ad949d994b83581278d9a70963d3e6637a1bf35d6faa9f421eefbf84c30ca7", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736887994, "uuid": "1a86dc2e-9b07-4aa7-8eae-42578e99e4c1", "value": "T1D683F806A9819F12D4D721FAFA9F414933136F78E3FA7111DD20AFA063CA9DB0E765", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736887994, "uuid": "127b41f9-79bb-487f-8eaa-b11b49003ffe", "value": "1536:p/onEhGtfNVsBNa2PkIQCJRlunWlouiSSS+9kEY7olqC:fG9DsBNaokIQCJgCj+9kEflqC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736887994, "uuid": "08ae23af-50fb-4fdf-9de3-ef2e5ae308a8", "value": 81788, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736887994, "uuid": "3f66b0f2-556f-450b-9793-4225901978c6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "10fe7281-d2b7-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736888051, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888051, "uuid": "15dac582-0151-47fa-a418-8c69729df264", "comment": "Malware payload", "value": "0eb842f096ca82b3815185341065e476", "object_relation": "md5", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888051, "uuid": "9e9d2557-868c-4c68-9a2e-9fae4ed7b25f", "comment": "Malware payload", "value": "32a0df7549dd4a5c684a7a012b7974f02ee46ce098ad0f4b4f9e5ecc45d328e5", "object_relation": "sha256", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888051, "uuid": "6da1d6ae-379f-4de7-a75d-6eb1ac44b3e6", "value": "T192063315D52E0138F3B1CA390E59C684E8231E9B3D3E79E54CEDD8AEAF71CC095987", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888051, "uuid": "83ab62e0-c60e-492b-a297-f791b456bd51", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888051, "uuid": "7ddc8535-9b1b-4c6c-b034-83418e9597eb", "value": "98304:4wj486W8R06GgLorikmROb/qLZu6yVv4HGLhuRInkjXX:Dj486ZLIiHOjqNu6yKGLhufj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736888051, "uuid": "acef61b8-933a-440f-9824-5b2dc8f2a174", "value": 3691843, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888051, "uuid": "140c2190-ec7a-4978-a3bb-9d43669d235f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1afffa36-cece-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736888231, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "6c2c1fc0-ed93-45b1-bfcf-c11a4603dc09", "comment": "Malware payload (Mirai)", "value": "99baa1011802fb8f2ca1d10dd242eac3", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "335d45ff-827d-45e0-866e-a1995288ce06", "comment": "Malware payload (Mirai)", "value": "ba56563746c147f93c337b5d789f78b5ee203792087169a4542468f3c0b0f6f9", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888231, "uuid": "340b0244-e211-42f2-85eb-f1b9ef28fe5f", "value": "T142432985BD819612C6D012B7FB5E42CD372A13A8E2EE3303DD2AAF21378795B0D7A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888231, "uuid": "57fbdd56-f0be-41db-9154-f5c11f276184", "value": "768:iRZ9UlA5sHIb1gtIKvSLIllzZgGe4glOEo3LJmRbTs5F0kHMXASVVAhIF4myH8V8:CUa5Ccg9vS/4n1AbQ3EXASY84Dc1Pvv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736888231, "uuid": "4bed70f0-951c-45f3-ade3-6b219a88e8af", "value": 56924, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888231, "uuid": "44e4f07d-fccc-479e-9042-3e2ef566dccc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "61548db1-cece-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736888231, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "cf76506f-42a4-4ff0-93dc-7771829fad0f", "comment": "Malware payload (Mirai)", "value": "5704634bdbb0bce3df307f74206adb02", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "e69768dc-bc6f-4842-acab-32ca0ba81bf2", "comment": "Malware payload (Mirai)", "value": "877d97dcbba6b0293dcba297f4db783bb806b23aa2146015526fa52cebc8713e", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888231, "uuid": "d7ad56df-9bcb-443d-aeb2-571628902c92", "value": "T1E963195AFD819B11D5C112BAFE1E118E7313173CE2DE72129D24AF24B7C696B0E7B8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888231, "uuid": "89c6e6f8-a79d-43fe-865b-1d9d8757511f", "value": "1536:QInBCpk3iOrouPxgTau8LMQ8MNi0j3gNz5RYo9:EpiUwxgTaJj3gNzDr9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736888231, "uuid": "3d231999-f95a-4278-8b11-6cedd08735cc", "value": 66932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888231, "uuid": "40210569-784b-4da4-ae8f-bc200ad11098", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d2995de-cece-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736888231, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "41adf90a-5ea7-4245-8ba6-ba4f740ace98", "comment": "Malware payload (Mirai)", "value": "0a66722224aadf381444b782097281b0", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "3a3f3db9-1e84-48bf-a17c-c79bb2c90e75", "comment": "Malware payload (Mirai)", "value": "dfae207ddcd2e810e8c8a218ad8197b28d22042b0e49079bea967df47820ee4e", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888231, "uuid": "f915934a-e49f-4287-9de4-a3b98d558005", "value": "T1BC435B07B9C1C0FDC9AAC1744B6EF63AD533B4BD0235B26923D4EA267E89E206F5D5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888231, "uuid": "2de1b768-d87a-4d42-b86d-65e246fe2020", "value": "768:3DnsbaI1X8wDQMBnPgz5+Jww8oqLg/F4s8S/ybS1P7x9XJzLBTHKt85BdRwMZP34:ImaXnQMA+JzVWc3/uS1t5THKmTwMl5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736888231, "uuid": "e545c99b-b619-4528-b05a-298edfe221de", "value": 55168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888231, "uuid": "c89716dd-264d-4bf5-974e-1f0bb7e8cc70", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90f69c81-d2b9-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736888233, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888233, "uuid": "511d34b0-5b9b-4043-aba6-4b06c0d11b0a", "comment": "Malware payload", "value": "ecffd6580d4155911f21939788c98a08", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888233, "uuid": "12c2684e-4549-4fe0-9daf-1a61c88959c0", "comment": "Malware payload", "value": "b96697c4740f52ed87b1a986dddb5dd6ab8dfc59368394f659c82bd2b3c44aa4", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888233, "uuid": "e6ee6ce6-5f0d-46a4-aeca-f5b84bcc5ae6", "value": "T16DD02B5E8156052B1C458FDCD1330C21FB29B1C514731FA9FF4EB17F7799820A4A16", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888233, "uuid": "10190895-2c70-485c-9cc2-e9f1b14a9309", "value": "6:h0J8JaiGHMFhHoFhExWY3Fqj/q4YFNT5NW:iGJ/GsFhHoFh+WfDYjS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736888233, "uuid": "3ba28ec3-7f5e-4435-80ba-4fcf85334355", "value": 290, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888233, "uuid": "291dfde6-b80d-4043-8170-bc58eb9665ee", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "406af070-d06e-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736888351, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888351, "uuid": "4871b487-44ee-4bb6-8823-7e5ed9646c02", "comment": "Malware payload (Mirai)", "value": "a167173ea973d452ba2c2c0a48dabb58", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888351, "uuid": "a8b8d788-fc16-4349-a914-313281d9cf58", "comment": "Malware payload (Mirai)", "value": "861fe697bca9d755c6148b63b8de64d1cbb54930b0764e584a82e4a43bd242d9", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888351, "uuid": "ce4f347f-7fe0-4098-b2d0-58be0538d7ad", "value": "T1B9631756BD819B21D5C512BAFA1E128E3323177CE3DE73129E245F21738B96B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888351, "uuid": "b00e4d4f-2f85-4394-8001-abef28f585d0", "value": "1536:rAnMQpKhIobD3cHL2WTaaEjWmiQTMvi7FVcf5RYVM:Qscr2WTaakHFVcfzgM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736888351, "uuid": "53d88533-9f6f-4afe-96e2-01b617924ccb", "value": 71632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888351, "uuid": "ac86e21a-3cfd-4960-b6a0-e84bea3b3617", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e8893e4-c060-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736888351, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888351, "uuid": "1b4aeef1-a8b7-4e37-9f65-a79588c2181c", "comment": "Malware payload (Mirai)", "value": "c8d547e66f4a643aaeae42c6c9e8f1b0", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888351, "uuid": "cb04d5ed-d069-46a3-b199-f48b214cfb0c", "comment": "Malware payload (Mirai)", "value": "3851eee22e73e59e60d2d0e5bb46227538a26e24f4fc47312543f0a755c875a6", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888351, "uuid": "bb94b299-ebfc-4a1b-b4d3-d59d4ec215e9", "value": "T191A102DC3A214B360C52DF99F263C662704ED4C60EE14F9965AD30BCAAFED88B1205", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888351, "uuid": "fc5a57cf-8509-44a8-a7ab-777133038957", "value": "96:1xelxBLfJcJKk5KN99z7NgF2/h19W+LTFv:GN3k5KN99z7KF2/hHW+LTFv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736888351, "uuid": "a0043b49-0a3b-4e6d-a3cf-cea919771e8c", "value": 4670, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888351, "uuid": "9e62ba96-9097-4208-a470-9dad915121e6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70c85a8c-c06f-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736888351, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888351, "uuid": "d0a2fd95-f898-4b64-85f5-77ed82273abd", "comment": "Malware payload (Mirai)", "value": "f7e469878f0968d87b1877b090a1c347", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888351, "uuid": "faf34dae-0c9a-4868-b747-96171cf66e0a", "comment": "Malware payload (Mirai)", "value": "79c6046e3140c858aba41867e594a331596858dadd9dded3f901a2d6e5c3078f", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888351, "uuid": "7c5b14a6-a4a1-4afd-94c5-e4c886971f93", "value": "T1B9D02B6ED503C0FF60008C99EEFDF898BA4F2299078F02086A7D41139DE4CC870506", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888351, "uuid": "9afba707-6a96-4d9a-83f5-7adba505fc6e", "value": "6:/VJq4P/rVYsMPbl3F5kJVKE6LsVKE6NiVVNDV2uVf6vC5:/VJZjYyg5sguThb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736888351, "uuid": "cb3dd921-1abd-44ed-91b3-f87f9c0eecb8", "value": 284, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888351, "uuid": "3bc75db3-4fb3-405c-8a49-719383f6f962", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ff8e3b1-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736888351, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888351, "uuid": "647d50f8-8c5d-4455-bf3b-3661ff4f7130", "comment": "Malware payload (Mirai)", "value": "ad9bd12015b80f1bd118e04e5daa3f3f", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888351, "uuid": "de164ec7-84be-45d1-a72b-ae242a547b3d", "comment": "Malware payload (Mirai)", "value": "afc0627242198ccd0e9fc1ae99c8298d83269b5e4e98b30854168c7737f31cee", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888351, "uuid": "c9efba91-0953-434e-b4a1-13efe8d3f0f0", "value": "T10DE32B46EB818B13C4D61779BADF424533239B6593E733069928AFF43F8679E0E235", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888351, "uuid": "5c1f52cc-57bd-4d4e-b25d-8e8c0697f19a", "value": "3072:ayyJS3aJcwB0oKdgghUv07PX2QxQ8M/99Ox6L:aycoaJcwB0o+gLuPX28LM/906", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736888351, "uuid": "afc9aed2-7145-44e4-9c88-d63a748d4d80", "value": 144636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888351, "uuid": "bfc329aa-9ae3-4f28-92ed-d0285073f812", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f42bde97-a49c-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736888351, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888351, "uuid": "da042ddd-bffc-4c3c-ad69-aa429c212f0d", "comment": "Malware payload (Mirai)", "value": "c6f057c974b24f6abdac5b76b10040b9", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "aqua", "colour": "#f4dbe0", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888351, "uuid": "45a075ae-3fb3-402e-a254-e69a7f9914b1", "comment": "Malware payload (Mirai)", "value": "4e114c1111ecdaf0a7622a347c025cd3f9584be170b129113d836a2a5a7c169f", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "aqua", "colour": "#f4dbe0", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888351, "uuid": "da574c83-916c-4db1-a350-362f10d2a83f", "value": "T1B3734B42B30C0947C1A75DF03A3F17D093BEAA9121E4F784655FAB4A92B6E321586F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888351, "uuid": "7f47fc67-f423-4efa-b330-1b17edbe4565", "value": "1536:/N1w60+jmqw2+GsHimydhuYmXHeWOaIq1+Vrq/bki8:/g60L6hlE1HeWlIjC8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736888351, "uuid": "9d87ccca-5943-4447-9963-b064094327a5", "value": 77536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888351, "uuid": "4d694d12-4610-4c6a-b102-f02aaba8b78f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e620646-cb41-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736888351, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888351, "uuid": "e578f84d-6604-4564-a4cf-e7f2a41e64e7", "comment": "Malware payload (Mirai)", "value": "8807aeb90c4c3cb0a0d353ea635c6697", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888351, "uuid": "989165c6-c5e5-423b-8529-6d0dd53b730b", "comment": "Malware payload (Mirai)", "value": "efaeb6776bc2ba6161a32e3a387c6876ad8c7dd8ab74cd117af2b9b9ea0e8bd0", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888351, "uuid": "522bc3d1-36e3-4167-a127-2dd8b9123fdb", "value": "T101C08CEF242020808048EC8C64EFC32E648AC3C62F810B8F7A9C2822C8CA800F028E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888351, "uuid": "dcb8f062-05b9-4f68-acf4-b75982983124", "value": "3:cSXeMEd9EKIMV7GBzSEyLTUWMnry8HDjeMEd9EKIVaBzSE8eUxKnr7Vv:jXFE8KIUCIkdHXFE8KIVavnVv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736888351, "uuid": "8db9d6ec-c826-4dc5-bf96-6474b96580bf", "value": 150, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888351, "uuid": "268083f9-8df1-46c2-af8b-99a719a662b6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6acbd720-c906-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736888351, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888351, "uuid": "e35196b7-c20e-4281-904f-71b1f384643a", "comment": "Malware payload (Mirai)", "value": "b82b978ea5e5f7b8c64c8e4b49000555", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888351, "uuid": "9ba69092-133d-465a-b279-3ba88e121b15", "comment": "Malware payload (Mirai)", "value": "a2e42d299a0c5085ea3d162ec0b0696accf5f08b935773bf75c383bd552fa6cf", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888351, "uuid": "9df7bcb7-cac2-400f-a868-f41ab033917b", "value": "T1941177CFA5116946040EEE4EB6A7C66A7055C5CA1E8B0FCA7E9C083D84DC918B435B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888351, "uuid": "252d5e19-d898-48ce-925d-170848b59fef", "value": "24:EeJG2sgXsPAj+zUv+QNI7O7QK4/+t9DtK:EeE2sceAj+zUv+1O7Q5/eZK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736888351, "uuid": "ce94941b-6a66-43e8-94c8-f800cdbccf2c", "value": 870, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888351, "uuid": "2875e937-d474-426c-9f5e-de3164776116", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bfe0ee7c-d066-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736888352, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888352, "uuid": "5a084578-a7d7-4a37-b4f9-9b8bf2752b70", "comment": "Malware payload (Mirai)", "value": "3a6cb65c24f5154fab549412228dcef5", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888352, "uuid": "938f4691-cf54-46b7-9b6d-65dea5299d90", "comment": "Malware payload (Mirai)", "value": "9c6902922ac43c7dfcc0d2a98cfb22cdb82b1245cf49df93dc3dbead395075d6", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888352, "uuid": "6828936b-32ea-4456-92fc-9821b29913f1", "value": "T155532A91FD819612C5C462BBFB5E428D372653A8D2EE3307EE215F21378796B0E3B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888352, "uuid": "b6594e7a-2e54-40ac-a310-729e70cb3349", "value": "768:79r4UYI88AF5yCoYTXVf76z3l8NuEEJdrvMlrHXTqZpOPLBxMx8wSCb18+wazDwt:F4UY75yw6zqaqRHeZpOPVk82bXIg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736888352, "uuid": "403f0cd3-de81-4854-bd8d-32ce7fcc86c0", "value": 62916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888352, "uuid": "d9f301db-228a-428a-b87b-ab6258719292", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00d81984-d133-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736888352, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888352, "uuid": "9dd9417c-f5f6-4012-80be-432f83687691", "comment": "Malware payload (Mirai)", "value": "d1ca09c1fa57be1e6475dbf2313f2254", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888352, "uuid": "f3161ca2-3f60-4272-8893-01a230c665bd", "comment": "Malware payload (Mirai)", "value": "ca15504587524739d890d2410fb64a336cef4d393a725373a169b87bfdc25928", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888352, "uuid": "7f8c22e0-5748-44c3-8807-711754a66813", "value": "T1F711C4DF12A8C87624808DDDB5D38B34798DC8C61EC68FCA648E07A6A5CCD0C7061F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888352, "uuid": "3237c380-7d5e-4501-98fe-8591c857aa61", "value": "12:3rWKIw+u5ZMoOF7+MB05x7P4DNksNZdIjDPdIMDNksNZlPmDNksNZYDPFDNksNd:yRk5zOt+MB0OkUfqnkU8kUK3kUd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736888352, "uuid": "ad66f2ca-5716-4d0d-9394-706a134574dd", "value": 938, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888352, "uuid": "d0b892b5-0d25-488b-b9ef-96f4bab974e5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ab57c11-c2bd-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736888352, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888352, "uuid": "c013fc14-9660-4740-a386-a973eab1975d", "comment": "Malware payload (Mirai)", "value": "ceb5f52262e348be28af48811123af4e", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888352, "uuid": "9866364a-4f16-40f4-9734-676235f1cd7f", "comment": "Malware payload (Mirai)", "value": "a32a04f697a396c4d3008947a605c70b6a139d738fc4665e69457b219de59922", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888352, "uuid": "c0586565-b974-4b74-b64a-08d08c466284", "value": "T1C6532A51BD829613C6C452BBFB1E428D372713A8E2EA3307EE215F21378796B0E776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888352, "uuid": "d664b9e2-3d75-4e13-9e18-1e3cbb7973aa", "value": "768:Mc/ULH9PN8VzzeMD1uF4rP3OB+fNu9qErUDM8aVKhZiOjMZ/RH4q8VERewGTkvTM:TULHuzZT+BrVr8a4ZiOjwJ4TWsQvccy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736888352, "uuid": "308e0787-71e5-462e-817d-d4a264213e3b", "value": 64848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888352, "uuid": "1d7a2712-ab4f-49fe-8c39-5857ba3a9db1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68671f5d-d2ba-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736888352, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888352, "uuid": "29de0f1c-3cb2-462d-ab4f-eedecc0e967e", "comment": "Malware payload", "value": "0677f55b968ba51a2cfe1506156ed83c", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888352, "uuid": "3cda91de-1a42-47aa-add5-fd3cad4b27b5", "comment": "Malware payload", "value": "c52588041253085f9086e031d2fa14412bb1efce4bbfd64caf7c1b6a6a0ad72e", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888352, "uuid": "73dc9075-f39d-43f3-8211-cc4be99a6640", "value": "T1900186CFB1111A06040EEF4DB2A7C66D7195C6CB16874FC67ECC093D84DCD187025A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888352, "uuid": "bd911550-bf4e-4ca0-be4d-5672fed303fb", "value": "24:EeJ+724u7gXsTUjfQDU2K+QNI7YnQKVC/+t2kDxa:EeY24Cc3jf2Uv+1QQ5/q4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736888352, "uuid": "505277ee-e33f-42c4-9449-0bde0cf0cdf2", "value": 851, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888352, "uuid": "2bd9891d-9924-4444-a0aa-e455c66c7bfa", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70502660-c06f-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736888354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888354, "uuid": "48d84954-eccf-41d9-aba6-d371476e7944", "comment": "Malware payload (Mirai)", "value": "e961c29f47ebdd118ef86e50160100b7", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888354, "uuid": "313c74fb-2697-407c-9345-ea5284cd1711", "comment": "Malware payload (Mirai)", "value": "db70c1322d1da3f0fc2bc0f5c26b80977e4144a7dd79f24b95fb23740e345962", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888354, "uuid": "ddb755cb-3a22-444b-9380-007430ba0c3a", "value": "T1E01173CFB1211A06050EEE4DB2A7D66A7055C6CA1A870BD77E9C043DC5EC9287126B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888354, "uuid": "b03b940e-aedc-4533-80c6-59489cb263df", "value": "12:ESnJiAFK/XS0aN8mRXSmiMQAjS0USrqOK5XS9NIl5HLGjSO0LKT4KWSy+tqZ8SIG:EeJU2N8gXsujgUqO+QNI7+QKC/+tDDG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736888354, "uuid": "32f44f91-d90c-4d8b-a1f3-251ac15a9e42", "value": 870, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888354, "uuid": "dfdf458b-a762-453f-a44e-833db5c0400d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "14f71cb4-d070-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736888356, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888356, "uuid": "e32db2c3-feaf-4320-8957-71382ad6ad0b", "comment": "Malware payload (Mirai)", "value": "85a7e8de2fba0a7064c7515d3bea6a17", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888356, "uuid": "9265b045-6a6a-4589-a2a4-e49ca8d9d556", "comment": "Malware payload (Mirai)", "value": "218b20d1eb84d20ddf2095e23b52d82cd4e6940475387f793f61e2a65e3b7f09", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888356, "uuid": "c07a319b-7f70-4fe3-b352-573d8e22fce6", "value": "T19283D706BF614FBBDC6FDD3706A90B0535CC651A22B87B357534D828B64B24B0AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888356, "uuid": "6291ba84-0aac-4119-a113-605c0a5474c0", "value": "1536:1qO3+DbBOLYh1/zf8DVucwENAk4Vy0e3C/K6AZBXi7GSptU9b2g:19bY1/mP4o3sK6AuTU9b2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736888356, "uuid": "823715af-46b0-4d31-bdd9-f0276f17fdc4", "value": 82012, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888356, "uuid": "d6644de6-8204-4a78-8d97-a02e03229e1e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5275b632-d05a-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736888356, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888356, "uuid": "70afec09-a2bf-4155-b03a-da06a70dbb7e", "comment": "Malware payload (Mirai)", "value": "b30def198c7c980b410aca4039add0ba", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888356, "uuid": "69e3e401-da92-40ca-8074-f67a8eefd6b8", "comment": "Malware payload (Mirai)", "value": "496de4fa27abbb7f657899e5026c099f4586948f233ab3d1b6c878d13c28c7e5", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888356, "uuid": "3dac2065-9a73-4466-9d28-e2cd89ebec84", "value": "T13483B61E6E218FEDF669C23547B34E25A39833D637E1C685E25CD6002F6034E645FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888356, "uuid": "ffc0af23-6c2f-49f7-823c-3b84bbdb1404", "value": "1536:7KnNK+T1Qr7yJkuNdMCWnCWjSWWrNmyxiudxPuhe9flDi:7m9T1+7mNmxubPuglDi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736888356, "uuid": "965811a8-df02-4c53-8b08-b7950276b05b", "value": 80876, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888356, "uuid": "0da38a4e-83ef-4754-8a59-f192f5a17397", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a46384ea-c75b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736888357, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888357, "uuid": "aa64d325-14d6-47b8-9997-f636b4305ba8", "comment": "Malware payload (Mirai)", "value": "80402d937bf9d31b4d0c6d7d49ca87ac", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888357, "uuid": "dbb5eb45-e2f2-43a4-92d1-9f738094c8a5", "comment": "Malware payload (Mirai)", "value": "9c006b9ca4b0ba30698ab31b7b40c29c31ef835a63c77be110b3c2b42fa1a5df", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888357, "uuid": "c5550655-1bae-414d-a9d6-79d24a7117d7", "value": "T16173D506BB514EFBDC6BCD3746AA1B4635CC950A22F87B397534C928B54F24B0AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888357, "uuid": "71f910fc-b029-4a33-b53d-b7162aba6282", "value": "1536:mRGc4bM1TbD9/ngRMypPWPvbCSAZrHnrqZFlhOy:mwsNWpePfAkvhOy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736888357, "uuid": "6a71cc8b-5572-4088-94c1-0d6c0cff40de", "value": 76856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888357, "uuid": "88206d98-6f3b-4e7a-ad82-2784908cdd28", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33f6718d-d05c-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736888357, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888357, "uuid": "42fc29f1-84e4-466a-aee7-8e51a4905bdb", "comment": "Malware payload (Mirai)", "value": "b0963f7ea11f8efb5bef5552ab9a8cbf", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888357, "uuid": "2984d7e6-9179-4e43-82e8-360bb4ec177f", "comment": "Malware payload (Mirai)", "value": "d179a9760bcbc83b52c5eba6430b9b3b6be56e993f9b1a38fab7def5eafa21ba", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888357, "uuid": "0a4b936b-3aa2-45da-91f2-925ea10b0e53", "value": "T1F7335BC4E543D8F5ED1701B52137F7768272E5391039EF83C7A9A932E856A80E7263", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888357, "uuid": "c6a9cd2b-8ed3-4558-8215-49caa0551d12", "value": "1536:GmuTgrfTjB1ypZBaiw2GwcdXNYfPanUSyA:GhMfpwaivGwclNwSAA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736888357, "uuid": "4a5a1a54-d7b3-435e-99b6-d2ba30f9bebc", "value": 52144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888357, "uuid": "dc398588-0b36-44ab-979e-31a7a90b9c90", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a8bce21-c906-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736888357, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888357, "uuid": "7aae8299-474a-43fa-a68d-36466a411f7e", "comment": "Malware payload (Mirai)", "value": "c24137535d17c8be48f5f74a45634ab0", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888357, "uuid": "bb767c0e-0a67-4cec-b187-a2539b42823f", "comment": "Malware payload (Mirai)", "value": "f0f828c946b98ac14b8ee7f12d85c82d7773f5671b39df45f025f54127986d58", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888357, "uuid": "17b21d7d-2c1f-473e-aedf-80b89b19bb5e", "value": "T158114FCEA3111E07050EEE4EB2A7C6A96055D5CF2B874FF67E9C043EC4DC9187025A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888357, "uuid": "3b6798e2-4959-4faa-b55b-9e35435c1087", "value": "12:ESnJAFK/XS0abmRXSmi3QAjSrXUSrmK5XS9NIl52LGjSO0LKzKWSy+tVZ8SIS+7:EeJX2bgXsljhUm+QNI7hQKz/+tYDV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736888357, "uuid": "0ddb45d0-300b-409f-a8d8-4ee9746a78c2", "value": 906, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888357, "uuid": "3e8d7b16-7957-48e9-b848-f3bb74fe9883", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b07f2ea-d2ba-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736888357, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888357, "uuid": "f9b62971-6470-454a-bd04-5826b1edbecc", "comment": "Malware payload", "value": "f2c8202e89ddfd01d4785b1cee38f2ac", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888357, "uuid": "970ad57d-1edb-4235-8978-c9f9d03e4562", "comment": "Malware payload", "value": "7a04f0faf956fa06156bd664d5b16741633c816f45d3102ce68ee5b289b6cfb4", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888357, "uuid": "5b3b59c9-b587-499f-bc55-a67bcdb9b5c5", "value": "T15E1182CFB9211A06040EEE4EB2A7C66D7469C5CB1B8F0FCA7E8C047D85DCD187135A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888357, "uuid": "23ed4721-39be-4432-8bd8-197e2e1bbf5d", "value": "12:ESnJacFK/XS0aNmRXSmiv6QAjSefUSrxK5XS9NIl5jLGjSO0LK+KWSy+tqZ8SISj:EeJab2NgXsv0jH8Ux+QNI7KQKE/+tDDM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736888357, "uuid": "9643fae1-e0d8-4ae4-8d16-44bc3c55720c", "value": 860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888357, "uuid": "da5a835e-c888-4c76-8bb0-40e62353dcf2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a925284-d2bb-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736888624, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888624, "uuid": "562c9ca7-398e-43fd-abbb-40acc15e5d0c", "comment": "Malware payload", "value": "ee3a7a270b2eb961df63f230464212ac", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888624, "uuid": "9eb5de64-08f7-497a-a673-dd001e607a10", "comment": "Malware payload", "value": "b6fe5e476e9e366e80bb7d50cdcd81142e218a04ff236c585d5a93d5f86ebf06", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888624, "uuid": "3c0db7f3-faca-4b55-9c98-5442ce99b0a0", "value": "T191B46D3240537C5F3B9A2ECEA4006EC00C5839A77618D154AE899276F2FD53A9E6D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888624, "uuid": "8721087b-0ae3-41bc-9e15-8426b21f4e99", "value": "6144:eVe/8jH/fkbaAiHnVExoyZYwOiY1LBSUkf2jFgdIVgMbJN+5PVu1Zhn6w/lAVigG:eFwoW2h7dVI42CoeUJ2z6m20VFqwgY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736888624, "uuid": "88568c55-7320-4e22-ba1c-0e5d1852e04a", "value": 538502, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888624, "uuid": "2bec1b24-5b77-45b1-94e8-9a20475e16e9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd33da50-d2c1-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736891609, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736891609, "uuid": "72459703-e326-4720-a912-991e486e283d", "comment": "Malware payload", "value": "ffae2899f984c8cb78041692bf366328", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736891609, "uuid": "b441cad7-1d06-4508-881c-857b5e1ee45d", "comment": "Malware payload", "value": "107f1ef1f9692bbe8159f7dab00907c37c58e84ab3154d99ced48df89979e5ea", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736891609, "uuid": "0fabc204-915d-42e5-8953-af301c93be06", "value": "T1ECA47D0383B17D52DA924B738E1FC5F87A9FF5508E493B36221AAE5F25B1272C2677", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736891609, "uuid": "1d616980-542b-4419-b696-be27fa91f793", "value": "53f1fd69b274a053f202c3e7ae48b0db", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736891609, "uuid": "016ce658-6bd8-4179-a320-5087f76ae583", "value": "6144:fH7B7p5L1uHIvEFyukgGYa4hYP4nZESYbgLS+PGZqeBSnXvthIT:fH7B7p5RuHIUyCGYa4hYAnIgm+OLS/Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736891609, "uuid": "bc8351a3-c2c0-46ac-9b20-414f6eb5f7f8", "value": 458240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736891609, "uuid": "059e351c-9b78-4698-9843-d615fe74fd13", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "689eb167-d2c2-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736891789, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736891789, "uuid": "1e086ee6-d591-48e0-a7ec-ebcde9a01932", "comment": "Malware payload", "value": "123f90955530fdab49599f6bb8d40980", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736891789, "uuid": "d6206af9-890e-4f6b-b5e4-e99ca44c7c24", "comment": "Malware payload", "value": "b404ee84e4b5100561bc108c58aedc06cae277cd220067dce59a3c1cc93a3ac1", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736891789, "uuid": "b60c250f-ace1-443c-9ae8-cb92ddf3aa5e", "value": "T107B47D3240537C5F3B9A2ECEA4006EC00C5839A77618D154AE899276F2FD53B9E6D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736891789, "uuid": "2a6718a4-09ce-4e69-9bf0-62d515067ed0", "value": "6144:eVe/8jH/fkbaAiHnVExoyZYwOiY1LBSUkf2jFgdIVgMbJN+5PVu1Zhn6w/lAVigH:eFwoW2h7dVI42CoeUJ2z6m20sFqwgY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736891789, "uuid": "a0349488-a81f-4b7c-bb8a-0e849f07815f", "value": 538502, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736891789, "uuid": "4ddb4494-bdb9-475b-8d61-3333a977e683", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31b3aed1-d2c3-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736892126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736892126, "uuid": "377bfaa8-0d11-42cb-baf1-3e904023866d", "comment": "Malware payload", "value": "33343470f848939ea48557f252aaf430", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736892126, "uuid": "29f2ed37-7dbc-4d01-82d1-760fa7561232", "comment": "Malware payload", "value": "c2700bff84e8c8b9cfb2ee7ee3cf3d59998b39818e4156eae9f5c61e8502e109", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736892126, "uuid": "724602db-3553-4a5a-9faf-466f54c5a48a", "value": "T1F0045B730103FC8B67BF3F89E5043AA51C68643B575E85A8F9C90AAD60EA510DF39D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736892126, "uuid": "9776a217-a7fd-4fa0-81b0-8b272c91449e", "value": "3072:waQm6eceoU8jH/06kbaAiHnVExoyZYwOiY1LBSUkf2jFgdIVgMbJN+5PVu1Zhn6/:eVe/8jH/fkbaAiHnVExoyZYwOiY1LBS/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736892126, "uuid": "977a42bb-0b8a-4c7a-9950-739011f56e25", "value": 181466, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736892126, "uuid": "92084a8f-7682-4874-95d6-66caa4fee3bf", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a29e50-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1736892848, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736892848, "uuid": "c0dabd6a-cfa5-4657-9ebb-b1d4dbb1ccc3", "comment": "Malware payload", "value": "9b6c3518a91d23ed77504b5416bfb5b3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736892848, "uuid": "e3415d4e-f78b-4da9-94a5-3d5befec8003", "comment": "Malware payload", "value": "a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736892848, "uuid": "dd707995-280f-4812-bcba-b62f0df44a3e", "value": "6D7312E017B517CC1371A8353BED205E9128223972AE35302E97528DF957703BAB2DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736892848, "uuid": "03951fff-44e0-4e85-9eac-7ada64717637", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBht5:8D+CAXFYQChaAUk5ljnQssL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736892848, "uuid": "91932d0a-1cd7-4f73-a635-4f735f8b8146", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7336c3d6-cf82-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736895065, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736895065, "uuid": "ab21578d-f9a5-493a-90fc-9afac26ef721", "comment": "Malware payload (Mirai)", "value": "5dd9937cb8a3892d388f6b79369fa2bc", "object_relation": "md5", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736895065, "uuid": "0f6c7db5-a896-4f82-8edd-51b547a8d4e9", "comment": "Malware payload (Mirai)", "value": "684933d923e088f8540f80518e1e39fc9fe57fc7dd45c9869c8115b8ad9c9c5b", "object_relation": "sha256", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736895065, "uuid": "cb18d736-1631-4b1d-8529-d8318b83f819", "value": "T14DE33A0BB5C088FDC4D9C1B48BAAB13AD935F55D1138B26F2BC4AE272E4DE215F5DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736895065, "uuid": "dd0d40a1-0de5-40e1-ab28-47711fe98d57", "value": "3072:EG0Bt1Kznkv9u04zb/i2E7boBOHn0pW89slt9s6xdPgIzIaK6O1C:EG071Kznkv9u8TVwulAfsI/6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736895065, "uuid": "cba034e4-d110-4519-96b9-112c2799a755", "value": 156040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736895065, "uuid": "fc32931f-418e-4e64-9e4e-14ed765b31a0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812986, "uuid": "ee63b833-d20a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.221.99.49/02.08.2022.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812987, "uuid": "ef60a055-d20a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.125.55:8087/02.08.2022.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812989, "uuid": "f0176d1b-d20a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.49.69.101/02.08.2022.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812989, "uuid": "f047b4b5-d20a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.37.42:33010/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812989, "uuid": "f089cadf-d20a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.220.170.242/02.08.2022.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812990, "uuid": "f0a71613-d20a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.133.238.18:9001/02.08.2022.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812990, "uuid": "f0b9370a-d20a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.230.12.133/02.08.2022.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812990, "uuid": "f0b93708-d20a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.14.69.133:8999/02.08.2022.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812990, "uuid": "f0dda2ae-d20a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://47.96.143.115:8086/02.08.2022.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812990, "uuid": "f0dfea67-d20a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.46.28.4:8889/02.08.2022.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812990, "uuid": "f1081783-d20a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://43.133.36.25:8083/02.08.2022.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812990, "uuid": "f11e6cc6-d20a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://43.143.123.40:11111/02.08.2022.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812991, "uuid": "f140e6ee-d20a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.224.19.17:4444/02.08.2022.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812991, "uuid": "f140fd34-d20a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.221.5.207:1444/02.08.2022.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812991, "uuid": "f1415dcb-d20a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://43.156.63.124:9090/02.08.2022.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812991, "uuid": "f143d978-d20a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.48.8.193/02.08.2022.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812991, "uuid": "f1444c85-d20a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.247.215.233:9999/02.08.2022.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812991, "uuid": "f159db1e-d20a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://18.183.60.128/02.08.2022.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812991, "uuid": "f1b98400-d20a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.60.184.253:8080/02.08.2022.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736812991, "uuid": "f1b98b65-d20a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.194.219.28:89/02.08.2022.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813015, "uuid": "ffb333ac-d20a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.0.185:40714/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813047, "uuid": "12c8a3a9-d20b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.234.163.217:51962/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813047, "uuid": "13054f53-d20b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.201.113:43262/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813047, "uuid": "1322ae75-d20b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.234.191:33802/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813048, "uuid": "134f8d99-d20b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.178.234.178:44162/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813048, "uuid": "13791906-d20b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.81.211:41158/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813048, "uuid": "13b3da28-d20b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.4.9:58047/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813048, "uuid": "13c47450-d20b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.219.4:39443/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813049, "uuid": "140def01-d20b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.36.64:55491/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813051, "uuid": "157c16a7-d20b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.199.205.248:49524/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813067, "uuid": "1e88033f-d20b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.40.251:55218/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813072, "uuid": "220537b7-d20b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.181.2:38518/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813075, "uuid": "23b8fd61-d20b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.0.3:57669/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813075, "uuid": "23bd3f46-d20b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.123:11903/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813075, "uuid": "23c5d32d-d20b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.38.0.91:57915/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813075, "uuid": "23c936b9-d20b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.122:11729/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813075, "uuid": "23da5082-d20b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.33.34.77:47168/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813076, "uuid": "24071b8f-d20b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.0.0.32:34641/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813346, "uuid": "c4d2b6f6-d20b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.250.57:40689/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813346, "uuid": "c4d6823b-d20b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.40.181:46056/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813410, "uuid": "eaf70c54-d20b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.230.253:33501/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813467, "uuid": "0cec25f2-d20c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.55.173.117:50472/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813584, "uuid": "52e9cd4e-d20c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://googlsearchings.art/s5.mp3", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813584, "uuid": "5305057f-d20c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://googlsearchings.online/s5.mp3", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813584, "uuid": "533466ee-d20c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://googlsearchings.cfd/s5.mp3", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813589, "uuid": "55c5ac92-d20c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://googlsearchings.click/s5.mp3", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813589, "uuid": "55cb6554-d20c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://googlsearchings.sbs/s5.mp3", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813589, "uuid": "560c21e7-d20c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://googlsearchings.guru/s5.mp3", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813590, "uuid": "563e6e07-d20c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://googlsearchings.quest/s5.mp3", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813594, "uuid": "58f5683a-d20c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://googlsearchings.wiki/s5.mp3", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813594, "uuid": "58fb6a7e-d20c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://googlsearchings.site/s5.mp3", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813594, "uuid": "5900ae2f-d20c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://googlsearchings.xyz/s5.mp3", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813644, "uuid": "76b813ac-d20c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://thepremiumstuffs.quest/s5.mp4", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813645, "uuid": "779471ec-d20c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://thepremiumstuffs.space/s5.mp4", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813645, "uuid": "779a3a4e-d20c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://thepremiumstuffs.online/s5.mp4", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813646, "uuid": "7802688c-d20c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://thepremiumstuffs.fun/s5.mp4", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813647, "uuid": "78c8d00f-d20c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://thepremiumstuffs.pics/s5.mp4", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813648, "uuid": "78e55be2-d20c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://thepremiumstuffs.site/s5.mp4", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813648, "uuid": "78e8e2d9-d20c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://thepremiumstuffs.xyz/s5.mp4", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813648, "uuid": "78ef1f94-d20c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://thepremiumstuffs.click/s5.mp4", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813650, "uuid": "7a73373c-d20c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://thepremiumstuffs.website/s5.mp4", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813765, "uuid": "bedcc047-d20c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.216.88:60629/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813783, "uuid": "c9631c5c-d20c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.30.115:47424/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736813885, "uuid": "0695a102-d20d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.64.101:59092/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736814080, "uuid": "7aa59939-d20d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.208.168:33819/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736814308, "uuid": "02355110-d20e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.181.68.176:38482/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736814325, "uuid": "0ccf5998-d20e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.169.175:60920/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736814611, "uuid": "b6ec5842-d20e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.37.42:33010/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736814671, "uuid": "dab61caa-d20e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.160.147:42487/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736814671, "uuid": "dadf3e89-d20e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.138.148:38233/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736814728, "uuid": "fcf9726d-d20e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.191.179:40514/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736814847, "uuid": "43bf5aff-d20f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.94.149:33867/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736815027, "uuid": "aecdc781-d20f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.28.145:40794/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736815048, "uuid": "bb958539-d20f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.184.165:44697/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736815146, "uuid": "f62ef2a3-d20f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.107.166:54859/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736815207, "uuid": "1a949c17-d210-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.160.147:42487/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736815386, "uuid": "8505d0c7-d210-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.30.115:47424/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736815403, "uuid": "8f0b514b-d210-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.106.183:56065/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736815446, "uuid": "a8a72b97-d210-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.230.253:33501/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736815509, "uuid": "ce1ad0ec-d210-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.245.51:38426/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736815566, "uuid": "f03c8963-d210-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.138.148:38233/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736815746, "uuid": "5bc2b10e-d211-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.175.28:34106/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736815747, "uuid": "5c21b133-d211-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.89.131:34199/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736815926, "uuid": "c6d32cd0-d211-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.169.175:60920/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736815926, "uuid": "c6df9681-d211-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.185.8.37:47917/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736815942, "uuid": "d04063bd-d211-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.2.107:50690/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736816227, "uuid": "7a289871-d212-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.184.165:44697/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736816345, "uuid": "c0ddab62-d212-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.114.56:45142/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736816468, "uuid": "0a23aa0a-d213-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.183.206:47122/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736816525, "uuid": "2c37505b-d213-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.11.243:52027/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736816649, "uuid": "75e4a810-d213-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.210.214:46304/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736816663, "uuid": "7e7a80b4-d213-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.80.115:48735/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736816707, "uuid": "98700a35-d213-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.20.180:57569/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736816707, "uuid": "98ad50cf-d213-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.191.179:40514/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736816826, "uuid": "df313b3e-d213-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.107.166:54859/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736816848, "uuid": "ec596350-d213-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.148.188:60443/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736817126, "uuid": "9238bf7b-d214-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.245.51:38426/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736817127, "uuid": "92ef406a-d214-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.35.9:44422/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736817319, "uuid": "050a04c6-d215-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.72.221:50503/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736817454, "uuid": "55de2375-d215-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.89.131:34199/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736817683, "uuid": "de507998-d215-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.87.218:48594/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736818087, "uuid": "cf07f165-d216-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.46.178:51180/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736818145, "uuid": "f1a29bc0-d216-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.114.56:45142/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736818275, "uuid": "3f0b01e1-d217-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.176.29.93:55587/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736818275, "uuid": "3f2de29f-d217-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.9.84:48641/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736818330, "uuid": "5faf09f5-d217-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.183.55.223:46486/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736818418, "uuid": "940eb564-d217-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.216.24.110:33594/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736818448, "uuid": "a639e10f-d217-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.205.170:44647/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736818565, "uuid": "ec2152dc-d217-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.94.149:33867/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736818865, "uuid": "9ed9b2d5-d218-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.92.140:55885/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736819166, "uuid": "5262a594-d219-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.142.253:38075/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736819233, "uuid": "79c4c430-d219-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.80.6:34696/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736819346, "uuid": "bd32f7ab-d219-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.71.188.63:38505/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736819361, "uuid": "c60c1275-d219-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.120.75:37394/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736819371, "uuid": "cbfd8379-d219-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.108.73:60377/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736819407, "uuid": "e1feaf8b-d219-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.185.8.37:47917/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736819408, "uuid": "e224cd5c-d219-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.58.74:50807/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736819467, "uuid": "05ae050c-d21a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.246.166:53829/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736819526, "uuid": "2875efc4-d21a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.36.171:57570/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736819586, "uuid": "4c3df1ca-d21a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.46.178:51180/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736819645, "uuid": "6fd0a2f5-d21a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.100.163:49003/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736819765, "uuid": "b75dbdea-d21a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.254.128:60821/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736819826, "uuid": "db5990c0-d21a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.212.199:33995/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736820126, "uuid": "8e4a5135-d21b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.92.140:55885/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736820186, "uuid": "b1e0fed3-d21b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.177.47:54860/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736820233, "uuid": "cdd668f2-d21b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.8.39:57937/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736820246, "uuid": "d5c1791a-d21b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.8.191.114:35691/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736820365, "uuid": "1cc147c8-d21c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.101.240:38948/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736820664, "uuid": "cedd127a-d21c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.59.61:43466/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736820664, "uuid": "cedd443c-d21c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.113.40:42889/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736820677, "uuid": "d69694de-d21c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.10.84:55779/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736820845, "uuid": "3ae0249e-d21d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.94.54:39214/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736820908, "uuid": "6094ec3f-d21d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.89.141:47023/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736821032, "uuid": "aa61eed6-d21d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.216.24.110:33594/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736821034, "uuid": "ab70b7bf-d21d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.27.1:53588/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736821049, "uuid": "b4753553-d21d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.85.129:58126/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736821099, "uuid": "d26fffda-d21d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.7.51:54238/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736821209, "uuid": "13c270fc-d21e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.246.166:53829/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736821210, "uuid": "141c5bee-d21e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.242.11:59349/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736821210, "uuid": "14401f71-d21e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.163.171:36444/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736821212, "uuid": "1559efa9-d21e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.152.229:44133/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736821388, "uuid": "7e6dd053-d21e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.204.249:52880/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736821447, "uuid": "a18cb2ae-d21e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.254.128:60821/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736821630, "uuid": "0ed0b826-d21f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.177.47:54860/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736821871, "uuid": "9ea081e9-d21f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.212.199:33995/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736821875, "uuid": "a0fa9f32-d21f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.138.74:58961/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736821887, "uuid": "a8067136-d21f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.32.18:54745/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736822109, "uuid": "2c0f351f-d220-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.249.201:55231/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736822187, "uuid": "5abe62bd-d220-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.111.45:33158/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736822187, "uuid": "5ad6221b-d220-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.114.38:44720/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736822244, "uuid": "7c7bc048-d220-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.233.197:35600/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736822348, "uuid": "ba6a23c3-d220-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.80.221:40677/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736822527, "uuid": "256fab69-d221-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.245.219:46270/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736822554, "uuid": "354b7e97-d221-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.27.1:53588/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736822601, "uuid": "51c87ae4-d221-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.3.114:55983/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736822707, "uuid": "90f732b2-d221-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.36.171:57570/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736822720, "uuid": "98734ce1-d221-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.50.1:57747/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736822766, "uuid": "b3d0f76b-d221-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.242.11:59349/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736822965, "uuid": "2aa1fef2-d222-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.250.202:51169/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736823066, "uuid": "6666cae6-d222-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.163.171:36444/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736823367, "uuid": "19ca1405-d223-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.111.45:33158/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736823486, "uuid": "61157a51-d223-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.107.25:56801/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736823814, "uuid": "24c0eee9-d224-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.54.0:46327/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736823814, "uuid": "24c0f739-d224-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.220.154.210:36374/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736823814, "uuid": "24c0fa7b-d224-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.93.58:36997/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736823814, "uuid": "24c1091c-d224-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.1.185:42167/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736823815, "uuid": "2533c687-d224-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.162.193:47063/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736823846, "uuid": "378c248d-d224-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.151.174.68:36316/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736823846, "uuid": "37dca05d-d224-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.82.210:60417/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736823847, "uuid": "37e76b53-d224-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.70.206:51071/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736823847, "uuid": "37fa639d-d224-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.231.236.185:44479/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736823870, "uuid": "4600b122-d224-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.89.255:58415/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736823994, "uuid": "8fa8ff6f-d224-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.19.164:53934/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736824100, "uuid": "cf0faa8e-d224-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.9.131:37315/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736824146, "uuid": "ea6f3b02-d224-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.185.73:48391/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736824265, "uuid": "312062a7-d225-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.178.234.178:44162/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736824266, "uuid": "31a246b1-d225-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.255.3:41161/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736824325, "uuid": "552aadff-d225-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.32.18:54745/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736824389, "uuid": "7b0a9787-d225-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.81.177:37789/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736824509, "uuid": "c2c0a9ae-d225-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.50.1:57747/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736824544, "uuid": "d797ab6c-d225-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.201.1:37953/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736824747, "uuid": "5061bb5e-d226-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.78.55:49983/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736824808, "uuid": "74f05ebb-d226-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.154.222:52869/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736824987, "uuid": "dfdd863c-d226-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.2.71:41470/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736825109, "uuid": "28645dbd-d227-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.224.189.164:37423/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736825226, "uuid": "6df05ff1-d227-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.185.73:48391/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736825231, "uuid": "7125da16-d227-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.57.22.238:35730/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736825241, "uuid": "7743b18f-d227-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.89.255:58415/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736825286, "uuid": "91f5c392-d227-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.22.253:33471/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736825287, "uuid": "9276660d-d227-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.3.245:50770/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736825348, "uuid": "b6a933f2-d227-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.57.103.139:42095/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736825531, "uuid": "242f8337-d228-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.216.195:44822/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736825532, "uuid": "2459598b-d228-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.122.223:49589/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736825886, "uuid": "f7811024-d228-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.119.172:60101/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736825890, "uuid": "fa281303-d228-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.81.177:37789/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736826007, "uuid": "3fef5428-d229-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.218.122.0:33937/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736826070, "uuid": "65397e0f-d229-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.201.130.135:43636/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736826125, "uuid": "8644a6e5-d229-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.154.222:52869/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736826126, "uuid": "86b415e4-d229-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.22.253:33471/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736826127, "uuid": "86efb411-d229-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.10.225:43756/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736826139, "uuid": "8e279913-d229-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.125.171:33518/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736826186, "uuid": "aa3dae31-d229-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.190.10:48926/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736826309, "uuid": "f36160bd-d229-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.159.74:35769/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736826365, "uuid": "153edf13-d22a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.249.166:48931/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736826546, "uuid": "81253dc7-d22a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.123.142:50710/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736826666, "uuid": "c86fd041-d22a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.13.70.129:53818/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736826666, "uuid": "c88cdd1d-d22a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.63.187:36988/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736826666, "uuid": "c8ac7554-d22a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.201.35.41:52678/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736826676, "uuid": "ce5e23f7-d22a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.205.33:36812/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736826725, "uuid": "ebda937c-d22a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.113.119:37440/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736826786, "uuid": "0fd188a6-d22b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.2.71:41470/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736826786, "uuid": "1013616c-d22b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.57.90:45583/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736826788, "uuid": "11016f30-d22b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.3.245:50770/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736826846, "uuid": "3370c7fe-d22b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.131.238:46042/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736826907, "uuid": "585e69e0-d22b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.211.162:47055/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736827327, "uuid": "527fecc9-d22c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.115.177:40290/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736827386, "uuid": "75bd3891-d22c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.215.156:33538/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736827386, "uuid": "75d8b001-d22c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.216.195:44822/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736827566, "uuid": "e0a17c2d-d22c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.190.10:48926/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736827566, "uuid": "e1132403-d22c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.10.64.222:50274/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736827610, "uuid": "fb111bc9-d22c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.95.165:36165/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736827627, "uuid": "04f383ea-d22d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.122.223:49589/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736827748, "uuid": "4d3b34a5-d22d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.100.159:52678/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736827774, "uuid": "5cc147fe-d22d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.10.225:43756/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736827926, "uuid": "b743fdd1-d22d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.211.177:55604/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736827986, "uuid": "db37d176-d22d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.83.172:48471/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736828046, "uuid": "ff34a5b2-d22d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.184.252:60522/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736828054, "uuid": "038332b0-d22e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.241.136.2:51451/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736828122, "uuid": "2c8c29ab-d22e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.67.131:33669/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736828166, "uuid": "4695826d-d22e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.57.90:45583/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736828347, "uuid": "b2365f51-d22e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.114.9:36080/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736828348, "uuid": "b2b89892-d22e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.232.57:40485/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736828408, "uuid": "d6d58436-d22e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.219.111:35746/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736828646, "uuid": "64d5bb74-d22f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.215.156:33538/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736828649, "uuid": "66403d44-d22f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.139.184:57615/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736828808, "uuid": "c559600f-d22f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.241.170:34162/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736828886, "uuid": "f36151d1-d22f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.211.162:47055/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736828947, "uuid": "17cafa23-d230-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.179.122:42376/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736828955, "uuid": "1d08026c-d230-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.141.56:45426/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736829129, "uuid": "846756a4-d230-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.115.177:40290/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736829248, "uuid": "cb511f02-d230-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.2.85.240:44245/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736829248, "uuid": "cb7c45d2-d230-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.139.184:57615/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736829248, "uuid": "cbab5d6e-d230-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.237.13:34939/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736829311, "uuid": "f0d3ed9d-d230-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.117.114:44581/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736829370, "uuid": "13e43f05-d231-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.241.136.2:51451/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736829426, "uuid": "35c8b151-d231-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.118.58.53:39327/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736829435, "uuid": "3ac4eccf-d231-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.40.97:45938/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736829486, "uuid": "592cd9c9-d231-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.163.13.140:53570/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736829606, "uuid": "a1086997-d231-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.184.252:60522/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736829607, "uuid": "a1835688-d231-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.8.191.114:35691/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736829909, "uuid": "55468ab5-d232-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.227.81:36435/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736829921, "uuid": "5cc1f9c1-d232-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.16.207:44499/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736829965, "uuid": "76e2bf30-d232-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.219.111:35746/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736829966, "uuid": "7766a593-d232-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.35.219:35610/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736829967, "uuid": "78460a89-d232-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.227.241.193:24391/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736830086, "uuid": "bf237d72-d232-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.120.75:37394/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736830106, "uuid": "caef12f1-d232-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.119.121:56433/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736830109, "uuid": "ccbd867a-d232-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.44.179:59973/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736830145, "uuid": "e240a76b-d232-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.241.220:49836/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736830145, "uuid": "e24aba9d-d232-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.124.163:45564/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736830326, "uuid": "4ddb23e7-d233-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.124.150:39216/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736830525, "uuid": "c4a5648a-d233-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.83.58:53895/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736830808, "uuid": "6d60d540-d234-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.124.150:39216/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736830808, "uuid": "6d6674c2-d234-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.117.114:44581/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736830868, "uuid": "913263c1-d234-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.80.56:55997/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736830869, "uuid": "9166084e-d234-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.40.97:45938/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736830896, "uuid": "a1b8924f-d234-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.49.171:44919/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736831047, "uuid": "fbbef8ad-d234-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.46.101:36607/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736831062, "uuid": "04b7ec13-d235-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.88.243:57206/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736831226, "uuid": "66ae7b5d-d235-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.135.17.58:48805/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736831228, "uuid": "676c67f8-d235-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.217.179.133:33176/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736831358, "uuid": "b51d8144-d235-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.88.59:49762/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736831408, "uuid": "d30dc75b-d235-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.35.219:35610/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736831408, "uuid": "d3158066-d235-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.91.64:40191/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736831647, "uuid": "6137902d-d236-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.44.179:59973/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736831948, "uuid": "149e2306-d237-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.119.121:56433/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736832186, "uuid": "a2e5300d-d237-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.16.207:44499/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736832367, "uuid": "0e8768e0-d238-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.141.5:44690/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736832486, "uuid": "55224bfa-d238-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.217.179.133:33176/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736832547, "uuid": "79819854-d238-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.7.238:51119/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736832554, "uuid": "7dd5101b-d238-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.235.251.215:38618/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736832611, "uuid": "9feace88-d238-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.151.235:49953/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736832676, "uuid": "c6a2e4d6-d238-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.225.59:45886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736832733, "uuid": "e885181f-d238-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.88.59:49762/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736832793, "uuid": "0c31cb7c-d239-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.210.214:46304/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736832793, "uuid": "0c65b482-d239-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.157.36:42168/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736832850, "uuid": "2e8cf489-d239-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.113.176.95:44541/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736832970, "uuid": "75d6e36a-d239-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.197.249:46434/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736833026, "uuid": "9747474d-d239-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.245.60:48628/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736833042, "uuid": "a0e2d3ad-d239-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.154.170:58377/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736833446, "uuid": "9181843d-d23a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.245.60:48628/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736833566, "uuid": "d8f0d6c1-d23a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.108.253:39038/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736833627, "uuid": "fd817ded-d23a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.22.85:54015/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736833746, "uuid": "447e0525-d23b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.167.243.78:59760/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736833986, "uuid": "d399d013-d23b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.39.83:39766/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834166, "uuid": "3e8e728b-d23c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.235.251.215:38618/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834230, "uuid": "64b0e0b7-d23c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.251.82.160:20722/s/mips", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834230, "uuid": "64d4108a-d23c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.251.82.160:20722/s/mipsel", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834236, "uuid": "68732eea-d23c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.77.135:57458/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834284, "uuid": "8569f330-d23c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.57.189.191/nss3.dll", "Tag": [ { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834285, "uuid": "85da49e2-d23c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://github.com/bill-net98/qusar/raw/refs/heads/main/client.exe", "Tag": [ { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834287, "uuid": "86a8d2d5-d23c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://primoris-882gg22.s3.us-east-2.amazonaws.com/optiv_ivy_hta.hta", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834287, "uuid": "86bd3f38-d23c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.124.212.226:6065/windows/ro.pyw", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834287, "uuid": "86cc4fc7-d23c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.124.212.226:6065/file/ca.pyw", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834287, "uuid": "86d2f835-d23c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.124.212.226:6065/windows/ca.pyw", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834288, "uuid": "876d7c32-d23c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.215.113.206/68b591d6548ec281/softokn3.dll?/", "Tag": [ { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834288, "uuid": "876e2a14-d23c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.124.212.226:6065/windows/startup.bat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834288, "uuid": "876e9717-d23c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.124.212.226:6065/windows/start.bat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834288, "uuid": "87743825-d23c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.124.212.226:6065/windows/b.bat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834288, "uuid": "878c4dba-d23c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.201.252.67/abb50f61caf7efad/sqlite3.dll", "Tag": [ { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834288, "uuid": "878f71b1-d23c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.124.212.226:6065/Account_Statement.pdf.lnk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834288, "uuid": "87b00c7e-d23c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.124.212.226:6065/windows/run.bat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834288, "uuid": "87b41fdf-d23c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.123.7/77/nic/verynicegirlwalkingarounftheworldmuuuah.hta", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834289, "uuid": "87f1ad47-d23c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://github.com/jackyz777/activebypass/raw/refs/heads/main/Discord.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834289, "uuid": "8809aff9-d23c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://bitbucket.org/5w457/ed512/downloads/emnfpac.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834289, "uuid": "880fb161-d23c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://bitbucket.org/5w457/ed512/downloads/piedpjb.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "rev", "colour": "#bf4152", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834291, "uuid": "8984d8ba-d23c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.140.225.33/phpmyadmin/!HELP_SOS.hta", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834303, "uuid": "90a0060f-d23c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.124.212.226:6065/AccountStatement.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834304, "uuid": "90fcfc5b-d23c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.27.51.244/bin/packetcrypt.exe", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834315, "uuid": "97922981-d23c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.233.109:42469/Mozi.m", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834344, "uuid": "a8f6a886-d23c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/bill-net98/qusar/refs/heads/main/client.exe", "Tag": [ { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834345, "uuid": "a9817697-d23c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/jackyz777/activebypass/refs/heads/main/Discord.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834345, "uuid": "a990984f-d23c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/RanjitGandhi2/fff/refs/heads/main/thong.bin", "Tag": [ { "name": "donutloader", "colour": "#4b5532", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834345, "uuid": "a99b995a-d23c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.124.212.226:6065/windows/c.bat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834347, "uuid": "aabcb9e4-d23c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/New-Codder/test/refs/heads/main/2.bin", "Tag": [ { "name": "donutloader", "colour": "#4b5532", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834349, "uuid": "ac0d4260-d23c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/New-Codder/test/refs/heads/main/shellcodeAny.bin", "Tag": [ { "name": "donutloader", "colour": "#4b5532", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834350, "uuid": "ac6a90fe-d23c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://files.catbox.moe/a7gugc.bin", "Tag": [ { "name": "donutloader", "colour": "#4b5532", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834411, "uuid": "d09915d4-d23c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.151.235:49953/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834468, "uuid": "f2edae99-d23c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://79.124.40.48/bins/c.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834469, "uuid": "f38edd33-d23c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.13.39:60812/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834527, "uuid": "1635a879-d23d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.7.238:51119/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834587, "uuid": "39cc3ad4-d23d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.130.204:49495/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834587, "uuid": "39d94407-d23d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.180.130.39:47563/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834591, "uuid": "3bf8250c-d23d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.247.52.124:57003/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834600, "uuid": "418f009d-d23d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.35.100:60650/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834606, "uuid": "44e7b67d-d23d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.94.156:36309/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834615, "uuid": "4a49a938-d23d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.151:10578/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834615, "uuid": "4a49abbc-d23d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.212.102:45044/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834615, "uuid": "4a7bf1d8-d23d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.195:11029/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834628, "uuid": "524b67a6-d23d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.149.38:43493/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834708, "uuid": "81a2a0f7-d23d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.141.5:44690/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834708, "uuid": "81abb6bb-d23d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.43.76.231:59569/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736834844, "uuid": "d29b6d6b-d23d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.248.80.184:57792/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736835426, "uuid": "2dd785ec-d23f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.20.65:33202/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736835504, "uuid": "5c336a38-d23f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.171.73:47077/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736835607, "uuid": "9967233f-d23f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.22.85:54015/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736835787, "uuid": "051fe74d-d240-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.165.128.190:40056/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736835851, "uuid": "2b284d20-d240-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.236.244.22:51912/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736835907, "uuid": "4c363148-d240-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.225.59:45886/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736836086, "uuid": "b7429f31-d240-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.197.249:46434/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736836093, "uuid": "bba80c4b-d240-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.3.27.240:44052/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736836146, "uuid": "dae7bdf3-d240-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.13.39:60812/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736836332, "uuid": "49badd95-d241-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.160.154.128:53600/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736836392, "uuid": "6d78962b-d241-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.49.148:42644/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736836395, "uuid": "6f7ecbab-d241-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.18.155:57753/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736836626, "uuid": "f8d59983-d241-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.181.65:55141/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736836927, "uuid": "acb53ad9-d242-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.209.74:44589/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736837065, "uuid": "feb847a6-d242-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.114.45:35671/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736837108, "uuid": "189b451a-d243-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.246.110.77:50418/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736837108, "uuid": "18a1de3f-d243-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.165.128.190:40056/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736837110, "uuid": "19aa646b-d243-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.42.221:52102/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736837166, "uuid": "3abb6a87-d243-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.220.118:49531/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736837348, "uuid": "a74cf065-d243-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.196.38:39766/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736837364, "uuid": "b12822ab-d243-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.16.84:44768/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736837365, "uuid": "b14aadb1-d243-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.52.129:45661/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736837526, "uuid": "11852e92-d244-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.3.27.240:44052/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736837886, "uuid": "e814d757-d244-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.160.154.128:53600/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736838069, "uuid": "550d8acd-d245-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.183.206:47122/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736838187, "uuid": "9b847575-d245-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.246.110.77:50418/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736838246, "uuid": "bedf3254-d245-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.131.238:46042/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736838266, "uuid": "cacf3489-d245-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.27.47:46820/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736838309, "uuid": "e3e93f0a-d245-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.59.209:46349/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736838309, "uuid": "e44488fc-d245-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.104.178:52040/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736838424, "uuid": "28eff28a-d246-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.123.7/77/kissingbestthingswithgreatdayscomingforhim.txt", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736838426, "uuid": "29cfdcd9-d246-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.49.171:44919/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736838426, "uuid": "29fcebe1-d246-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.123.7/77/seethebestthingsforgetmebackwithgoodnewsthings.tIF", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736838608, "uuid": "96b7505f-d246-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.42.221:52102/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736838727, "uuid": "dd9d5b86-d246-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.160.240.83:3487/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736838786, "uuid": "007cab64-d247-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.220.118:49531/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736838909, "uuid": "499173cd-d247-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.14.64:53946/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736838968, "uuid": "6ccbd59a-d247-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.118.192:40090/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736839147, "uuid": "d78e0427-d247-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.196.38:39766/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736839147, "uuid": "d7b0dc96-d247-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.175.68.4:44972/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736839148, "uuid": "d88f0e57-d247-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.127.176:35749/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736839163, "uuid": "e15b79ab-d247-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.41.111:41310/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736839266, "uuid": "1e9d5996-d248-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.173.202.137/armhf", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736839266, "uuid": "1ec33159-d248-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.173.202.137/powerpc64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736839266, "uuid": "1ed873a7-d248-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.59.209:46349/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736839267, "uuid": "1f5b0983-d248-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.217.75:49444/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736839328, "uuid": "43b52d90-d248-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.13.62.2:65438/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736839387, "uuid": "66e5fdb0-d248-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://amazonenviro.com/admin/245_Nsltarpncon", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736839508, "uuid": "aebabd11-d248-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.114.45:35671/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736839708, "uuid": "263adef0-d249-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.60.107:36114/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736839812, "uuid": "63fb8cdd-d249-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.104.178:52040/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736839812, "uuid": "6403d0bf-d249-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.118.192:40090/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736839933, "uuid": "ac40609a-d249-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.10.220:33256/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736840051, "uuid": "f297b51c-d249-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.26.88.19:49690/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736840466, "uuid": "ea0b5614-d24a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.14.64:53946/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736840526, "uuid": "0da635bb-d24b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.217.75:49444/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736840945, "uuid": "078cf036-d24c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://bit.ly/4hdnEnC", "Tag": [ { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "lummastelaer", "colour": "#b5f602", "exportable": true, "hide_tag": false }, { "name": "SPAM-ITA", "colour": "#801838", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736840945, "uuid": "078d6154-d24c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://atilayelektronik.com.tr/admin/view/stylesheet/red.php", "Tag": [ { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "lummastelaer", "colour": "#b5f602", "exportable": true, "hide_tag": false }, { "name": "SPAM-ITA", "colour": "#801838", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736840945, "uuid": "078e156b-d24c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://bit.ly/3Petfhv", "Tag": [ { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "lummastelaer", "colour": "#b5f602", "exportable": true, "hide_tag": false }, { "name": "SPAM-ITA", "colour": "#801838", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736840945, "uuid": "079501b5-d24c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://steamcommunity.com/profiles/76561199724331900", "Tag": [ { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "lummastelaer", "colour": "#b5f602", "exportable": true, "hide_tag": false }, { "name": "SPAM-ITA", "colour": "#801838", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736840946, "uuid": "07f95e57-d24c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://admin.bookviewreserve.com/confirm/login/NbVqArnK", "Tag": [ { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "lummastelaer", "colour": "#b5f602", "exportable": true, "hide_tag": false }, { "name": "SPAM-ITA", "colour": "#801838", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736840946, "uuid": "07f96467-d24c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://aleksandr-block.com/api", "Tag": [ { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "lummastelaer", "colour": "#b5f602", "exportable": true, "hide_tag": false }, { "name": "SPAM-ITA", "colour": "#801838", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736840947, "uuid": "0857735c-d24c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.139.220.163:52607/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736840947, "uuid": "088c727e-d24c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.253.229:45610/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736840948, "uuid": "0909bde7-d24c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://admin.capthca.world/confirm/login/RPCZRrWE", "Tag": [ { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "lummastelaer", "colour": "#b5f602", "exportable": true, "hide_tag": false }, { "name": "SPAM-ITA", "colour": "#801838", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736841066, "uuid": "4f7452e5-d24c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.10.220:33256/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736841066, "uuid": "4fbac723-d24c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.41.111:41310/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736841127, "uuid": "739b7aac-d24c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.8.236:49595/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736841364, "uuid": "015fb46f-d24d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.255.3:41161/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736841847, "uuid": "20ee4465-d24e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.22.5:45117/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736841861, "uuid": "29982a9d-d24e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.231.159.102:50039/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736841984, "uuid": "72f6dacf-d24e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.52.39:56012/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736842085, "uuid": "af2372c1-d24e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.250.198.87:40857/Mozi.m", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736842086, "uuid": "af5e26b5-d24e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.228.150:42933/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736842086, "uuid": "af608629-d24e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.78.152:54855/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736842087, "uuid": "afd60ab4-d24e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.182.105:40120/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736842087, "uuid": "b01cccef-d24e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.229.178:39095/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736842100, "uuid": "b7c4ed7c-d24e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.144.47:35949/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736842114, "uuid": "c0577908-d24e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.186.216.187:39580/Mozi.m", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736842208, "uuid": "f7e484c0-d24e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.118.15.127:37881/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736842327, "uuid": "3ee1bd3b-d24f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.255.100:54244/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736842386, "uuid": "624053b3-d24f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.229.178:39095/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736843051, "uuid": "eed97737-d250-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1JOuDHOf-7g1soG8c9YOH9KUFNQE69Kuq", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736843287, "uuid": "7b6e1ae3-d251-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.173.16:55364/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736843471, "uuid": "e912f6fc-d251-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.249.139:47773/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736843648, "uuid": "528724ae-d252-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.52.39:56012/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736843649, "uuid": "5332ab33-d252-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.194.41:42430/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736844128, "uuid": "70bc161d-d253-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.139.191:36507/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736844307, "uuid": "db0680fe-d253-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.182.105:40120/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736844486, "uuid": "4602d2da-d254-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.15.53.158:45846/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736844547, "uuid": "6a22b0b4-d254-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.109.34:51426/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736844547, "uuid": "6a4bc6c0-d254-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.76.117:43083/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736844725, "uuid": "d4938035-d254-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.2.85.240:44245/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736845086, "uuid": "abc35eb8-d255-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.118.240.42:50700/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736845146, "uuid": "cf145f9d-d255-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.249.139:47773/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736845268, "uuid": "185bd056-d256-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.27.127:36400/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736845387, "uuid": "5ebb22f0-d256-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.252.169:50091/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736845388, "uuid": "5fe809d2-d256-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.227.158:43317/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736845447, "uuid": "82e63698-d256-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.45.240:45572/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736845475, "uuid": "93513968-d256-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://49.85.213.77:41158/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736845508, "uuid": "a7323fb5-d256-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.97.201.54:53392/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736845508, "uuid": "a73394c6-d256-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.13.81.12:45010/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736845807, "uuid": "59834450-d257-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.139.191:36507/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736845926, "uuid": "a00f8c64-d257-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.210.150:40905/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736846046, "uuid": "e78def8b-d257-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.15.53.158:45846/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736846108, "uuid": "0cfe2c20-d258-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.243.140:56577/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736846347, "uuid": "9b25bcd5-d258-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.97.201.54:53392/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736846410, "uuid": "c08649cb-d258-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.91.162.209:34175/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736846825, "uuid": "b84c3c12-d259-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.131.195:45761/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736846857, "uuid": "cb121454-d259-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.81.59:42328/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736846947, "uuid": "00e1f0c2-d25a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.88.205:44276/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736847250, "uuid": "b5a4cc93-d25a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.97.181.194:36661/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736847725, "uuid": "d07d0c39-d25b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.45.240:45572/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736847846, "uuid": "1867ca93-d25c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.131.195:45761/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736847907, "uuid": "3cddb053-d25c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.210.150:40905/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736848026, "uuid": "83fa2495-d25c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.243.140:56577/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736848026, "uuid": "843327ca-d25c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.62.215:38919/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736848146, "uuid": "cb414f11-d25c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.147.40.218:52397/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736848146, "uuid": "cb5eca6d-d25c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.81.178:41472/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736848146, "uuid": "cb817525-d25c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.165.214:58128/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736848146, "uuid": "cb817679-d25c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.18.182.91:33971/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736848146, "uuid": "cbbdcc7b-d25c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.220.204:33505/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736848149, "uuid": "cd4fcd05-d25c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.113.112.74:48141/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736848208, "uuid": "f0bc7e3a-d25c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.179.254:53952/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736848268, "uuid": "14306381-d25d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.91.162.209:34175/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736848389, "uuid": "5c7adad3-d25d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.88.205:44276/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736848448, "uuid": "7f4bcc6b-d25d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.233.86:43019/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736848778, "uuid": "445b887c-d25e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.199.105.80:59318/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736848808, "uuid": "565e743f-d25e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.157.36:42168/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736848809, "uuid": "56a6b145-d25e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.172.81.115:33437/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736848867, "uuid": "796a1187-d25e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.235.130.48:36623/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736848954, "uuid": "ad6088e9-d25e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.19.11:45929/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736848985, "uuid": "bfd80c31-d25e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.105.140:36247/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736849047, "uuid": "e4843553-d25e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.109.11.99:57751/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736849053, "uuid": "e829662d-d25e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.233.86:43019/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736849053, "uuid": "e84af607-d25e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.76.142:44074/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736849064, "uuid": "ee7a875c-d25e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.122.216:57847/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736849166, "uuid": "2b96df8a-d25f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.176.255.103:42662/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736849346, "uuid": "96d076ff-d25f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.212.128:57220/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736849408, "uuid": "bbcb7b19-d25f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.228.150:42933/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736849615, "uuid": "3702d5be-d260-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.27.22:49051/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736849826, "uuid": "b5075755-d260-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.27.14:57987/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736849946, "uuid": "fcb202a7-d260-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.252.28.250:34109/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736850246, "uuid": "af7fd5ad-d261-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.172.81.115:33437/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736850425, "uuid": "19f62b24-d262-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.94.184.78:55683/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736850554, "uuid": "6687c09d-d262-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.141.89:44386/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736850728, "uuid": "ce84fd84-d262-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.176.255.103:42662/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736850728, "uuid": "ce96bf5f-d262-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.105.140:36247/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736850848, "uuid": "162c2f00-d263-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.191.181.73:43163/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736850848, "uuid": "16452b09-d263-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.32.112:33726/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736850850, "uuid": "1712d9e8-d263-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.27.156:43647/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736850863, "uuid": "1ec453fa-d263-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.47.44:40835/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736850863, "uuid": "1f3061e8-d263-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.38.105:34056/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736850931, "uuid": "4742aa90-d263-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.241.13:60268/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736851265, "uuid": "0e898463-d264-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.205.218:39395/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736851330, "uuid": "35398b82-d264-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.243.162:55479/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736851768, "uuid": "3a4ad7f1-d265-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.78.154:48460/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736851808, "uuid": "523f080f-d265-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.205.218:39395/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736851808, "uuid": "527e72fa-d265-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.40.126:54902/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736852164, "uuid": "26639d15-d266-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.62.215:38919/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736852227, "uuid": "4c0f2db7-d266-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.232.147:58924/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736852540, "uuid": "0664d72f-d267-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.121.186:43529/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736852586, "uuid": "21b7a1fc-d267-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.72.107:42629/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736852647, "uuid": "460ffb96-d267-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.82.19:45798/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736852663, "uuid": "4faacf9d-d267-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.241.23:40724/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736852670, "uuid": "53d76d53-d267-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.10.7:45707/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736852886, "uuid": "d5037c87-d267-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.241.13:60268/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736852905, "uuid": "e0225d1b-d267-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.106.115:48799/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736853427, "uuid": "1704f4c7-d269-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.63.68:33342/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736853486, "uuid": "3a30a4bb-d269-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.131.189:34048/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736853486, "uuid": "3a864d73-d269-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.175.38:51468/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736853486, "uuid": "3a87f334-d269-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.40.126:54902/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736854085, "uuid": "9f7491a7-d26a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.72.107:42629/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736854146, "uuid": "c409313b-d26a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.121.186:43529/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736854209, "uuid": "e99d9b4c-d26a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.11.42:42765/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736854269, "uuid": "0cea8dd8-d26b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.244.15:56588/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736854448, "uuid": "7788768c-d26b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.224.62:47840/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736854626, "uuid": "e1abb535-d26b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.106.241:57870/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736854686, "uuid": "05aa3bbe-d26c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.175.38:51468/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736854687, "uuid": "06486e2f-d26c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.225.42:47480/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736854929, "uuid": "96b4f26e-d26c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.153.238:50884/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736854991, "uuid": "bb320074-d26c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.93.44.48:55710/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736855108, "uuid": "0104504a-d26d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.237.13:34939/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736855108, "uuid": "016b94d9-d26d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.163.220.105:48492/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736855109, "uuid": "0180784a-d26d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.254.242:49034/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736855110, "uuid": "02991e40-d26d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.151.177.144:60013/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736855153, "uuid": "1c4cab71-d26d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.54.50:37942/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736855227, "uuid": "483c6962-d26d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.251.82.160:20722/s/linux", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736855227, "uuid": "48646c60-d26d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.251.82.160:20722/b/linux", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736855235, "uuid": "4ce7e36a-d26d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.251.82.160:20722/t/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736855240, "uuid": "4ffc7036-d26d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.251.82.160:20722/s/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736855241, "uuid": "50619d30-d26d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.251.82.160:20722/b/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736855243, "uuid": "51dd4ff4-d26d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.251.82.160:20722/b/aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736855245, "uuid": "529c3649-d26d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.251.82.160:20722/t/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736855245, "uuid": "531e1e07-d26d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.251.82.160:20722/t/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736855245, "uuid": "531f0db1-d26d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.251.82.160:20722/t/mips64el", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736855246, "uuid": "532624b4-d26d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.251.82.160:20722/b/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736855246, "uuid": "5326b467-d26d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.251.82.160:20722/s/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736855246, "uuid": "532a7e34-d26d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.251.82.160:20722/s/aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736855246, "uuid": "532a8198-d26d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.251.82.160:20722/s/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736855246, "uuid": "532a841c-d26d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.251.82.160:20722/b/mips64el", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736855246, "uuid": "532a92a4-d26d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.251.82.160:20722/b/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736855246, "uuid": "535941d1-d26d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.251.82.160:20722/t/386", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736855246, "uuid": "535aaeb3-d26d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.251.82.160:20722/s/386", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736855246, "uuid": "5364f512-d26d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.251.82.160:20722/t/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736855246, "uuid": "5366c0c0-d26d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.251.82.160:20722/b/amd64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736855246, "uuid": "53686069-d26d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.251.82.160:20722/t/aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736855246, "uuid": "5368b23d-d26d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.251.82.160:20722/s/amd64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736855246, "uuid": "5396abeb-d26d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.251.82.160:20722/t/amd64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736855246, "uuid": "5396bf51-d26d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.251.82.160:20722/s/mips64el", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736855246, "uuid": "539de807-d26d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.251.82.160:20722/b/386", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736855246, "uuid": "539fe169-d26d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.251.82.160:20722/s/mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736855246, "uuid": "53a8a915-d26d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.251.82.160:20722/t/mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736855246, "uuid": "53ab3991-d26d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.251.82.160:20722/t/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736855246, "uuid": "53bd7cdc-d26d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.251.82.160:20722/b/mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736855772, "uuid": "8d15cb46-d26e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.224.62:47840/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736855947, "uuid": "f4fd2b21-d26e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.244.15:56588/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736856244, "uuid": "a655ce1c-d26f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.96.199:55292/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736856246, "uuid": "a7a56370-d26f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.226.108:41680/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736856247, "uuid": "a7ee6f0b-d26f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.210.41:60893/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736856247, "uuid": "a8105bd2-d26f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.85.5:46245/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736856254, "uuid": "ac86b3fb-d26f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.208.231.246:52140/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736856264, "uuid": "b26ae032-d26f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.19.71:35995/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736856274, "uuid": "b8333e9d-d26f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.117.114:44581/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736856274, "uuid": "b8409d03-d26f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.180:10099/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736856274, "uuid": "b850c344-d26f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.38.0.228:38056/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736856275, "uuid": "b892a057-d26f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.93.143:59059/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736856275, "uuid": "b89e7091-d26f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.60.248.255:45850/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736856275, "uuid": "b8b2bfbb-d26f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.250.16:48069/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736856275, "uuid": "b8bc755e-d26f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.135.62:56098/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736856288, "uuid": "c063edd8-d26f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.37.52:60426/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736856310, "uuid": "cdaee548-d26f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.92.77.205:55912/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736856787, "uuid": "ea0bee96-d270-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.153.238:50884/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736856912, "uuid": "34aca1ca-d271-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitbucket.org/5w457/ed512/downloads/FnncdAk.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736856936, "uuid": "42ad5ee4-d271-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.153.70:52359/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736857087, "uuid": "9cbee540-d271-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.141.90:45641/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736857147, "uuid": "c0ad21dd-d271-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://pink57hj.site/cb", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Pink", "colour": "#0d1368", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736857147, "uuid": "c0b26ab7-d271-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://pink57hj.site/sb", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Pink", "colour": "#0d1368", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736857148, "uuid": "c0df80be-d271-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://pink57hj.site/sl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Pink", "colour": "#0d1368", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736857149, "uuid": "c1c6f209-d271-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://pink57hj.site/cl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Pink", "colour": "#0d1368", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736857163, "uuid": "ca2bd20f-d271-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.215.26:47471/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736857868, "uuid": "6e268f91-d273-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.197.154.116/ciscotest.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736857929, "uuid": "92b71d08-d273-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.141.90:45641/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736858046, "uuid": "d81d62b1-d273-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.172.10:53640/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736858046, "uuid": "d842213f-d273-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.122.28:48545/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736858585, "uuid": "19e903b1-d275-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.153.70:52359/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736858645, "uuid": "3da3eeba-d275-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.16.172/Downloads/18118.2031/Advertising%20Agreement%20for%20Youtube%20Cooperation.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736858646, "uuid": "3df1aaf4-d275-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn-connect.docusigner.info/sign/0b9e26b65ba8fc26d2afe705fa93c7e1a4c27d2b6c170ab38ec81f9beb2a472a/h.mp3", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736858707, "uuid": "628aab40-d275-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://nopaste.net/ffffffffffffffffffffffffffffffff", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736858709, "uuid": "63a25833-d275-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.180.16:34455/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736858947, "uuid": "f1aff945-d275-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.208.139.147/Documents/SBB_Fahrplan_5274147.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736858949, "uuid": "f264bfdf-d275-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.49.142:49979/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736858951, "uuid": "f39ccee6-d275-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://codebizz.com/7896745657879090.mp4", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736859120, "uuid": "58999daa-d276-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.164.242:44103/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736859186, "uuid": "7fadfdcb-d276-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.252.169:50091/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736859669, "uuid": "9fb94c64-d277-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/hko247.black/libs/-/raw/main/sivchost.hko?ref_type=heads&inline=false", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736859691, "uuid": "aca8bea2-d277-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/hko247.black/libs/-/raw/main/svchost.hko?ref_type=heads&inline=false", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736859729, "uuid": "c33fce60-d277-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.237.121:40022/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736859744, "uuid": "cca413e0-d277-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.241.82:52643/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736859754, "uuid": "d2422785-d277-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.60.182:44008/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736859859, "uuid": "111feab9-d278-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.201.116:47055/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736859964, "uuid": "4fdf1996-d278-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.99.46:47161/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736859982, "uuid": "5a8808b9-d278-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.17.103:52498/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860146, "uuid": "bc22ef7f-d278-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.117.225:33616/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860165, "uuid": "c78e1377-d278-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.67.99:46718/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860207, "uuid": "e04fd489-d278-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://cbveri.app/Downloads/18118.2031/Advertising%20Agreement%20for%20Youtube%20Cooperation.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860208, "uuid": "e12a8e60-d278-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.197.156:56547/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860265, "uuid": "03135f6d-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.180.16:34455/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860326, "uuid": "2749594d-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.1.71:41050/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860386, "uuid": "4b2ef80c-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://olxn.college/Downloads/WorkplaceZoom.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860446, "uuid": "6ee42e73-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://kufar.online/Downloads/WorkplaceZoom.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860507, "uuid": "92f4bd53-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.35.94/bins/TWZMs3CDYutR6BtYJL9xSLUWc3GoaIEkvp", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860507, "uuid": "92f4fb3a-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.225/bins/PDjuI4Dn96kBmdy8HaAnfI1eV0EhrbCsEr", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860507, "uuid": "93022150-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.35.94/bins/mZlFjf5Cu8oS3qu0Nc6waJSBE2uIwDbrQI", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860507, "uuid": "931e8d95-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.35.94/bins/xWfQVfqdquTD1kXEBZWtIFDbv0SXTEZwjT", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860507, "uuid": "93219349-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.225/bins/dEzrgqzfP4hQFr8KxZEx3ExVz2hgRxyHET", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860507, "uuid": "932201dc-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.225/bins/YVWl7wTu6xQyVsNCJedM1mr4zD3KDoNysM", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860507, "uuid": "932390e4-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.225/bins/y8xCPjVN20fIFf6TuxHU5h1zDiNNSdMGjr", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860507, "uuid": "9349fc04-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.225/bins/lAUGQAu0Ao5CimENgznFQDCoK4Bmcn3s7O", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860508, "uuid": "939f969a-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.35.94/bins/Lq0IvxmywcSdpa7lzzUcEm0L6FBsIG1zwj", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860508, "uuid": "93e1ac2d-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.38.42.17/1736805661_7dd4d424c28504c1ac7df365c717416b/firmware.safe.mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860510, "uuid": "95171e21-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.35.94/bins/lB7EmvOpCWjhHtn4RHYQ8TLaIbUPfXYSxX", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860510, "uuid": "95190946-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.35.94/bins/okiD7aogyszIrdCfLeYcxgsucr41A6D9wu", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860510, "uuid": "951f2174-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.110.99.68/a-r.m-5.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860510, "uuid": "954bbb26-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.35.94/bins/4yL55R4FQUUs9NJWcxWuOUIvQOxWHSWll6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860510, "uuid": "954c6e81-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.110.99.68/x-8.6-.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860511, "uuid": "9561817b-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.110.99.68/m-i.p-s.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860511, "uuid": "9574c533-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.110.99.68/a-r.m-4.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860511, "uuid": "95ad4861-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.110.99.68/m-p.s-l.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860511, "uuid": "95ae9b45-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.38.42.17/1736805661_7dd4d424c28504c1ac7df365c717416b/firmware.safe.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860513, "uuid": "96cf29b0-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.225/bins/71l47EdrXV4P9NMq30sfFDA7WLsQGGslzf", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860515, "uuid": "982f121b-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.38.42.17/1736805661_7dd4d424c28504c1ac7df365c717416b/firmware.safe.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "98f625ef-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218/garm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "9944cdb7-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218/gmips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "9948239e-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.159.149/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "99488326-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.159.149/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "99489599-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.159.149/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "994c5b21-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.159.149/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "9953d6c2-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.159.149/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "9973be9e-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.95.73.77/rebirth.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "997618ba-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218/garm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "997868ae-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.159.149/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "99799104-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.159.149/arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "997a72e4-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.159.149/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "997ad555-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.159.149/i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "997df45c-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.95.73.77/rebirth.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "997e5cfd-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.159.149/i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860517, "uuid": "997f6b29-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218/gx86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860518, "uuid": "99855f13-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.31.47.167/meth12", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860518, "uuid": "998d9d67-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.110.99.68/x-3.2-.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860518, "uuid": "998f6a78-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.31.47.167/meth4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860518, "uuid": "9994700b-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.189.3.214/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860518, "uuid": "999595ab-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.189.3.214/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860518, "uuid": "9997c69e-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.189.3.214/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860518, "uuid": "9999bea6-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.189.3.214/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860518, "uuid": "99a19c5b-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.189.3.214/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860518, "uuid": "99d5a906-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.189.3.214/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860518, "uuid": "99d8d897-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.95.72.10/i-5.8-6.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860518, "uuid": "99d93f50-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.31.47.167/meth14", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860518, "uuid": "99e1f99b-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.189.3.214/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860518, "uuid": "99e3e8e3-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.31.47.167/meth9", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860518, "uuid": "9a0b9c46-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.31.47.167/meth2", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860518, "uuid": "9a0ba30a-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.35.94/bins/F1ZuLSI08nevvv8ajKmMY8ckBd7Rx0thZ9", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860518, "uuid": "9a10209b-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.225/bins/i5xEhF4tg7UPMx6BttTvUtaRdOyEv0tK3y", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860518, "uuid": "9a1295b7-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.225/bins/MICnUsmJ8ZZF70vAYrsofKvXbbbftNWvkk", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860519, "uuid": "9a1b03f8-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.35.94/bins/P73yGtelIEZXnBS9BBzTyl0uyHu82CeXhU", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860519, "uuid": "9a1b742d-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.38.42.17/1736805661_7dd4d424c28504c1ac7df365c717416b/firmware.safe.armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860519, "uuid": "9a50ec61-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.35.94/bins/1i1dtoflPOno06xfWfx1fAGChrwJZKgMlV", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860519, "uuid": "9a60be5b-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.38.42.17/1736805661_7dd4d424c28504c1ac7df365c717416b/firmware.safe.armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860519, "uuid": "9a6ea7b9-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.225/bins/qGoyQYB6Fa4PRxTBLZqVfHDBbnGJL3DGQX", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860519, "uuid": "9a7008d3-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.38.42.17/1736805661_7dd4d424c28504c1ac7df365c717416b/firmware.safe.mips.dbg", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860519, "uuid": "9a7b1a01-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.35.94/bins/Qe6ll4jqW5x5szVPGGhWh5xC0i7UoZoKsI", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860519, "uuid": "9a954c36-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.35.94/bins/uRUBOeulRNf6TxNOIp7ppxi7A35pJuZ2ZL", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860520, "uuid": "9ad30220-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.225/bins/I5rQ8FkRUFhbGhEGsxHRM8uyH90X5aLhXx", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860520, "uuid": "9ae0bfd2-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.159.149/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860521, "uuid": "9b8984a4-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.35.94/bins/jf9iH7C4rKpFKT8Lr4DcGwINPbAMLmWtma", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860521, "uuid": "9b98de13-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.225/bins/tXX4tXUmswRx9bGwVfE2vyGCMEdP5nYMxU", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860522, "uuid": "9beef5ca-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.31.47.167/meth13", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860522, "uuid": "9c298fe8-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.35.94/bins/8cV5npNqkVBdJezh5qsq6ySKdpcNtqrOqv", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860522, "uuid": "9c791827-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.110.99.68/p-p.c-.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860522, "uuid": "9c795424-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.110.99.68/a-r.m-7.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860523, "uuid": "9d0b2f9b-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.110.99.68/s-h.4-.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860524, "uuid": "9d8267d7-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.159.149/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860524, "uuid": "9da8a585-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.225/bins/4vdlLIudcU2ETdEyjfXETGSs5k5wtEic7S", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860525, "uuid": "9de15b32-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.189.3.214/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860525, "uuid": "9df31b3e-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.31.47.167/meth5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860525, "uuid": "9df75f07-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.95.72.10/a-r.m-5.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860525, "uuid": "9dfdc54e-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.31.47.167/meth6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860525, "uuid": "9e00e1ea-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.31.47.167/meth11", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860525, "uuid": "9e04c7c9-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.95.72.10/x-8.6-.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860525, "uuid": "9e181a7b-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.31.47.167/meth15", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860525, "uuid": "9e1aaaed-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.159.149/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860525, "uuid": "9e20bc0f-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.95.72.10/p-p.c-.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860525, "uuid": "9e2f32b6-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.95.73.77/rebirth.m68", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860525, "uuid": "9e3f8c72-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218/garm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860526, "uuid": "9e4cd3ed-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.95.73.77/rebirth.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860526, "uuid": "9e589a20-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.95.73.77/rebirth.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860526, "uuid": "9e59a634-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.95.73.77/rebirth.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860526, "uuid": "9e704ddb-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.159.149/arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860526, "uuid": "9e73c876-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.95.72.10/a-r.m-7.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860526, "uuid": "9e8dab1e-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.110.99.68/i-5.8-6.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860526, "uuid": "9eae415a-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.31.47.167/meth7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860526, "uuid": "9eb1483b-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.189.3.214/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860526, "uuid": "9ebf6567-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.95.73.77/rebirth.arm4t", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860527, "uuid": "9ee93b37-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.110.99.68/a-r.m-6.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860527, "uuid": "9ee9b30c-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.110.99.68/m-6.8-k.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860527, "uuid": "9f0623c2-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.225/bins/vngk5wLjMOgt3Ei2Y1AWCiFShRBztEjqoT", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860527, "uuid": "9f16f4f9-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.189.3.214/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860527, "uuid": "9f1953ec-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.225/bins/bRu58MPHhtTHsnhMhVLdUjyiueYlhthlvv", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860527, "uuid": "9f1e9bc7-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.95.72.10/m-6.8-k.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860527, "uuid": "9f55d8b4-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.38.42.17/1736805661_7dd4d424c28504c1ac7df365c717416b/firmware.safe.armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860527, "uuid": "9f6f74ee-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.38.42.17/1736805661_7dd4d424c28504c1ac7df365c717416b/firmware.safe.armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860527, "uuid": "9f718236-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.31.47.167/meth10", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860528, "uuid": "9fc4653c-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.31.47.167/meth3", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860528, "uuid": "9fcb19f1-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.31.47.167/meth8", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860528, "uuid": "9fd6b489-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.157.247.79/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860528, "uuid": "9fec782d-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218/garm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860528, "uuid": "9ff18a21-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.189.3.214/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860529, "uuid": "a010301b-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.95.72.10/a-r.m-6.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860529, "uuid": "a01ed209-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.31.47.167/meth1", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860529, "uuid": "a025b33b-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.189.3.214/debug.dbg", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860537, "uuid": "a5072e5e-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.31.47.48/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860537, "uuid": "a528a9b5-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.31.47.48/nsharm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860540, "uuid": "a6a0705a-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.31.47.48/nshmpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860540, "uuid": "a6ba1442-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.31.47.48/nshsh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860541, "uuid": "a75ad91d-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.31.47.48/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860541, "uuid": "a7727e20-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.31.47.48/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860542, "uuid": "a83d6bfb-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.31.47.48/nshppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860544, "uuid": "a972b054-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.31.47.48/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860548, "uuid": "abe1e946-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.31.47.48/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860550, "uuid": "aca396a5-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.31.47.48/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860550, "uuid": "ad0c1e69-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.31.47.48/nshmips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860551, "uuid": "ad9e44c7-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.31.47.48/hmips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860551, "uuid": "ada31fc3-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.31.47.48/nsharm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860554, "uuid": "af063a56-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.31.47.48/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860554, "uuid": "af623f9f-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.31.47.48/nsharm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860556, "uuid": "b06e6c5b-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.31.47.48/nsharm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860556, "uuid": "b07fe1b1-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.31.47.48/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860566, "uuid": "b64f9d68-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.159.149/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860566, "uuid": "b672a6a7-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.95.72.10/a-r.m-4.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860566, "uuid": "b678aa01-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.95.73.77/rebirth.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860566, "uuid": "b68350ae-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.95.73.77/rebirth.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860566, "uuid": "b69b9b76-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.95.72.10/m-p.s-l.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860566, "uuid": "b69f918a-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.95.72.10/s-h.4-.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860566, "uuid": "b6a0d423-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.95.73.77/rebirth.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860566, "uuid": "b6a50988-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.95.72.10/x-3.2-.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860566, "uuid": "b6a80fca-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.95.73.77/rebirth.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860566, "uuid": "b6af22b0-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.95.72.10/m-i.p-s.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860566, "uuid": "b6afc4f1-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.95.73.77/rebirth.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860627, "uuid": "da8e2258-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.180.12.11:33655/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860641, "uuid": "e32a7fd7-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.164.242:44103/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860685, "uuid": "fd88f018-d279-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://antibot-check.sbs/captcha", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860751, "uuid": "24acbe1a-d27a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.88.182.177:57951/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860868, "uuid": "6a694cfc-d27a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.107.98.51:54699/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860926, "uuid": "8ce70c6a-d27a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.82.210:60417/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736860929, "uuid": "8eb6751e-d27a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.248.100.156:46403/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736861285, "uuid": "633ce67f-d27b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.241.82:52643/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736861411, "uuid": "adff9465-d27b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.180.12.11:33655/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736861411, "uuid": "ae3ae9d7-d27b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.222.65:49421/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736861469, "uuid": "d09b5900-d27b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.77.47.241:60439/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736861470, "uuid": "d0f63dd9-d27b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.221.121:54907/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736861536, "uuid": "f87fffbb-d27b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.67.99:46718/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736861631, "uuid": "31512727-d27c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.63.201:59361/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736861646, "uuid": "39e367c8-d27c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.252.169:50091/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736861648, "uuid": "3b4b3e2a-d27c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.234.14.172:43227/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736861654, "uuid": "3ee04fb1-d27c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.118.160:60160/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736861657, "uuid": "408c2cf1-d27c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.2.122:50108/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736861826, "uuid": "a579ab70-d27c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.4.14:50698/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736861827, "uuid": "a5eaa1de-d27c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.115.144:38589/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736862066, "uuid": "346bef8c-d27d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.151.74.226:41621/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736862246, "uuid": "9f955b74-d27d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.82.210:60417/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736862310, "uuid": "c5f9124a-d27d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.248.100.156:46403/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736862546, "uuid": "52b94b9a-d27e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.239.70.118:34390/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736862546, "uuid": "52bd9a69-d27e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.107.98.51:54699/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736862561, "uuid": "5b7ab46c-d27e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.206.88:47893/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736862608, "uuid": "777869f6-d27e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.30.215:60471/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736862846, "uuid": "05433dac-d27f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.221.121:54907/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736862965, "uuid": "4c41c809-d27f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.159.149/bins/x86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736862966, "uuid": "4d111fa2-d27f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.28.145:40794/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736862966, "uuid": "4d152d4c-d27f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.23.212:36389/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736862966, "uuid": "4d2aef1f-d27f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.49.148:42644/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736862967, "uuid": "4d3a25c1-d27f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.151.74.226:41621/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736862967, "uuid": "4d440c00-d27f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.239.217:51675/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736862967, "uuid": "4d451808-d27f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.79.211:46146/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736862969, "uuid": "4ee2703e-d27f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.131.52:52591/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736863167, "uuid": "c50146ee-d27f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.172.126:50286/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736863216, "uuid": "e20df546-d27f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.63.201:59361/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736863326, "uuid": "235469c9-d280-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.4.14:50698/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736863385, "uuid": "46e91b73-d280-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.89.141:47023/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736863447, "uuid": "6b63eb92-d280-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.166.62.29:48517/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736863565, "uuid": "b1fa8ec1-d280-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.247.236:45103/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736864047, "uuid": "d11a648c-d281-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.221.240.52:38668/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736864109, "uuid": "f5f1621e-d281-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.30.215:60471/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736864109, "uuid": "f633b7e5-d281-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://ay9.s3.us-east-2.amazonaws.com/win.exe", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736864175, "uuid": "1d48b39a-d282-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://nirocloud.com/download.html", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736864256, "uuid": "4db98a42-d282-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.253.170:55603/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736864364, "uuid": "8e64a433-d282-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.0.227:48040/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736864367, "uuid": "8fb719b6-d282-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.7.243:35084/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736864368, "uuid": "9070c49f-d282-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.31.61:41966/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736864464, "uuid": "c9b12cd7-d282-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://161.35.127.139/recaptcha-verify", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736864586, "uuid": "12a05e84-d283-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://amazon-ny-gifts.com/shellsajshdasd/ftpaksjdkasdjkxnckzxn/ywOVkkem.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736864645, "uuid": "35d0bdee-d283-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.21.41.165/Services.png", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736864708, "uuid": "5b19d1a0-d283-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.134.125:37619/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736864764, "uuid": "7cb89eb6-d283-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.32.40.22/recaptcha-verify", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736864771, "uuid": "80fd0c28-d283-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.172.126:50286/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736864826, "uuid": "a176b951-d283-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.211.177:55604/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736864826, "uuid": "a181c2c2-d283-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.152.20:34528/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736865186, "uuid": "78002e64-d284-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.168.5:51794/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736865186, "uuid": "786e5d6c-d284-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://ifuckyourpc.win/recaptcha-verify", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736865306, "uuid": "bf9838cf-d284-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://no.ssl.very-loves.tech/verification-success.html", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736865315, "uuid": "c4ef98c9-d284-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.238.189.72:40088/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736865485, "uuid": "2a90845d-d285-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.106.241:57870/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736865665, "uuid": "95898463-d285-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.101.108:50395/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736865788, "uuid": "df35fd87-d285-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.13.59.239:53131/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736866145, "uuid": "b3dc8706-d286-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.153.107.87:43925/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736866151, "uuid": "b74216a2-d286-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.186.189:60021/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736866325, "uuid": "1f4ea1a1-d287-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://irp.cdn-website.com/e2ffc6f1/files/uploaded/26.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736866326, "uuid": "1fdb007b-d287-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.190.194:48101/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736866387, "uuid": "44239b3f-d287-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://captcha-serve.com/1/30.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736866447, "uuid": "67832152-d287-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.238.189.72:40088/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736866566, "uuid": "ae9023c3-d287-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.235.193:36486/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736866577, "uuid": "b5592b28-d287-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.160.100:33839/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736866746, "uuid": "1a02c734-d288-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.182.166.79:57882/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736866856, "uuid": "5bc24e2a-d288-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.94.117:53362/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736866986, "uuid": "a927854a-d288-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.94.154:60447/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736866987, "uuid": "a99b113b-d288-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.88.164:51538/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736866987, "uuid": "a9a698c5-d288-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.95.192:50428/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736866988, "uuid": "a9f9710b-d288-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.84.44:58017/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736866988, "uuid": "aa00af2a-d288-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.98.112:59949/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736867002, "uuid": "b2cf3f53-d288-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.5.1.212:38404/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736867014, "uuid": "b9f83cef-d288-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.93:11365/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736867014, "uuid": "b9fb1f3c-d288-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.2.15:34975/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736867014, "uuid": "b9fd0190-d288-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.241:10991/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736867015, "uuid": "ba2a5a03-d288-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.21.168.217:45933/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736867015, "uuid": "ba3d6225-d288-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.178.249.223:10185/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736867047, "uuid": "cd89261a-d288-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.170.80:56372/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736867047, "uuid": "cd8a8ca3-d288-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.248.171:42108/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736867185, "uuid": "1f8e7178-d289-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.82.162:35058/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736867228, "uuid": "398bcaa8-d289-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.72.233:54167/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736867346, "uuid": "7fbecf5a-d289-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://wceecsit.international-confrence.com/wceecsit/a.txt", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736867410, "uuid": "a5aff463-d289-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.27.140:50883/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736867468, "uuid": "c81ed647-d289-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.13.59.239:53131/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736867524, "uuid": "e9f67546-d289-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/arm5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736867586, "uuid": "0eb7aa10-d28a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.182.166.79:57882/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736867904, "uuid": "cc1b69a0-d28a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.217.92:53540/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736867947, "uuid": "e5f79775-d28a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.62.5:42653/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868126, "uuid": "509ed2a2-d28b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.248.171:42108/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868308, "uuid": "bce0793f-d28b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.88.164:51538/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868365, "uuid": "df04c8f1-d28b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/c", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868365, "uuid": "df267e35-d28b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/bin", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868371, "uuid": "e244585e-d28b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/vc", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868371, "uuid": "e256bd55-d28b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/f5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868371, "uuid": "e256c92b-d28b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/sdt", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868371, "uuid": "e256cf66-d28b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/test.sh", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868371, "uuid": "e259192d-d28b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/ipc", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868371, "uuid": "e2591fef-d28b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/mag", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868371, "uuid": "e2592ac0-d28b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/multi", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868371, "uuid": "e25e4185-d28b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/asd", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868371, "uuid": "e264d6ea-d28b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/fdgsfg", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868371, "uuid": "e264e9e4-d28b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/wget.sh", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868371, "uuid": "e267ade3-d28b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/g", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868371, "uuid": "e267c330-d28b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/bt", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868371, "uuid": "e281154a-d28b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/bx", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868371, "uuid": "e2842f5f-d28b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/fb", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868371, "uuid": "e2848a5c-d28b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/zz", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868371, "uuid": "e28a1f88-d28b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/weed", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868371, "uuid": "e28abdc3-d28b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/tplink", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868371, "uuid": "e28bc2b9-d28b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/gocl", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868371, "uuid": "e28d9fd8-d28b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/mass.sh", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868371, "uuid": "e28e0ed4-d28b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/av.sh", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868371, "uuid": "e28e196b-d28b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/xaxa", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868371, "uuid": "e28e2181-d28b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/b", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868371, "uuid": "e28e78d5-d28b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/w.sh", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868371, "uuid": "e28eebeb-d28b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/aaa", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868371, "uuid": "e2904182-d28b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/r.sh", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868371, "uuid": "e2907f6f-d28b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/li", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868371, "uuid": "e2930261-d28b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/jaws", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868371, "uuid": "e293d246-d28b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/adb", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868371, "uuid": "e294d474-d28b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/irz", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868371, "uuid": "e296fc16-d28b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/ruck", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868371, "uuid": "e29ac81e-d28b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/z.sh", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868371, "uuid": "e2a0a361-d28b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/c.sh", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868371, "uuid": "e2a712fe-d28b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/linksys", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868426, "uuid": "0339b99d-d28c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/k.sh", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868426, "uuid": "033addf6-d28c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868426, "uuid": "033f4417-d28c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868426, "uuid": "033fee7b-d28c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/lll", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868426, "uuid": "035af9ee-d28c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868426, "uuid": "037eef5f-d28c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/toto", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868486, "uuid": "26e4ea46-d28c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43:8080/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868487, "uuid": "278f5a6b-d28c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.27.140:50883/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868546, "uuid": "4b25b2c9-d28c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.182.129:36261/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868731, "uuid": "b914f8ed-d28c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.123.127:55864/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868758, "uuid": "c9650baf-d28c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.168.5:51794/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868788, "uuid": "db53a471-d28c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.77.47.241:60439/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868848, "uuid": "feb9f0ef-d28c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.223.112:51412/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736868864, "uuid": "0893646a-d28d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.97.188:33553/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736869095, "uuid": "925fe34e-d28d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.101.248:56169/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736869386, "uuid": "3f68fa94-d28e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.217.92:53540/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736869509, "uuid": "889b660f-d28e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.88.164:51538/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736869626, "uuid": "ce751b65-d28e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.134.125:37619/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736869769, "uuid": "2392bd6f-d28f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.238.214:33182/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736869924, "uuid": "805f09d1-d28f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://x1ondfirmbok.com/captcha", "Tag": [ { "name": "fake_captcha", "colour": "#404bbd", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736869924, "uuid": "8080cf99-d28f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://1xbookeidient.info/captcha", "Tag": [ { "name": "fake_captcha", "colour": "#404bbd", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736869925, "uuid": "80890a0a-d28f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://res.cloudinary.com/dmwnmemcm/image/upload/v1736770712/mq8ht5gredx4ck4rramp.jpg%20", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736869925, "uuid": "808973af-d28f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://razer-partners.com/captcha", "Tag": [ { "name": "fake_captcha", "colour": "#404bbd", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736869925, "uuid": "80967cea-d28f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://solve.xfzz.org/awjsx.captcha", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "Lumma", "colour": "#4dc764", "exportable": true, "hide_tag": false }, { "name": "Lumma Stealer", "colour": "#904a2d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736869925, "uuid": "8098fbc3-d28f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://storage.googleapis.com/hqyoqzatqthj/aemmfcylvxeo.html", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736869925, "uuid": "80b8e380-d28f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://0x1531.info/captcha", "Tag": [ { "name": "fake_captcha", "colour": "#404bbd", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736869926, "uuid": "813dcdb5-d28f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.157.231:50488/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736869926, "uuid": "814678ca-d28f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://fixecondfirbook.info/captcha", "Tag": [ { "name": "fake_captcha", "colour": "#404bbd", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736869927, "uuid": "81fae652-d28f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://securebookingid8987.com/captcha", "Tag": [ { "name": "fake_captcha", "colour": "#404bbd", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736869928, "uuid": "8274d07b-d28f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://combo.s3.eu-north-1.amazonaws.com/stikontemplate2.1.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736869933, "uuid": "85b451c4-d28f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://securbookinid.com/captcha", "Tag": [ { "name": "fake_captcha", "colour": "#404bbd", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736870285, "uuid": "57935958-d290-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.123.127:55864/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736870300, "uuid": "60684a8a-d290-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.240.38:57753/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736870345, "uuid": "7b24b07f-d290-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.157.231:50488/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736870484, "uuid": "ce0936b5-d290-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.116.198:49026/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736870653, "uuid": "3280cb2a-d291-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.214.222:50349/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736870826, "uuid": "99c2f376-d291-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.101.248:56169/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736870891, "uuid": "c0c3803a-d291-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.246.159.93:52054/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736871486, "uuid": "22f69669-d293-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.27.127:36400/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736871490, "uuid": "25a38fcd-d293-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.153.44:47752/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736871546, "uuid": "4721e1aa-d293-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.118.240.42:50700/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736871567, "uuid": "53406c1d-d293-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.117.222:39204/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736871610, "uuid": "6d4e3978-d293-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.45.56.34:48383/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736871611, "uuid": "6dc59b2a-d293-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.16.113:38961/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736871725, "uuid": "b1aaebaf-d293-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.122.255.155:46238/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736871727, "uuid": "b2ab9dcb-d293-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.44.158:57688/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736871727, "uuid": "b2e139fc-d293-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.193.154:56783/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736871728, "uuid": "b39153f2-d293-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.29.11:46527/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736871729, "uuid": "b44e7c19-d293-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.102.154:38431/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736871981, "uuid": "4a618bf4-d294-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.214.222:50349/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736872212, "uuid": "d3accf90-d294-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.116.198:49026/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736872331, "uuid": "1afbf9fe-d295-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.243.161:37300/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736872332, "uuid": "1b99b4d1-d295-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://razer-partners.com/captcha/out.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736872447, "uuid": "5ff2bbb5-d295-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.202.70.164:40323/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736872508, "uuid": "846e9afa-d295-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.246.159.93:52054/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736872508, "uuid": "84a11f71-d295-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.207.143:60133/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736872568, "uuid": "a814df19-d295-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.53.95.143:39548/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736872687, "uuid": "eee1dcba-d295-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.86.160:48286/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736872747, "uuid": "12b9eb5a-d296-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.151.14.140:41398/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736872867, "uuid": "5a34833e-d296-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.225.42:47480/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736873046, "uuid": "c52fb83c-d296-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.198.129.238:34583/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736873166, "uuid": "0c9606c4-d297-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.102.154:38431/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736873176, "uuid": "1255befc-d297-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.87.228:53454/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736873287, "uuid": "549b0a3f-d297-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://153.171.22.30:55046/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736873295, "uuid": "595bfd93-d297-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.75.221:60707/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736873347, "uuid": "788cbe0e-d297-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.37.173.176:32907/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736873649, "uuid": "2c6d0ee0-d298-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.42.44.72:34654/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736873826, "uuid": "95daa220-d298-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.216.88:60629/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736873946, "uuid": "dd9444c0-d298-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.207.143:60133/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736873946, "uuid": "ddca4e36-d298-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.10.11.251:58364/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736873947, "uuid": "de00516f-d298-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.29.236:47308/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736874068, "uuid": "26556449-d299-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.53.95.143:39548/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736874246, "uuid": "9071332a-d299-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.86.160:48286/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736874246, "uuid": "9073a722-d299-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.67.153:54071/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736874427, "uuid": "fc52961d-d299-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.122.184.98/1/3.png", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736874427, "uuid": "fc57e358-d299-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.122.184.98/1/2.png", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736874427, "uuid": "fc6fe94c-d299-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.247.158.212/1/1.png", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736874427, "uuid": "fc7f0bcf-d299-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.247.158.212/1/3.png", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736874486, "uuid": "1f4381b3-d29a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.122.184.98/1/1.png", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736874486, "uuid": "1f4ad8bb-d29a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.247.158.212/1/2.png", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736874487, "uuid": "1fc36692-d29a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.13.60.243:47318/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736874726, "uuid": "aea2124a-d29a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.139.198:45417/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736874787, "uuid": "d29c2c7f-d29a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://153.171.22.30:55046/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736874788, "uuid": "d39c08bc-d29a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.42.44.72:34654/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736874846, "uuid": "f623b0f6-d29a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.75.221:60707/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736874908, "uuid": "1ae579ca-d29b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.37.173.176:32907/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736875147, "uuid": "a938106e-d29b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.154.71:41605/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736875148, "uuid": "a9da02eb-d29b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.167.185:52110/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736875165, "uuid": "b3ddd432-d29b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.247.73:56577/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736875325, "uuid": "13c2001c-d29c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://conn.masjesu.zip/.shell", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736875389, "uuid": "39d052b2-d29c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.214.129:51195/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736875446, "uuid": "5bb1fc18-d29c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.29.236:47308/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736875629, "uuid": "c8c8ece3-d29c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.103.77:53271/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736875686, "uuid": "ea88b451-d29c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.67.153:54071/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736875872, "uuid": "59cb5e0d-d29d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.79.218:36882/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736875988, "uuid": "9e7d83b1-d29d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://conn.masjesu.zip/bins/6gJcDLFTVUv9m35GoCMCh3NMqx5QpnksJB", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736875988, "uuid": "9e7d8f7e-d29d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://conn.masjesu.zip/bins/Mst8VdtcVsTars7XAouVeuxl3eiWhXIaTI", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736875988, "uuid": "9e8697f8-d29d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://conn.masjesu.zip/bins/a5Ta03cVpXDIE2W70gosHi7t37xjK2BMeU", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736875988, "uuid": "9e885354-d29d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://conn.masjesu.zip/bins/LjfypoaYe7ay9BmPkkxw8CRDeECKIvgNRi", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736875988, "uuid": "9e9d12d9-d29d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://conn.masjesu.zip/bins/nHArVNiStWEfO6lMHokL2aYAQplzS2KTvg", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736875988, "uuid": "9eb67b56-d29d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://conn.masjesu.zip/bins/QNo4qkFJ7Qlks8mSOiSXee654Gwd4o8vaS", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736875988, "uuid": "9eba7adf-d29d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://conn.masjesu.zip/bins/ti5Hncn9MkVXnBEh8HF5TXO4SWYC3kf7Xz", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736875988, "uuid": "9eba95f1-d29d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://conn.masjesu.zip/bins/kntdHpt8nfw8o5ZwzTiFoE2Y36Rq78PLr3", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736875988, "uuid": "9ebaa896-d29d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://conn.masjesu.zip/bins/aCFtfPcuS6JvIaYg0dvVKiEXhpO8aCBN8A", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736875988, "uuid": "9ebac9e6-d29d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://conn.masjesu.zip/bins/1EdrfNdzaNZywNpOnRq5BrHCh9rvjbO354", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736875988, "uuid": "9eca6f27-d29d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://conn.masjesu.zip/bins/QpmxGwOSzvQokvVIhbPEVgzdhN8aYELchx", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736875988, "uuid": "9ecfa3fc-d29d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://conn.masjesu.zip/bins/h0WH5gKxalNQphDqLp0RBq3yXNP9T6uOfv", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736875988, "uuid": "9ecfa61b-d29d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://conn.masjesu.zip/bins/tKWjmhQcjQThH8GbRMNMu9SgQpgMCaKvpp", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736876046, "uuid": "c0edf2b5-d29d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://conn.masjesu.zip/bins/DIrRgPSjElL0V5N4TTPZVBMCQDGDSkPzJw", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736876047, "uuid": "c1af910e-d29d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.153.67:40154/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736876110, "uuid": "e7272e80-d29d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.45.183:59918/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736876229, "uuid": "2e4ec449-d29e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.187.248.129:40851/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736876347, "uuid": "74874392-d29e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.15.26.61:44830/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736876647, "uuid": "273b31cb-d29f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.89.11:40492/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736876647, "uuid": "27b9e092-d29f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.167.185:52110/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736876663, "uuid": "3140836e-d29f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.106.76:49108/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736876709, "uuid": "4c4fde64-d29f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.3.148:42580/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736876886, "uuid": "b62d973e-d29f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.45.110:47122/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736876948, "uuid": "dac71b92-d29f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.214.129:51195/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736877010, "uuid": "001394c6-d2a0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://traefik-dashboard.val.io.vn/la.bot.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736877011, "uuid": "009ce1c7-d2a0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://traefik-dashboard.val.io.vn/arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736877369, "uuid": "d5ee0d4a-d2a0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.189.213.59:58378/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736877427, "uuid": "f838986c-d2a0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.79.218:36882/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736877429, "uuid": "f95597a7-d2a0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.143.208:58465/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736877487, "uuid": "1be3de64-d2a1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.227.89.114:39798/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736877546, "uuid": "3f358d69-d2a1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.15.26.61:44830/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736877610, "uuid": "65b2db94-d2a1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.133.204.199:40077/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736877783, "uuid": "ccd2f39d-d2a1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.57.173.69:50093/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736877785, "uuid": "cd732e3c-d2a1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://sck-dns.cc/y", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736877785, "uuid": "cdde48ec-d2a1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://sck-dns.cc/c", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736877786, "uuid": "ce90c1b5-d2a1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.237.5:32842/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736877787, "uuid": "cec85353-d2a1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.75.89:59982/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736877787, "uuid": "cf359086-d2a1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.21.157:42542/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736877788, "uuid": "cfa2d957-d2a1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://sck-dns.cc/bin", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736877794, "uuid": "d3035c84-d2a1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.81.42.108:55728/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736877814, "uuid": "dee061fd-d2a1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.38.0.147:39394/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736877814, "uuid": "dee08274-d2a1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.91:11698/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736877814, "uuid": "df390218-d2a1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.255.143:53193/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736877814, "uuid": "df39038a-d2a1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.201.241:43049/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736877847, "uuid": "f26bc459-d2a1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.223.231:59871/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736877847, "uuid": "f2fbac36-d2a1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.155.205:39886/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736877850, "uuid": "f44faac9-d2a1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.17.30:45753/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736877853, "uuid": "f6668e1c-d2a1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.129.29:52943/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736877853, "uuid": "f66fd9f9-d2a1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.210.101.107:42406/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736877875, "uuid": "03501385-d2a2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.85.79:43100/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736877923, "uuid": "1fd4f830-d2a2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.79.149:35860/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878026, "uuid": "5d6c080b-d2a2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.106.76:49108/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878026, "uuid": "5d802913-d2a2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.139.198:45417/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878447, "uuid": "58198a0b-d2a3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://vbtgsze.r-e.kr/dlr/dlr.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878447, "uuid": "583257d6-d2a3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://vbtgsze.r-e.kr/dlr/dlr.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878447, "uuid": "5835b7a1-d2a3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://vbtgsze.r-e.kr/dlr/dlr.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878447, "uuid": "583a19b4-d2a3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://vbtgsze.r-e.kr/dlr/dlr.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878447, "uuid": "583d1f47-d2a3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.247.236:45103/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878447, "uuid": "584fb68a-d2a3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://vbtgsze.r-e.kr/dlr/dlr.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878450, "uuid": "5a10a135-d2a3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.154.59:55750/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878508, "uuid": "7ce8f87d-d2a3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://vbtgsze.r-e.kr/dlr/dlr.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878508, "uuid": "7cee21d2-d2a3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://vbtgsze.r-e.kr/dlr/dlr.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878508, "uuid": "7cee688b-d2a3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://vbtgsze.r-e.kr/dlr/dlr.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878508, "uuid": "7cf15be7-d2a3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://vbtgsze.r-e.kr/dlr/dlr.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878508, "uuid": "7cf5d6c0-d2a3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://vbtgsze.r-e.kr/dlr/dlr.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878509, "uuid": "7d1d30a6-d2a3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://vbtgsze.r-e.kr/dlr/dlr.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878747, "uuid": "0ad5aa43-d2a4-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.214.110.81:49588/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878765, "uuid": "1599766a-d2a4-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.52.180:43466/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878867, "uuid": "527ee295-d2a4-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.71.80:60135/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736878926, "uuid": "760ac2a8-d2a4-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.120.89:44547/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879166, "uuid": "04b4803f-d2a5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.133.204.199:40077/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879226, "uuid": "287eddb1-d2a5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/quivingsnew/sadadads/refs/heads/main/Loader.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879226, "uuid": "288ef5dd-d2a5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.52.180:43466/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879286, "uuid": "4ca03325-d2a5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.205.250:60082/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879470, "uuid": "b9d8f0ff-d2a5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.23.212:36389/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879470, "uuid": "ba3b907e-d2a5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.164.209:50263/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879646, "uuid": "22dcb5a4-d2a6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.189.127/Fantazy.i486", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879646, "uuid": "22deaf18-d2a6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.189.127/Fantazy.arm6", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879646, "uuid": "22df6e17-d2a6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.189.127/Fantazy.sh4", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879646, "uuid": "22f3c171-d2a6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.189.127/Fantazy.ppc", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879646, "uuid": "22f4a1ef-d2a6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.189.127/Fantazy.arm5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879646, "uuid": "22f4b09d-d2a6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.189.127/Fantazy.sh", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879646, "uuid": "22f4b4be-d2a6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.189.127/Fantazy.arm7", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879646, "uuid": "22f7ba92-d2a6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.189.127/Fantazy.spc", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879646, "uuid": "231834fb-d2a6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.189.127/Fantazy.mpsl", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879646, "uuid": "2330bb43-d2a6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.189.127/Fantazy.arm4", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879646, "uuid": "2336f8f2-d2a6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.189.127/Fantazy/Fantazy.arm4", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879647, "uuid": "237d868f-d2a6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.189.127/Fantazy.i686", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879647, "uuid": "237dab42-d2a6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.189.127/Fantazy.m68k", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879648, "uuid": "23f6cd62-d2a6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.189.127/Fantazy.x86", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879648, "uuid": "23f9e68e-d2a6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.189.127/Fantazy.mips", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879648, "uuid": "23fe9b4d-d2a6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.189.127/Fantazy.x86_64", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736879648, "uuid": "24044a22-d2a6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.189.127/Fantazy.arc", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736880426, "uuid": "f3dfb951-d2a7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.71.80:60135/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736880426, "uuid": "f3e034e7-d2a7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.215.181:34232/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736880545, "uuid": "3adc4a1d-d2a8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.40.207:55780/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736880546, "uuid": "3b5f32c8-d2a8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.120.89:44547/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736880553, "uuid": "3fd1cfa8-d2a8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.242.11:36854/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736880610, "uuid": "614d865b-d2a8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.206.153:47508/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736880785, "uuid": "ca0f84bc-d2a8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.103.44:53945/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736880786, "uuid": "ca5fef23-d2a8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.24.197:59406/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736880907, "uuid": "12bb2ec6-d2a9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.164.209:50263/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881146, "uuid": "a0e68350-d2a9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.103.77:53271/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881508, "uuid": "78e78fc0-d2aa-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.60.179.43:38495/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881655, "uuid": "d032ae4a-d2aa-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.10.203:34338/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881690, "uuid": "e5137774-d2aa-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://chernobyl.stressing.world/Fantazy.mpsl", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881690, "uuid": "e5285f95-d2aa-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://chernobyl.stressing.world/Fantazy.ppc", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881690, "uuid": "e528af16-d2aa-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://chernobyl.stressing.world/Fantazy.arm7", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881690, "uuid": "e5290255-d2aa-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://chernobyl.stressing.world/Fantazy.arc", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881690, "uuid": "e52c6dea-d2aa-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://chernobyl.stressing.world/Fantazy/Fantazy.arc", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881690, "uuid": "e52c9c91-d2aa-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://chernobyl.stressing.world/Fantazy.arm5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881690, "uuid": "e53061f7-d2aa-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://chernobyl.stressing.world/Fantazy/Fantazy.arm5", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881690, "uuid": "e5340b33-d2aa-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://chernobyl.stressing.world/Fantazy/Fantazy.x86_64", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881690, "uuid": "e5340fbf-d2aa-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://chernobyl.stressing.world/Fantazy.spc", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881690, "uuid": "e53439d6-d2aa-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://chernobyl.stressing.world/Fantazy.i686", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881690, "uuid": "e53db282-d2aa-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://chernobyl.stressing.world/Fantazy/Fantazy.arm6", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881690, "uuid": "e543172d-d2aa-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://chernobyl.stressing.world/Fantazy/Fantazy.mpsl", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881690, "uuid": "e5465689-d2aa-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://chernobyl.stressing.world/Fantazy/Fantazy.i686", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881690, "uuid": "e5486544-d2aa-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://chernobyl.stressing.world/Fantazy/Fantazy.ppc", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881690, "uuid": "e548945b-d2aa-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://chernobyl.stressing.world/Fantazy/Fantazy.i486", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881690, "uuid": "e557b5fd-d2aa-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://chernobyl.stressing.world/Fantazy/Fantazy.sh4", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881690, "uuid": "e5600d0f-d2aa-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://chernobyl.stressing.world/Fantazy.x86", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881690, "uuid": "e5638a6c-d2aa-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://chernobyl.stressing.world/Fantazy.x86_64", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881690, "uuid": "e5674fce-d2aa-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://chernobyl.stressing.world/Fantazy.mips", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881690, "uuid": "e567e006-d2aa-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://chernobyl.stressing.world/Fantazy.arm6", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881690, "uuid": "e56a2bdd-d2aa-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://chernobyl.stressing.world/Fantazy/Fantazy.arm7", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881690, "uuid": "e570fe7d-d2aa-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://chernobyl.stressing.world/Fantazy/Fantazy.x86", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881690, "uuid": "e5722671-d2aa-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://chernobyl.stressing.world/Fantazy.sh4", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881690, "uuid": "e573e4d3-d2aa-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://chernobyl.stressing.world/Fantazy/Fantazy.m68k", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881690, "uuid": "e5757e61-d2aa-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://chernobyl.stressing.world/Fantazy.i486", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881690, "uuid": "e579d5e6-d2aa-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://chernobyl.stressing.world/Fantazy/Fantazy.arm4", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881690, "uuid": "e57c8439-d2aa-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://chernobyl.stressing.world/Fantazy/Fantazy.mips", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881706, "uuid": "eef90957-d2aa-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.56.9:38943/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881745, "uuid": "05d6b3b8-d2ab-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://chernobyl.stressing.world/Fantazy.arm4", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881745, "uuid": "05de6546-d2ab-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://chernobyl.stressing.world/Fantazy.m68k", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881745, "uuid": "05e9f5bc-d2ab-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://chernobyl.stressing.world/Fantazy/Fantazy.spc", "Tag": [ { "name": "1049h", "colour": "#944cb5", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881810, "uuid": "2c963ff3-d2ab-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.231.126:36708/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736881810, "uuid": "2cc3b714-d2ab-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.26.109:60466/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882348, "uuid": "6d42514a-d2ac-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.229.80:42891/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882585, "uuid": "face99a6-d2ac-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.140.231/ISIS.sh", "Tag": [ { "name": "31mOfficial", "colour": "#10dab2", "exportable": true, "hide_tag": false }, { "name": "31mQbot", "colour": "#04fda1", "exportable": true, "hide_tag": false }, { "name": "31mUsername", "colour": "#48097f", "exportable": true, "hide_tag": false }, { "name": "36mPryoxis", "colour": "#689add", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Pryoxis", "colour": "#4cdb40", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882765, "uuid": "661eb92e-d2ad-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.71.252.26/botpilled/rbot", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882827, "uuid": "8af3c8f0-d2ad-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.133.74.89/bot.mpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882827, "uuid": "8b0c9d38-d2ad-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.133.74.89/bot.x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882827, "uuid": "8b0f4122-d2ad-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.133.74.89/bot.sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882827, "uuid": "8b1dc2bd-d2ad-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.133.74.89/bot.arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882827, "uuid": "8b22f2cd-d2ad-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.133.74.89/bot.arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882828, "uuid": "8b4e01f5-d2ad-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.107.139:54502/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882828, "uuid": "8b75adb5-d2ad-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.45.198:38812/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882886, "uuid": "ae084a2e-d2ad-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.133.74.89/bot.arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882886, "uuid": "ae177554-d2ad-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.133.74.89/bot.arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882886, "uuid": "ae200e1b-d2ad-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.133.74.89/bot.ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882886, "uuid": "ae2c3090-d2ad-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.133.74.89/bot.m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882945, "uuid": "d18a25f0-d2ad-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.133.74.89/bot.x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882945, "uuid": "d18a663c-d2ad-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.133.74.89/bot.mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882946, "uuid": "d1b1c2dd-d2ad-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.159.209.8/bins/bins.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736882947, "uuid": "d24d533f-d2ad-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.166.214.136:38160/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883012, "uuid": "f94751ac-d2ad-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.60.179.43:38495/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883071, "uuid": "1c73fab5-d2ae-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.56.9:38943/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883187, "uuid": "61b6a4fb-d2ae-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.25.106:33947/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883247, "uuid": "856d6266-d2ae-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://crystalc2.duckdns.org/bot.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883247, "uuid": "8579b4fb-d2ae-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://crystalc2.duckdns.org/bot.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883247, "uuid": "857a1f79-d2ae-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://crystalc2.duckdns.org/bot.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883247, "uuid": "857ceed0-d2ae-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://crystalc2.duckdns.org/bot.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883247, "uuid": "8588a97c-d2ae-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://crystalc2.duckdns.org/bot.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883247, "uuid": "859399d7-d2ae-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.49.65.96:41155/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883247, "uuid": "8598a142-d2ae-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://crystalc2.duckdns.org/bot.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883248, "uuid": "85a59190-d2ae-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.222.152.2:49962/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883248, "uuid": "86347278-d2ae-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://crystalc2.duckdns.org/bot.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883313, "uuid": "ac95d2ab-d2ae-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://crystalc2.duckdns.org/bot.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883313, "uuid": "ac99327d-d2ae-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://crystalc2.duckdns.org/bot.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883313, "uuid": "ac9f5e29-d2ae-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://crystalc2.duckdns.org/bot.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883315, "uuid": "adcdd810-d2ae-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://crystalc2.duckdns.org/bot.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883366, "uuid": "cc75c9c9-d2ae-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.231.126:36708/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883366, "uuid": "cc8bcff6-d2ae-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.26.109:60466/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883427, "uuid": "f07cfb65-d2ae-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.53.55.82:51886/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883547, "uuid": "38150c88-d2af-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.29.56:59007/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883547, "uuid": "3864438b-d2af-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.48.108.19/main.m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883547, "uuid": "38693800-d2af-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.48.108.19/main.arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883547, "uuid": "38696711-d2af-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.48.108.19/main.x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883548, "uuid": "38758833-d2af-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.48.108.19/main.ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883548, "uuid": "3878d992-d2af-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.48.108.19/phantom.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883548, "uuid": "3878ddb5-d2af-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.48.108.19/main.x64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883548, "uuid": "38796ef0-d2af-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.48.108.19/main.arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883548, "uuid": "38798922-d2af-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.48.108.19/main.mpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883548, "uuid": "38798acf-d2af-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.48.108.19/main.arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883548, "uuid": "387cb5fd-d2af-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.48.108.19/main.sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883548, "uuid": "387d45c2-d2af-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.48.108.19/main.mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883786, "uuid": "c670412b-d2af-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.206.153:47508/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883847, "uuid": "ead8a223-d2af-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://xy.jzhh.pro/phantom.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883847, "uuid": "eb3ed2bb-d2af-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://xy.jzhh.pro/main.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883847, "uuid": "eb3edf03-d2af-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://xy.jzhh.pro/main.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883847, "uuid": "eb3ee2b7-d2af-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://xy.jzhh.pro/main.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883847, "uuid": "eb3ef436-d2af-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://xy.jzhh.pro/main.x64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883848, "uuid": "eb5ca46e-d2af-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://xy.jzhh.pro/main.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883848, "uuid": "eb5cc984-d2af-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://xy.jzhh.pro/main.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883848, "uuid": "eb6b88dd-d2af-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://xy.jzhh.pro/main.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883848, "uuid": "eb6b8931-d2af-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://xy.jzhh.pro/main.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883848, "uuid": "eb6c4d58-d2af-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.35.100:60650/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883848, "uuid": "eb6fa59c-d2af-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://xy.jzhh.pro/main.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736883848, "uuid": "eb926f71-d2af-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://xy.jzhh.pro/main.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884028, "uuid": "56d180ef-d2b0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.75.127:44913/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884028, "uuid": "5700f9c0-d2b0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://xinglian.us.kg/main_mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884028, "uuid": "5712bf5f-d2b0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://xinglian.us.kg/main_x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884029, "uuid": "5737d44a-d2b0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://xinglian.us.kg/main_arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884029, "uuid": "573c275c-d2b0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://xinglian.us.kg/main_x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884029, "uuid": "573c2c8c-d2b0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://xinglian.us.kg/main_mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884029, "uuid": "57521f10-d2b0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://xinglian.us.kg/main_ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884029, "uuid": "575266c9-d2b0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://database.sempulurpratamapapua.net/main_ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884029, "uuid": "575432d3-d2b0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://xinglian.us.kg/main_arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884029, "uuid": "575dc40c-d2b0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://xinglian.us.kg/main_arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884029, "uuid": "57620001-d2b0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://xinglian.us.kg/main_sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884029, "uuid": "5768dcb8-d2b0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://database.sempulurpratamapapua.net/main_arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884029, "uuid": "57723b59-d2b0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://database.sempulurpratamapapua.net/main_arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884029, "uuid": "57735137-d2b0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://xinglian.us.kg/main_arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884029, "uuid": "5774fe01-d2b0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://database.sempulurpratamapapua.net/main_mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884029, "uuid": "577504f6-d2b0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://database.sempulurpratamapapua.net/main_sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884029, "uuid": "57751152-d2b0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://database.sempulurpratamapapua.net/main_m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884029, "uuid": "57777238-d2b0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://database.sempulurpratamapapua.net/main_mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884029, "uuid": "5777739c-d2b0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://database.sempulurpratamapapua.net/main_arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884029, "uuid": "57777809-d2b0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://database.sempulurpratamapapua.net/main_x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884029, "uuid": "57777fd4-d2b0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://database.sempulurpratamapapua.net/main_arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884029, "uuid": "5780ae69-d2b0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://xinglian.us.kg/main_m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884029, "uuid": "578fa659-d2b0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://database.sempulurpratamapapua.net/main_x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884149, "uuid": "9ee0958d-d2b0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.34.12.88:60034/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884208, "uuid": "c223a316-d2b0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.186.95:48713/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884267, "uuid": "e54ba8d5-d2b0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.166.214.136:38160/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884267, "uuid": "e567b0b2-d2b0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.45.198:38812/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884328, "uuid": "0996d863-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.8.27.105/spc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884328, "uuid": "09a24bf8-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.8.27.105/mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884328, "uuid": "09ee5a1d-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.8.27.105/x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884329, "uuid": "0a26365c-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.8.27.105/m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884329, "uuid": "0a29debc-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.8.27.105/arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884329, "uuid": "0a29e512-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.8.27.105/arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884329, "uuid": "0a29e6af-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.8.27.105/mpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884329, "uuid": "0a5fcc00-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.8.27.105/arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884330, "uuid": "0a92bcc1-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.8.27.105/ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884387, "uuid": "2cca6dbf-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.8.27.105/debug.dbg", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884387, "uuid": "2cd390aa-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.8.27.105/sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884387, "uuid": "2cd7d9f4-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.8.27.105/x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884387, "uuid": "2cdd6e16-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.8.27.105/arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884447, "uuid": "507c4d40-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://killbaidu.top/arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884447, "uuid": "508f5ab3-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://killbaidu.top/spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884447, "uuid": "50959485-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://killbaidu.top/x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884447, "uuid": "50a91d84-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://killbaidu.top/x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884447, "uuid": "50b38960-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://killbaidu.top/arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884447, "uuid": "50c66025-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://killbaidu.top/ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884447, "uuid": "50c844c4-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://killbaidu.top/mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884448, "uuid": "514dde2e-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://killbaidu.top/debug.dbg", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884448, "uuid": "514ffe04-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://killbaidu.top/arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884448, "uuid": "516e2f1a-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://killbaidu.top/m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884449, "uuid": "518c02ea-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://killbaidu.top/sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884449, "uuid": "519d3adb-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://killbaidu.top/arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884449, "uuid": "51b64fde-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://killbaidu.top/mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884511, "uuid": "76fc9ce9-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.253.250.102/main_x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884511, "uuid": "76fe4d75-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.253.250.102/main_arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884511, "uuid": "76fed50d-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.253.250.102/main_x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884511, "uuid": "76fef834-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.253.250.102/main_m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884511, "uuid": "76ff59c3-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.253.250.102/bin/main_m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884511, "uuid": "7700cfb5-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.253.250.102/bin/main_arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884511, "uuid": "77042de6-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.253.250.102/bin/main_ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884511, "uuid": "770553a3-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.253.250.102/main_ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884511, "uuid": "77055c76-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.253.250.102/main_mpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884511, "uuid": "7705b72c-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.253.250.102/main_arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884511, "uuid": "770703a0-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.253.250.102/bin/main_mpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884511, "uuid": "77071aa8-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.253.250.102/bin/main_x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884511, "uuid": "7707661b-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.253.250.102/bin/main_x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884512, "uuid": "770c9533-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.253.250.102/main_sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884512, "uuid": "770fb64d-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.253.250.102/bin/main_arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884512, "uuid": "7712c427-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.253.250.102/bin/main_mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884512, "uuid": "771e1d27-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.253.250.102/bin/main_sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884512, "uuid": "7723e989-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.253.250.102/main_arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884512, "uuid": "774554fe-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.253.250.102/bin/main_arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884565, "uuid": "9705f6eb-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.253.250.102/bin/main_arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884625, "uuid": "bafa8b6d-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.253.250.102/main_arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884686, "uuid": "df50a3a4-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.hopto.org/main_arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884687, "uuid": "df662658-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.hopto.org/main_m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884687, "uuid": "df6cd441-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.hopto.org/main_mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884687, "uuid": "df6ce2ee-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.hopto.org/main_ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884687, "uuid": "df6d4aaa-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.hopto.org/main_sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884687, "uuid": "df6d4d36-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.hopto.org/main_x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884687, "uuid": "df6d5a17-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.hopto.org/main_arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884687, "uuid": "df6e9b1b-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.253.250.102/main_mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884687, "uuid": "df6fe6f6-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.hopto.org/main_mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884687, "uuid": "df7cea77-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.hopto.org/main_x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884687, "uuid": "df80ee0e-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.hopto.org/main_arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884687, "uuid": "df9065e2-d2b1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.hopto.org/main_arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884746, "uuid": "031622c4-d2b2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.hopto.org/bin/main_mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884747, "uuid": "031d0e01-d2b2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.hopto.org/bin/main_m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884747, "uuid": "0342b1f8-d2b2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.hopto.org/bin/main_sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884747, "uuid": "03489a89-d2b2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.hopto.org/bin/main_x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884747, "uuid": "034d8742-d2b2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.hopto.org/bin/main_arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884747, "uuid": "036a4db3-d2b2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.53.55.82:51886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884747, "uuid": "03716194-d2b2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.hopto.org/bin/main_arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884747, "uuid": "039b8d9e-d2b2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.hopto.org/bin/main_x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884748, "uuid": "03b88192-d2b2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.233.108:33370/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884811, "uuid": "299d8500-d2b2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.hopto.org/bin/main_arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884811, "uuid": "299d86ad-d2b2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.hopto.org/bin/main_ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884811, "uuid": "29b91c3c-d2b2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.hopto.org/bin/main_arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884813, "uuid": "2a7cba55-d2b2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.hopto.org/bin/main_mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884985, "uuid": "914c216f-d2b2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.205.170:44647/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736884985, "uuid": "918efb11-d2b2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.10.68.119:50399/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736885108, "uuid": "da942cb1-d2b2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.164.180:53934/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736885527, "uuid": "d426b91c-d2b3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.107.139:54502/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736885710, "uuid": "41226118-d2b4-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.5.138:44162/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736885886, "uuid": "aa7161d7-d2b4-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.133.28:48246/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736885946, "uuid": "ce104075-d2b4-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.134.71:43716/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886008, "uuid": "f33924fe-d2b4-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.8.236:49595/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886024, "uuid": "fcc7f6b8-d2b4-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.87.113:34261/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886185, "uuid": "5ca17e4f-d2b5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.233.108:33370/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886274, "uuid": "91494834-d2b5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.149.85:52710/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886309, "uuid": "a63b28c4-d2b5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.255.135.104/main_arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886309, "uuid": "a642334d-d2b5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.255.135.104/main_mpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886309, "uuid": "a6426374-d2b5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.255.135.104/main_arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886309, "uuid": "a643ea0a-d2b5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.255.135.104/main_ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886309, "uuid": "a64498d5-d2b5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.255.135.104/main_arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886309, "uuid": "a6449cc5-d2b5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.255.135.104/main_x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886309, "uuid": "a657ae80-d2b5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.255.135.104/main_mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886366, "uuid": "c880b5f7-d2b5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.255.135.104/main_arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886366, "uuid": "c88a30c3-d2b5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.255.135.104/main_m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886366, "uuid": "c898a6e0-d2b5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.133.28:48246/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886366, "uuid": "c8a568d1-d2b5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.255.135.104/main_x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886426, "uuid": "ec4930ec-d2b5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://c0vid.ddns.net/main_m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886426, "uuid": "ec4a680e-d2b5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://c0vid.ddns.net/main_arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886426, "uuid": "ec4b1974-d2b5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://c0vid.ddns.net/main_arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886426, "uuid": "ec4b1a64-d2b5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://c0vid.ddns.net/main_mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886426, "uuid": "ec4b216a-d2b5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://c0vid.ddns.net/main_x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886426, "uuid": "ec4b2e2f-d2b5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://c0vid.ddns.net/main_mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886426, "uuid": "ec4b32f0-d2b5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://c0vid.ddns.net/main_ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886426, "uuid": "ec6fc0ae-d2b5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.255.135.104/main_sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886427, "uuid": "ec85eb6b-d2b5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://c0vid.ddns.net/main_sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886427, "uuid": "eca1c17c-d2b5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://c0vid.ddns.net/main_arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886427, "uuid": "ecd14602-d2b5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://c0vid.ddns.net/main_x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886427, "uuid": "ece876b8-d2b5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://c0vid.ddns.net/main_arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886613, "uuid": "5bcc7773-d2b6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.2.31.158:37765/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886726, "uuid": "9ecc305b-d2b6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.179.7.32:49067/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736886741, "uuid": "a812cc57-d2b6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.29.56:59007/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887026, "uuid": "519d6eda-d2b7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.208.170.249:47534/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887215, "uuid": "c2ab8d47-d2b7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.203.220.189:56243/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887266, "uuid": "e0f515a6-d2b7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.5.138:44162/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887509, "uuid": "7183e093-d2b8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.241.2:56235/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887566, "uuid": "93f02932-d2b8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.134.71:43716/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887566, "uuid": "93f4e403-d2b8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.218.214:49320/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887763, "uuid": "08e73888-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.62.8:40407/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887990, "uuid": "90805abf-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99/k.sh", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887990, "uuid": "90940dab-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99/mass.sh", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887990, "uuid": "9095f854-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99/f5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887990, "uuid": "9096cfb1-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99/zz", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887990, "uuid": "909f16da-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99/aaa", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887991, "uuid": "90ba5481-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99/test.sh", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887991, "uuid": "90bc0900-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99/adb", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887991, "uuid": "90bc9f7f-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99/ruck", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887991, "uuid": "90bdc3fe-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99/vc", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887991, "uuid": "90be014f-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99/w.sh", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887991, "uuid": "90beb116-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99/ipc", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887991, "uuid": "90bf2c6c-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99/c.sh", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887991, "uuid": "90bf2ef0-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99/fb", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887991, "uuid": "90bfadfe-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99/g", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887991, "uuid": "90c0474b-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99/mag", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887991, "uuid": "90c08238-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99/linksys", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887991, "uuid": "90c1acd9-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99/multi", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887991, "uuid": "90c5f2dd-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99/z.sh", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887991, "uuid": "90db8f6c-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99/sdt", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887991, "uuid": "90ddb4c3-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99/tplink", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887991, "uuid": "90deae2a-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99/jaws", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887991, "uuid": "90e371dc-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99/irz", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887991, "uuid": "90e49099-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99/xaxa", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887991, "uuid": "90e4a8eb-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99/toto", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887991, "uuid": "90e4cb8c-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99/lll", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887991, "uuid": "90e4e5f1-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99/r.sh", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887991, "uuid": "90e4f10a-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99/fdgsfg", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887991, "uuid": "90ff10f7-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99/tp", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887991, "uuid": "9101f87b-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99/arm4", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887991, "uuid": "910eb650-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99/arm6", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887991, "uuid": "9111f0e0-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99/li", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887991, "uuid": "912def21-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99/create.py", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887991, "uuid": "91360104-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99/gmpsl", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887991, "uuid": "91392528-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99/arm5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887992, "uuid": "915f52f6-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99/ppc", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736887994, "uuid": "92edd732-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99/arm7", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888014, "uuid": "9ebf4639-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.2.31.158:37765/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888046, "uuid": "b1bf42d2-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99/av.sh", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888046, "uuid": "b1d62ec8-d2b9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99/asd", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888230, "uuid": "1fadf708-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/weed", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888230, "uuid": "1faf3c0f-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/lll", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888230, "uuid": "1fb1d731-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/adb", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888230, "uuid": "1fb26d37-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/asd", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888230, "uuid": "1fb76201-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/b", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "1fbf511a-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/aaa", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "1fc3745c-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/li", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "1fca97b6-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/wget.sh", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "1fd04bdb-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/create.py", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "1fd2d36d-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/multi", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "1fd8fb4f-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/r.sh", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "1fd9262c-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/zz", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "1fddbd00-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/arm4", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "1fdff523-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/tplink", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "1fe3e7c1-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/g", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "1fe40992-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/fdgsfg", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "1fe4f662-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/ruck", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "1ff498ea-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/mass.sh", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "1ff669fe-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/mag", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "1ff75cc8-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/ipc", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "1ff95b17-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/f5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "1ff97f67-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/bx", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "1ffa1602-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/vc", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "1ffc9d4d-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/irz", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "1ffd1c15-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/arm6", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "20013103-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/mips", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "2007acbb-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/ppc", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "20084c70-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/c.sh", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "20117e1f-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/arm5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "2019d445-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/jaws", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "202051a6-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/gmpsl", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "20215448-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/w.sh", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "2026fc66-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/k.sh", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "20290631-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/gocl", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "202a0ea5-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/toto", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "202ab6e2-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/mpsl", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "2031c338-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/z.sh", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "20397d5f-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/x86", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "204167ee-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/test.sh", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888231, "uuid": "2042e081-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/av.sh", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888233, "uuid": "212da08e-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/tp", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888233, "uuid": "2143f48f-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/fb", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888233, "uuid": "2154bacd-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/xaxa", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888233, "uuid": "215cb618-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/sdt", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888233, "uuid": "216652c5-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/linksys", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888243, "uuid": "2709c27f-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/arm", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888244, "uuid": "27dc163a-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.212.99:8080/arm7", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888345, "uuid": "63bd6696-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218/t", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888345, "uuid": "6415d74e-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218/v", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888345, "uuid": "641ec714-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/t", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888346, "uuid": "6482412a-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/r.sh", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888351, "uuid": "678b7aa1-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/g", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888351, "uuid": "6799733e-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/arm6", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888351, "uuid": "679985c5-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/b", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888351, "uuid": "679f654b-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/f5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888351, "uuid": "67a26aad-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/sh", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888351, "uuid": "67a2a162-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/gx86", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888351, "uuid": "67ad1218-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/fb", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888351, "uuid": "67afc842-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/arm7", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888351, "uuid": "67b0bfee-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/z.sh", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888351, "uuid": "67b1065c-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/c.sh", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888351, "uuid": "67bc0813-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/gmips", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888351, "uuid": "67bd04ac-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/toto", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888351, "uuid": "67bd9ea2-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/sdt", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888351, "uuid": "67cd4adb-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/chi", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888351, "uuid": "67d125d4-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/ppc", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888351, "uuid": "67d2d288-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/f", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888351, "uuid": "67d860d1-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/multi", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888352, "uuid": "67e86cc7-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/ca", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888352, "uuid": "67e99284-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/zz", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888352, "uuid": "67f09a0e-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/garm5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888352, "uuid": "67f89f69-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/garm6", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888352, "uuid": "680726c8-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/arm5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888352, "uuid": "6807bd67-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/ruck", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888352, "uuid": "6808c605-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/m", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888352, "uuid": "6808cdec-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/irz", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888352, "uuid": "6808d0b1-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/garm7", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888352, "uuid": "680c6c4d-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/lll", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888352, "uuid": "68114d28-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/mag", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888352, "uuid": "68120f93-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/xaxa", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888352, "uuid": "6814b4cf-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/adb", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888352, "uuid": "681eb89a-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/linksys", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888352, "uuid": "681f6889-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/arm4", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888352, "uuid": "6824507a-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/test", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888352, "uuid": "68404432-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/wget.sh", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888353, "uuid": "689656da-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/tlr", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888353, "uuid": "68a572a4-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218/abb", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888353, "uuid": "68a5b4ce-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/x", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888353, "uuid": "68b6a5c3-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/mass.sh", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888353, "uuid": "68cf6b17-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218/hy.sh", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888353, "uuid": "68d83dd8-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/abb", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888354, "uuid": "690fce96-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218/x", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888354, "uuid": "6916c4e8-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/v", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888354, "uuid": "696ad956-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/lol", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888356, "uuid": "6aa0e384-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/test.sh", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888356, "uuid": "6aa83159-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/bx", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888356, "uuid": "6ab74753-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/weed", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888356, "uuid": "6ab7b6ba-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/mpsl", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888356, "uuid": "6abb62bb-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/ipc", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888356, "uuid": "6abd4a06-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/garm", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888356, "uuid": "6ac14575-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/l", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888356, "uuid": "6ac16bd5-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/vc", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888356, "uuid": "6ac296c0-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/arm", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888356, "uuid": "6ac5a410-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/aaa", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888356, "uuid": "6ac5bbeb-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/tplink", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888356, "uuid": "6ac5ccde-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/hy.sh", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888356, "uuid": "6acce519-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/k.sh", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888356, "uuid": "6ad23557-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/ssh", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888356, "uuid": "6ad5fcc9-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/asd", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888357, "uuid": "6adc72ca-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/mips", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888357, "uuid": "6adc75df-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/av.sh", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888357, "uuid": "6adc99e0-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/fdgsfg", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888357, "uuid": "6add064f-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/gocl", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888357, "uuid": "6add56e9-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/gmpsl", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888357, "uuid": "6adfeab6-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/create.py", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888357, "uuid": "6ae72f68-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/x86", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888357, "uuid": "6aebc267-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/lmao", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888357, "uuid": "6af35b7d-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/jaws", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888357, "uuid": "6b0d5f24-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218/bee", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888357, "uuid": "6b0f8a22-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.188.82.218:8080/bee", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888417, "uuid": "8ea930d7-d2ba-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.118.205:36895/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888614, "uuid": "0484e896-d2bb-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.38.0.159:53406/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736888825, "uuid": "820da4c0-d2bb-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.197.156:56547/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736889307, "uuid": "a19c6c81-d2bc-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.241.2:56235/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736889308, "uuid": "a1c60e45-d2bc-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.193.56.11:54471/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736889547, "uuid": "30261ca1-d2bd-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.203.142:42907/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736889846, "uuid": "e2888c39-d2bd-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.118.205:36895/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736889965, "uuid": "2953130d-d2be-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://73.106.212.249:58666/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736890210, "uuid": "bbbd039c-d2be-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.193.59.142:60646/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736890447, "uuid": "4921e1e4-d2bf-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.22.161:60126/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736890745, "uuid": "fa97ee52-d2bf-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.193.56.11:54471/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736890807, "uuid": "1f370b21-d2c0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.179.7.32:49067/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736890926, "uuid": "6654d0fc-d2c0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.218.180:36090/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736890954, "uuid": "772e5d99-d2c0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.153.7:46760/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736891045, "uuid": "ad61ca2c-d2c0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.38.106.89:43809/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736891045, "uuid": "ad8898ad-d2c0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.211.68:53505/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736891046, "uuid": "adfc0a72-d2c0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.70.189:56916/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736891046, "uuid": "ae2bb7a4-d2c0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.234.214:43264/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736891047, "uuid": "ae38541a-d2c0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.10.57:41521/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736891047, "uuid": "ae5fcb68-d2c0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.113.255.146:42581/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736891061, "uuid": "b70fcb30-d2c0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.85.229:46937/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736891062, "uuid": "b7514960-d2c0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.62.239:33360/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736891108, "uuid": "d2f8292e-d2c0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.144.33:45912/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736891165, "uuid": "f4e86b5e-d2c0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.189.213.59:58378/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736891359, "uuid": "68a8f45c-d2c1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.213.233:35577/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736891376, "uuid": "7280953c-d2c1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.89.250:50350/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736891466, "uuid": "a7f49d86-d2c1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.193.59.142:60646/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736891586, "uuid": "ef9b2908-d2c1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.44.75:55815/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736891587, "uuid": "f03d9b80-d2c1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.185.228.88:40028/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736891614, "uuid": "00bc6891-d2c2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.82.217:49309/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736891764, "uuid": "5a14cb14-d2c2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.158.127.19:8080/eSign_Agreement.lnk", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "webdav", "colour": "#65d452", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736891764, "uuid": "5a1a6101-d2c2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://usa7.info:8080/eSign_Agreement.lnk", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "webdav", "colour": "#65d452", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736891767, "uuid": "5b5f4404-d2c2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.158.127.19/brief/32setup.msi", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "webdav", "colour": "#65d452", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736891767, "uuid": "5b675709-d2c2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://usa7.info/brief/32setup.msi", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "webdav", "colour": "#65d452", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736891949, "uuid": "c83a3d96-d2c2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.34.194:45705/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736892083, "uuid": "1827c520-d2c3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.138.67:48033/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736892186, "uuid": "5555ff83-d2c3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.0.227:48040/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736892246, "uuid": "7923d33f-d2c3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.10.52.27:36572/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736892309, "uuid": "9eaefef0-d2c3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.214.29:49553/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736892309, "uuid": "9eb387e6-d2c3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.15.24.155:41903/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736892485, "uuid": "07b29ed0-d2c4-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.90.28:38129/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736892486, "uuid": "08298cab-d2c4-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.113.255.146:42581/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736892549, "uuid": "2da5c5a5-d2c4-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.178.113:47530/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736892666, "uuid": "73be8b5d-d2c4-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.144.33:45912/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736892849, "uuid": "e064f00a-d2c4-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.161.21.47:45156/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736892908, "uuid": "03ac3780-d2c5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.146.0:52344/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736893025, "uuid": "498d74bc-d2c5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.79.211:46146/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736893026, "uuid": "49ed8512-d2c5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.185.228.88:40028/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736893026, "uuid": "49fe9b94-d2c5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.237.144:59385/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736893094, "uuid": "72aae5fd-d2c5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.98.79:36258/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736893147, "uuid": "9234f958-d2c5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.44.245:48465/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736893148, "uuid": "9296e29d-d2c5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.56.192.156:4726/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736893275, "uuid": "de555198-d2c5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.43.74:50831/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736893281, "uuid": "e1c89c87-d2c5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.95.137:49821/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736893326, "uuid": "fc9f7195-d2c5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.235.193:36486/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736893326, "uuid": "fcc34f98-d2c5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.62.239:33360/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736893327, "uuid": "fd318692-d2c5-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.236.23.65:47859/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736893387, "uuid": "2128395a-d2c6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.81.124.215:34577/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736893507, "uuid": "68f5fd47-d2c6-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.178.113:47530/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736893763, "uuid": "0126ce62-d2c7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.173.127:41558/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736893813, "uuid": "1f1591c5-d2c7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.10.60.15:37175/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736893813, "uuid": "1f6957ff-d2c7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.138.67:48033/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736893872, "uuid": "4293bbd6-d2c7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.175.96.7:43577/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736893930, "uuid": "651b1109-d2c7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.105.163:52040/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736893987, "uuid": "86aea15d-d2c7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.90.28:38129/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736894005, "uuid": "91811a50-d2c7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.55.79:33684/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736894046, "uuid": "aa012c21-d2c7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.206.72:43687/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736894046, "uuid": "aa012d15-d2c7-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.220.174:42809/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736894286, "uuid": "390f91a6-d2c8-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.84.199:49655/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736894646, "uuid": "0f989246-d2c9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.91.155:34065/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736894827, "uuid": "7b55dc3a-d2c9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.236.23.65:47859/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736894827, "uuid": "7b6d6203-d2c9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.81.124.215:34577/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736895036, "uuid": "f8338b2c-d2c9-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.47.111:51569/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736895065, "uuid": "092cdcf3-d2ca-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://dihvbe.theeyefirewall.su/jefne64", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736895494, "uuid": "095b76c6-d2cb-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.5.222:55667/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736895846, "uuid": "dadf645d-d2cb-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.213.41:54911/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736895846, "uuid": "daf6471c-d2cb-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.249.108:34082/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736895906, "uuid": "fee27f15-d2cb-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.33.175:58183/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736895967, "uuid": "22cfbabd-d2cc-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.105.163:52040/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736895983, "uuid": "2c666e1e-d2cc-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.100.201:52837/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736896029, "uuid": "48064aa4-d2cc-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.19.7:60688/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736896208, "uuid": "b2abd389-d2cc-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.127.249:60988/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736896266, "uuid": "d5099100-d2cc-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.108.253:39038/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736896407, "uuid": "29180d48-d2cd-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.198.229:58546/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736896567, "uuid": "8863ba20-d2cd-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.14.161:54038/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736896626, "uuid": "ab953698-d2cd-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.244.61:54531/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736896626, "uuid": "ab970bda-d2cd-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.143.208:58465/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736896629, "uuid": "addb0fca-d2cd-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.40.53:33390/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736896686, "uuid": "cfdd34b6-d2cd-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.70.104:35187/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736896746, "uuid": "f366b663-d2cd-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.27.51:49993/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736896808, "uuid": "1896a465-d2ce-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.97.30:58492/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736896809, "uuid": "18c299ca-d2ce-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.227.220:47538/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736896864, "uuid": "39f9c3c6-d2ce-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://dihvbe.theeyefirewall.su/lol/jefne64", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736897346, "uuid": "58d77479-d2cf-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.127.249:60988/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736897346, "uuid": "5922421e-d2cf-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.93.84:50915/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736897471, "uuid": "a37abcbd-d2cf-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.10.174:35250/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736897647, "uuid": "0c5cb599-d2d0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.167.109:47816/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736897659, "uuid": "136edf6d-d2d0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.77.240:55364/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736897708, "uuid": "30d7a128-d2d0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.255.199:45137/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736897780, "uuid": "5bc5bca3-d2d0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.39.172:58379/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736897887, "uuid": "9b717eca-d2d0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.237.73:43751/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736898008, "uuid": "e36349ae-d2d0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.244.61:54531/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736898009, "uuid": "e3fa8de8-d2d0-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.201.181:55799/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736898066, "uuid": "05db9418-d2d1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.206.72:43687/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736898141, "uuid": "32dae7b0-d2d1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.83.9:38547/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736898308, "uuid": "964941d7-d2d1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.204.195.93:42434/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736898367, "uuid": "b99c67d1-d2d1-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.227.220:47538/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736898486, "uuid": "008274bc-d2d2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.169.234.24:50274/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736898487, "uuid": "0147481c-d2d2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.97.90:49413/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736898547, "uuid": "24d9224f-d2d2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.127.96:48757/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736898607, "uuid": "48b33a0a-d2d2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.109.34:51426/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736898726, "uuid": "8f972aae-d2d2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.58.74:50807/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736898727, "uuid": "8fe4b95d-d2d2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.93.84:50915/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736898785, "uuid": "b2dc660d-d2d2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.218.180:36090/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736898787, "uuid": "b3b0a79c-d2d2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.40.53:33390/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736898846, "uuid": "d72e6de3-d2d2-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.58.84:36376/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736899044, "uuid": "4d39d135-d2d3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.73.118:36168/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736899145, "uuid": "896e1a21-d2d3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.247.212:56866/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736899152, "uuid": "8da19beb-d2d3-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.158.73.62:53554/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736869924, "uuid": "8067d010-d28f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "0x1531.info" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736896564, "uuid": "86ceafeb-d2cd-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.70.14.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736864763, "uuid": "7c1277b1-d283-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "101.32.40.22", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813045, "uuid": "11bb36e4-d20b-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.33.34.77", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813045, "uuid": "11b50401-d20b-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.199.205.248", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736856244, "uuid": "a62cad22-d26f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.208.231.246", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736877844, "uuid": "f0da9174-d2a1-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.210.101.107", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834585, "uuid": "385a985e-d23d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.247.52.124", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736889306, "uuid": "a097bf35-d2bc-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "104.193.56.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860506, "uuid": "92bd823b-d279-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.189.3.214", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882764, "uuid": "65521039-d2ad-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "109.71.252.26", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882944, "uuid": "d0b815e9-d2ad-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.166.214.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736838965, "uuid": "6b36c3c6-d247-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.182.118.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736818269, "uuid": "3b511664-d217-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.183.55.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736891043, "uuid": "ac61674f-d2c0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.113.255.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736891043, "uuid": "ac61b097-d2c0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.242.62.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736869084, "uuid": "8bb7b301-d28d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.101.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736876644, "uuid": "25bbbac5-d29f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.106.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736881807, "uuid": "2b052ec4-d2ab-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.26.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736895005, "uuid": "e5cd1144-d2c9-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.47.111", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736818269, "uuid": "3b50eb7c-d217-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.9.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736862964, "uuid": "4bc9d909-d27f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.231.239.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736877844, "uuid": "f0daf488-d2a1-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.223.231", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736880783, "uuid": "c8e204f8-d2a8-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.237.103.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736854207, "uuid": "e850038e-d26a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.238.11.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736814668, "uuid": "d91eb317-d20e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.238.160.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736849044, "uuid": "e2e65f4c-d25e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.238.76.142", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736840048, "uuid": "f0d6c886-d249-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.26.88.19", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736818386, "uuid": "81508766-d217-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.216.24.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736829963, "uuid": "75d5867c-d232-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.227.241.193", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736861644, "uuid": "38c2a1c7-d27c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.234.14.172", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736873643, "uuid": "2931e7e8-d298-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.42.44.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736828405, "uuid": "d531b9be-d22e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.219.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736873944, "uuid": "dc3635a8-d298-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.29.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736885707, "uuid": "3f6ad5cc-d2b4-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.5.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736854925, "uuid": "93f4784c-d26c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.153.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736827384, "uuid": "743ca4c6-d22c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.215.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736861466, "uuid": "ceb213c8-d27b-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.221.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736839145, "uuid": "d63429b6-d247-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.51.127.176", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736887506, "uuid": "700a2576-d2b8-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.51.241.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736868728, "uuid": "b77a4b11-d28c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.123.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736880783, "uuid": "c8e1f085-d2a8-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.24.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736865662, "uuid": "9411cb0c-d285-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.54.101.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736861644, "uuid": "38c2b48c-d27c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.54.118.160", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736826843, "uuid": "322dd1dd-d22b-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.131.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736839264, "uuid": "1db3a589-d248-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.217.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736832671, "uuid": "c3e496f8-d238-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.225.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736819405, "uuid": "e0a470f9-d219-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.58.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736820905, "uuid": "5ec7971e-d21d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.89.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736856244, "uuid": "a62b4c54-d26f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.135.62", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736856244, "uuid": "a62cbf71-d26f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.60.248.255", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736861824, "uuid": "a441aa75-d27c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.61.115.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736814726, "uuid": "fb75f5a1-d20e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.191.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736877783, "uuid": "ccb5c1b9-d2a1-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.201.241", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736850845, "uuid": "146cf83f-d263-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.139.32.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736872564, "uuid": "a6104f8d-d295-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.53.95.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736817124, "uuid": "910f1c11-d214-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.192.35.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813045, "uuid": "11bc8dde-d20b-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.192.36.64", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736814305, "uuid": "00d38ed0-d20e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.169.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736893624, "uuid": "ae5ce8a8-d2c6-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.173.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813763, "uuid": "bdc2d737-d20c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.194.30.115", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736864343, "uuid": "81eb6111-d282-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.194.31.61", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736866563, "uuid": "ad2d5c35-d287-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.160.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736881624, "uuid": "bde47659-d2aa-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.10.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736891043, "uuid": "ac61a4a7-d2c0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.10.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813407, "uuid": "e9495d3a-d20b-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.230.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736861644, "uuid": "38c2a86d-d27c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.199.2.122", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736867884, "uuid": "c04caedc-d28a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.199.217.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736897763, "uuid": "51d90096-d2d0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.199.39.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736820183, "uuid": "b07a9b5f-d21b-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.199.8.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834284, "uuid": "8538e8d1-d23c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.233.109", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736891043, "uuid": "ac61c305-d2c0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.234.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736887206, "uuid": "bcd245d2-d2b7-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.203.220.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736892065, "uuid": "0d220024-d2c3-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.138.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736859962, "uuid": "4e9ffd4a-d278-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.17.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813045, "uuid": "11bbd2f9-d20b-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.181.2", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736856244, "uuid": "a62d0499-d26f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.19.71", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860144, "uuid": "babc2c4a-d278-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.67.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736897644, "uuid": "0a95e7c6-d2d0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.77.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736899024, "uuid": "40f424be-d2d3-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.207.73.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736895963, "uuid": "20e36de8-d2cc-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.100.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736891344, "uuid": "5f3b7486-d2c1-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.213.233", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736822163, "uuid": "4c33fcb9-d220-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.114.38", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736837045, "uuid": "f293a92f-d242-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.114.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736826124, "uuid": "8540fadd-d229-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.125.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736829906, "uuid": "5365f0fe-d232-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.16.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736837346, "uuid": "a5ed0826-d243-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.16.84", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736815923, "uuid": "c5674c88-d211-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.2.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736869744, "uuid": "14c9c974-d28f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.238.214", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736828763, "uuid": "aa67fb48-d22f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.241.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736852644, "uuid": "44998d95-d267-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.241.23", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736838245, "uuid": "bde741ef-d245-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.27.47", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736822583, "uuid": "46cdfc3a-d221-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.3.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813045, "uuid": "11bd29bf-d20b-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.40.251", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736821084, "uuid": "c93e3f09-d21d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.7.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736816645, "uuid": "735908b8-d213-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.80.115", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736867164, "uuid": "12dd9773-d289-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.82.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736898124, "uuid": "2872eb6e-d2d1-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.83.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736821024, "uuid": "a5a51232-d21d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.85.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736891043, "uuid": "ac61c941-d2c0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.85.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736886006, "uuid": "f1fd7047-d2b4-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.87.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736817664, "uuid": "d2ea257f-d215-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.87.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736831044, "uuid": "f9a4fda7-d234-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.88.243", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736831343, "uuid": "ac69410c-d235-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.88.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736891344, "uuid": "5f3c146b-d2c1-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.89.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736823844, "uuid": "361db73f-d224-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.89.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736866807, "uuid": "3e41d0fa-d288-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.94.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834585, "uuid": "385afe06-d23d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.94.156", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736893264, "uuid": "d7e97571-d2c5-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.95.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736827564, "uuid": "dfc64eef-d22c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.95.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736857144, "uuid": "bef9489a-d271-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.210.215.26", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736821867, "uuid": "9c4509c5-d21f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.212.32.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736822705, "uuid": "8f882558-d221-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.212.50.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736815024, "uuid": "ad4194be-d20f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.184.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736870284, "uuid": "56b2901f-d290-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.240.38", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736850908, "uuid": "39bbd916-d263-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.241.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736859724, "uuid": "c08a728c-d277-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.241.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736875144, "uuid": "a7bf2478-d29b-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.247.73", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736830506, "uuid": "b8fa0dde-d233-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.83.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736837346, "uuid": "a5ecfd77-d243-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.52.129", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878744, "uuid": "0976771c-d2a4-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.52.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736841964, "uuid": "67038af7-d24e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.52.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736855105, "uuid": "ffa43367-d26c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.54.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736893985, "uuid": "8588a978-d2c7-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.55.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736881684, "uuid": "e1f15acb-d2aa-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.56.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736839684, "uuid": "17f7f8aa-d249-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.60.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736859724, "uuid": "c08a79a1-d277-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.60.182", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736861585, "uuid": "15ab65be-d27c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.63.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736850845, "uuid": "146ca6d9-d263-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.38.105", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736839145, "uuid": "d6342575-d247-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.41.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736830084, "uuid": "bdb915db-d232-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.119.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736825527, "uuid": "21a07095-d228-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.122.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736851324, "uuid": "31bb61a1-d264-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.243.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736851805, "uuid": "50b10a8f-d265-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.40.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736832608, "uuid": "9ddfe84b-d238-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.220.151.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736838306, "uuid": "e2426836-d245-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.220.59.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736824744, "uuid": "4ebdbd55-d226-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.220.78.55", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736842084, "uuid": "ae62f586-d24e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.144.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736859063, "uuid": "36ba6661-d276-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.164.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736835484, "uuid": "506c6a3f-d23f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.171.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736863143, "uuid": "b6b71733-d27f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.172.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736852523, "uuid": "fc83e91f-d266-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.222.121.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736849044, "uuid": "e2e64d82-d25e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.222.122.216", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736826664, "uuid": "c713e126-d22a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.222.205.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736822945, "uuid": "1e69c497-d222-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.222.250.202", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736864343, "uuid": "81ebd39c-d282-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.0.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736895483, "uuid": "02a4d425-d2cb-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.5.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736864343, "uuid": "81eb5218-d282-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.7.243", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736841844, "uuid": "1f4fe83d-d24e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.231.159.102", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736815384, "uuid": "83a8b8f7-d210-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.106.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736822163, "uuid": "4c341058-d220-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.111.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736870466, "uuid": "c37856ac-d290-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.116.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736871544, "uuid": "46095cac-d293-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.117.222", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736819344, "uuid": "bbfecde0-d219-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.120.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736816824, "uuid": "de20985a-d213-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.148.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834585, "uuid": "385a8c2c-d23d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.149.38", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834585, "uuid": "386038e7-d23d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.35.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736829425, "uuid": "34a609f7-d231-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.40.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736893264, "uuid": "d7e98526-d2c5-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.43.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736887743, "uuid": "fd0a0ae5-d2b8-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.62.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736843646, "uuid": "516317a9-d252-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.194.41", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736840944, "uuid": "06e707b1-d24c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.253.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736896384, "uuid": "1b56ca28-d2cd-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.198.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879284, "uuid": "4aecbc58-d2a5-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.205.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736815506, "uuid": "cc7de46c-d210-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.245.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736885105, "uuid": "d90d1a3e-d2b2-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.164.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736867044, "uuid": "cbd79547-d288-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.170.80", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736824984, "uuid": "ddbbd09b-d226-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.2.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736821384, "uuid": "7c11efa7-d21e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.204.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736825284, "uuid": "90a1dcea-d227-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.3.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736827744, "uuid": "4ad756ca-d22d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.100.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736875144, "uuid": "a7bf0421-d29b-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.167.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736867944, "uuid": "e43fa06e-d28a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.62.5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736898484, "uuid": "ff2f343e-d2d1-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.97.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736866984, "uuid": "a80bbd22-d288-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.98.112", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736893084, "uuid": "6c7719aa-d2c5-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.98.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736819344, "uuid": "bbfef651-d219-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.108.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736833024, "uuid": "95ebfdb0-d239-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.154.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736849584, "uuid": "24b2a10a-d260-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.27.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736893384, "uuid": "1f6d9167-d2c6-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.81.124.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736874244, "uuid": "8f21b78c-d299-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.115.67.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736837106, "uuid": "16f556df-d243-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.117.42.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736829425, "uuid": "34a5ef29-d231-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.118.58.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736877424, "uuid": "f6868eb7-d2a0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.185.143.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736892544, "uuid": "2adc0862-d2c4-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.185.178.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736876224, "uuid": "2b7d1a8f-d29e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.187.248.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736877364, "uuid": "d2db6135-d2a0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.189.213.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736893144, "uuid": "90542c4e-d2c5-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.56.192.156", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884324, "uuid": "07949bd1-d2b1-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.8.27.105", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812985, "uuid": "edad0b10-d20a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.194.219.28", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736820664, "uuid": "ced8957f-d21c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.10.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736824506, "uuid": "c0d98b3c-d225-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.201.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736859844, "uuid": "082f6a17-d278-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.201.116", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736862544, "uuid": "518d666c-d27e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.206.88", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736891944, "uuid": "c5040d34-d2c2-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.34.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736828105, "uuid": "22531366-d22e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.67.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834224, "uuid": "616b709a-d23c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.77.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736851744, "uuid": "2c33361e-d265-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.78.154", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736877906, "uuid": "15e1e3f7-d2a2-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.79.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736824084, "uuid": "c5497870-d224-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.9.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736872744, "uuid": "10e036fa-d296-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.151.14.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736823844, "uuid": "361d8748-d224-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.231.236.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736850845, "uuid": "146cc755-d263-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.191.181.73", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736845384, "uuid": "5d15e869-d256-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.227.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736866984, "uuid": "a8082d5e-d288-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.84.44", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736821206, "uuid": "123c2b67-d21e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.129.152.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736848806, "uuid": "54fa9043-d25e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.172.81.115", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736893868, "uuid": "403bc677-d2c7-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.175.96.7", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736891583, "uuid": "ee3a11b3-d2c1-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.185.228.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736862964, "uuid": "4bc9d61a-d27f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.131.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736896024, "uuid": "452abae7-d2cc-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.19.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736823784, "uuid": "12b4ccec-d224-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.162.193", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812985, "uuid": "edafe805-d20a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.60.184.253", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736832544, "uuid": "77f1b022-d238-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.7.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736847245, "uuid": "b2560c92-d25a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.97.181.194", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736877607, "uuid": "63d192f9-d2a1-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.133.204.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812985, "uuid": "edadf4d6-d20a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.221.5.207", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736832544, "uuid": "77f1eb00-d238-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.235.251.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736856305, "uuid": "cabf8e35-d26f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.92.77.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736848144, "uuid": "ca5adf9d-d25c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.113.112.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736872684, "uuid": "ed61d7c6-d295-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.86.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736877783, "uuid": "ccb54dd3-d2a1-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.255.143", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736875385, "uuid": "36f7e40c-d29c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.214.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736839930, "uuid": "aa46c701-d249-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.10.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736867407, "uuid": "a42c8763-d289-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.27.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736826783, "uuid": "0e5a94fe-d22b-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.57.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736848024, "uuid": "82a45281-d25c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.62.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736893324, "uuid": "fb9f4f61-d2c5-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "134.236.23.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736866984, "uuid": "a807fb80-d288-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "139.5.1.212", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812985, "uuid": "edb26ae8-d20a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.48.8.193", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834284, "uuid": "8503b7d4-d23c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "147.124.212.226", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736849943, "uuid": "fae5cd27-d260-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "152.252.28.250", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736873283, "uuid": "52a100ac-d297-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "153.171.22.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736858644, "uuid": "3c8606c8-d275-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "154.216.16.172", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812985, "uuid": "edaebfd9-d20a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "156.224.19.17", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884506, "uuid": "739a1d12-d2b1-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "156.253.250.102", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812985, "uuid": "edae2b27-d20a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "157.230.12.133", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812985, "uuid": "edae5b52-d20a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "158.247.215.233", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736864463, "uuid": "c94dcbaf-d282-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "161.35.127.139", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736873345, "uuid": "770e7dd0-d297-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.37.173.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813045, "uuid": "11b6355a-d20b-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "172.0.0.32", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834284, "uuid": "850030cf-d23c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "172.245.123.7", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736877783, "uuid": "ccb567da-d2a1-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "172.38.0.147", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736888584, "uuid": "f276ca0a-d2ba-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "172.38.0.159", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736856244, "uuid": "a62d9f33-d26f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "172.38.0.228", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813045, "uuid": "11b3eeab-d20b-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "172.38.0.91", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736856244, "uuid": "a62c6ff6-d26f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.107.37.52", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736871483, "uuid": "21aef40a-d293-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.147.153.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878444, "uuid": "56c17d32-d2a3-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.147.154.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736890923, "uuid": "64d4f033-d2c0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.148.153.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736855105, "uuid": "ffa61ea4-d26c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.151.177.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736846824, "uuid": "b769f898-d259-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.81.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736823844, "uuid": "361de00a-d224-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.82.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736833744, "uuid": "432286e3-d23b-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.167.243.78", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736825284, "uuid": "90a1cc03-d227-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.173.22.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736867224, "uuid": "36a8c63c-d289-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.173.72.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834284, "uuid": "850564ea-d23c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.57.189.191", "Tag": [ { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736869924, "uuid": "8036b721-d28f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.141.157.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736850424, "uuid": "1903f70a-d262-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.94.184.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812985, "uuid": "edad15c1-d20a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "18.183.60.128", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736898844, "uuid": "d5c40cee-d2d2-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.58.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834466, "uuid": "f1e3d128-d23c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.13.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736890923, "uuid": "64d4ee89-d2c0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.218.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736828344, "uuid": "b09c8ce5-d22e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.232.57", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736862605, "uuid": "75e5ddb9-d27e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.30.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736833984, "uuid": "d211d345-d23b-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.39.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736867044, "uuid": "cbd6e864-d288-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.248.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736836389, "uuid": "6be9862b-d241-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.49.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736829308, "uuid": "ef46bcaa-d230-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.117.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736833564, "uuid": "d7c205cb-d23a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.108.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736826544, "uuid": "7fd216a4-d22a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.123.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736845084, "uuid": "aa475522-d255-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.118.240.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736832365, "uuid": "0d3a76aa-d238-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.141.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736856244, "uuid": "a62cddba-d26f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.250.16", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736864705, "uuid": "596a369a-d283-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.134.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736853424, "uuid": "159ae2a9-d269-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.63.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736833625, "uuid": "fc1339b0-d23a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.22.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736892905, "uuid": "0229c816-d2c5-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.122.146.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736866563, "uuid": "ad2d597a-d287-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.122.235.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736829246, "uuid": "ca0da073-d230-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.122.237.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736826184, "uuid": "a8efd964-d229-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.190.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736852644, "uuid": "44998d5f-d267-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.82.19", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736876044, "uuid": "c018a16a-d29d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.153.67", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736842084, "uuid": "ae6303a1-d24e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.182.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736815024, "uuid": "ad41830f-d20f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.28.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736819523, "uuid": "2711f6f5-d21a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.36.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736828045, "uuid": "fe258a4c-d22d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.241.136.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736870883, "uuid": "bc1ecccd-d291-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.246.159.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883424, "uuid": "eed4e80f-d2ae-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.53.55.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736852644, "uuid": "44998524-d267-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.60.10.7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736877783, "uuid": "ccb5c8db-d2a1-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "183.81.42.108", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860506, "uuid": "92be2859-d279-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.208.159.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736886305, "uuid": "a43a4955-d2b5-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.255.135.104", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "GREED", "colour": "#0cb024", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812985, "uuid": "edbab600-d20a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.49.69.101", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860744, "uuid": "2037fa50-d27a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "186.88.182.177", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736866744, "uuid": "188f35bc-d288-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "189.182.166.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736848684, "uuid": "0c22b629-d25e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "190.199.105.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834284, "uuid": "8543eb06-d23c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.140.225.33", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736866984, "uuid": "a80af0b0-d288-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.21.168.217", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736829246, "uuid": "ca0d28ef-d230-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "198.2.85.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736869924, "uuid": "80414d24-d28f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "1xbookeidient.info" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860863, "uuid": "676b591d-d27a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.107.98.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834706, "uuid": "809b54a4-d23d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "213.43.76.231", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736887024, "uuid": "50ae1baf-d2b7-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "217.208.170.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736881506, "uuid": "776923c7-d2aa-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.60.179.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736871607, "uuid": "6b24c1ac-d293-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.16.113", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736855105, "uuid": "ffa459bd-d26c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.254.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736896206, "uuid": "b14edb68-d2cc-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.127.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736845266, "uuid": "16af4bd4-d256-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.27.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736835784, "uuid": "0324ec9b-d240-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.165.128.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736826664, "uuid": "c7142207-d22a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.201.35.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736866324, "uuid": "1e51ebed-d287-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.190.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736891043, "uuid": "ac617f91-d2c0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.202.70.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736825106, "uuid": "26647022-d227-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.224.189.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736858705, "uuid": "61767d97-d275-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.180.16", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736872505, "uuid": "82bf7679-d295-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.207.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884023, "uuid": "54224b0e-d2b0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.75.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736875624, "uuid": "c5b215d5-d29c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.103.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736845444, "uuid": "813c05b9-d256-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.45.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736837346, "uuid": "a5ecf8e5-d243-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.196.38", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736854984, "uuid": "b71b6599-d26c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.93.44.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736865784, "uuid": "dc9532cd-d285-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.13.59.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736874484, "uuid": "1e4a6e33-d29a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.13.60.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736839324, "uuid": "416d53bf-d248-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.13.62.2", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736845505, "uuid": "a580fccb-d256-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.13.81.12", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736876344, "uuid": "72e7944d-d29e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.15.26.61", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736862063, "uuid": "32af9248-d27d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.151.74.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736820243, "uuid": "d45257e7-d21b-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.8.191.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860506, "uuid": "92bd5fd4-d279-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "23.95.72.10", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860506, "uuid": "92bdfed6-d279-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "23.95.73.77", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736898306, "uuid": "94fddaff-d2d1-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.204.195.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736820183, "uuid": "b07a988a-d21b-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.177.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736849344, "uuid": "95a2b906-d25f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.212.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736831224, "uuid": "6562c10a-d235-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.217.179.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736864044, "uuid": "cfbcce5f-d281-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.221.240.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883245, "uuid": "83dbc67d-d2ae-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.222.152.2", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736854684, "uuid": "0488441a-d26c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.225.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883185, "uuid": "602dc0b9-d2ae-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.25.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736844544, "uuid": "68bb10c0-d254-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.76.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736891583, "uuid": "ee39f703-d2c1-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.82.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736856244, "uuid": "a62b3dbb-d26f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.85.5", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884143, "uuid": "9b9f1be5-d2b0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.34.12.88", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736830324, "uuid": "4cc9c4b0-d233-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.74.124.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736861466, "uuid": "ceaf6ddc-d27b-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.77.47.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736885884, "uuid": "a928f0ac-d2b4-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.79.133.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736891106, "uuid": "d169d778-d2c0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.90.144.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736849164, "uuid": "2a3aa606-d25f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.176.255.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736868544, "uuid": "49c33f9f-d28c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.177.182.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736854445, "uuid": "7633fb5a-d26b-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.178.224.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736886724, "uuid": "9d99cb3e-d2b6-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.179.7.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860624, "uuid": "d8ce0202-d279-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.180.12.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736844544, "uuid": "68bb2453-d254-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.109.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860205, "uuid": "df85e203-d278-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.197.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736826664, "uuid": "c7141faf-d22a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.63.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736829906, "uuid": "5365e747-d232-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.227.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736898006, "uuid": "e26240fa-d2d0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.201.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736880606, "uuid": "5f6bc40b-d2a8-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.206.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736871725, "uuid": "b19ce633-d293-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.102.154", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884744, "uuid": "01d3646d-d2b2-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.233.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736837163, "uuid": "3937b5b4-d243-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.220.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736864824, "uuid": "a01709e7-d283-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.152.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736824144, "uuid": "e91d0926-d224-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.185.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736829963, "uuid": "75d59a43-d232-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.35.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736818446, "uuid": "a4bd7e0b-d217-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.205.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736851262, "uuid": "0d1337db-d264-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.205.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736819823, "uuid": "d9f68aee-d21a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.212.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736821206, "uuid": "123c0c4c-d21e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.233.163.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736889544, "uuid": "2eb87386-d2bd-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.203.142", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736879468, "uuid": "b89e60d5-d2a5-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.164.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878864, "uuid": "50d7cc41-d2a4-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.71.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736856244, "uuid": "a62d8889-d26f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.93.143", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736896744, "uuid": "f1ff200b-d2cd-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.237.27.51", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736897468, "uuid": "a1b4b672-d2cf-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.10.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736827324, "uuid": "50c9aa41-d22c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.115.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736824383, "uuid": "77da4fc0-d225-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.81.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736875869, "uuid": "57c6367b-d29d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.79.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736871725, "uuid": "b19c59ab-d293-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.57.29.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736861409, "uuid": "aca7dfed-d27b-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.7.222.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736877783, "uuid": "ccb6e09f-d2a1-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.7.237.5", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884206, "uuid": "c0ab5b7e-d2b0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.85.186.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812985, "uuid": "edade6f9-d20a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "43.143.123.40", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812985, "uuid": "edb09a5b-d20a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "43.156.63.124", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882825, "uuid": "89959cf6-d2ad-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.133.74.89", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736891763, "uuid": "5931c8db-d2c2-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.158.127.19", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "webdav", "colour": "#65d452", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882944, "uuid": "d0b806b7-d2ad-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.159.209.8", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813045, "uuid": "11b436f2-d20b-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.164.177.122", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813045, "uuid": "11b85609-d20b-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.164.177.123", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834585, "uuid": "385a429f-d23d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.164.177.195", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736877783, "uuid": "ccb63404-d2a1-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.164.177.91", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736866984, "uuid": "a80b10b1-d288-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.178.249.223", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812985, "uuid": "edaf43f8-d20a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.221.99.49", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882583, "uuid": "f9da5cab-d2ac-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.83.140.231", "Tag": [ { "name": "31mOfficial", "colour": "#10dab2", "exportable": true, "hide_tag": false }, { "name": "31mQbot", "colour": "#04fda1", "exportable": true, "hide_tag": false }, { "name": "31mUsername", "colour": "#48097f", "exportable": true, "hide_tag": false }, { "name": "36mPryoxis", "colour": "#689add", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Pryoxis", "colour": "#4cdb40", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736866144, "uuid": "b2f6f449-d286-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.153.107.87", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736899143, "uuid": "884f578d-d2d3-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.158.73.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736845444, "uuid": "813beebd-d256-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "49.85.213.77", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813045, "uuid": "11b65284-d20b-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.234.163.217", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736864644, "uuid": "34e36fa8-d283-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "51.21.41.165", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736871607, "uuid": "6b247a23-d293-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.45.56.34", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882825, "uuid": "8995aa3a-d2ad-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.47.107.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736878924, "uuid": "747b9d19-d2a4-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.47.120.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736852884, "uuid": "d3c522e9-d267-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.106.115", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736822223, "uuid": "703613a3-d220-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.233.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736817305, "uuid": "fd1c77d3-d214-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.72.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736873283, "uuid": "52a0f208-d297-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.75.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736868844, "uuid": "fcc164bd-d28c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.97.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736877844, "uuid": "f0dae08f-d2a1-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.129.29", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736828944, "uuid": "162cdbdc-d230-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.141.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736880544, "uuid": "39f2b4b1-d2a8-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.242.11", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736864223, "uuid": "3a4f3570-d282-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.253.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736858946, "uuid": "f0df62ec-d275-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.49.142", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736826124, "uuid": "85414046-d229-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.10.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736890444, "uuid": "46cac7e4-d2bf-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.22.161", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736896806, "uuid": "16ee63da-d2ce-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.227.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736859724, "uuid": "c08a5196-d277-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.237.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736830084, "uuid": "bdb903cd-d232-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.44.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882825, "uuid": "8995bbd2-d2ad-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.45.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736831044, "uuid": "f9a527aa-d234-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.46.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736838906, "uuid": "47d87e3a-d247-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.14.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736842084, "uuid": "ae638213-d24e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.229.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736882344, "uuid": "6b3ee777-d2ac-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.229.80", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736852224, "uuid": "4a50bab0-d266-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.232.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736823844, "uuid": "361dc299-d224-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.70.206", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736825527, "uuid": "21a38223-d228-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.92.216.195", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736821024, "uuid": "a5a51ee6-d21d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.27.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736877844, "uuid": "f0da52c5-d2a1-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.155.205", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736893144, "uuid": "905431b5-d2c5-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.44.245", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736876106, "uuid": "e4e5b4e8-d29d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.45.183", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736818084, "uuid": "cd331c9c-d216-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.46.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736828344, "uuid": "b09c450f-d22e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.114.9", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813045, "uuid": "11b3adee-d20b-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.81.211", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736827984, "uuid": "d9cb2586-d22d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.83.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736814844, "uuid": "421d5057-d20f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.94.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736844125, "uuid": "6e9a633a-d253-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.139.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736874724, "uuid": "ad14f57e-d29a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.139.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736850544, "uuid": "60b7ab40-d262-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.141.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736857084, "uuid": "9af20f86-d271-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.141.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736895844, "uuid": "d99af091-d2cb-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.249.108", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736843468, "uuid": "e764d615-d251-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.249.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736826363, "uuid": "13efa673-d22a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.249.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736822106, "uuid": "2a3e20d0-d220-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.249.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736845384, "uuid": "5d15ce1e-d256-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.252.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736842324, "uuid": "3d7be8b9-d24f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.255.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736824263, "uuid": "30314fbf-d225-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.255.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736828645, "uuid": "63d68405-d22f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.98.139.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736868844, "uuid": "fcc17a6e-d28c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.223.112", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736836328, "uuid": "4778a917-d241-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.160.154.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736892844, "uuid": "ddbf9a15-d2c4-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.161.21.47", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736815144, "uuid": "f4aa6634-d20f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.18.107.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736870645, "uuid": "2de055f5-d291-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.19.214.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736848443, "uuid": "7cc0125e-d25d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.233.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736816465, "uuid": "08469b06-d213-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.183.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736866144, "uuid": "b2f6ad72-d286-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.186.189", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736816645, "uuid": "73582444-d213-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.210.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736848924, "uuid": "9b2c7b70-d25e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.19.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736897884, "uuid": "99bdf423-d2d0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.237.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736850845, "uuid": "146d0bdb-d263-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.27.156", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736832965, "uuid": "72f3238d-d239-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.176.197.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736886610, "uuid": "59adb2eb-d2b6-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.2.31.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736838306, "uuid": "e2426bd2-d245-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.104.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736893927, "uuid": "62e4ed72-d2c7-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.105.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736821867, "uuid": "9c4791f4-d21f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.138.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736819163, "uuid": "5072d891-d219-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.142.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736877844, "uuid": "f0daefb2-d2a1-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.17.30", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736836389, "uuid": "6be98ace-d241-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.18.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736877783, "uuid": "ccb594ca-d2a1-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.21.157", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736873164, "uuid": "0b806a18-d297-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.87.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736815744, "uuid": "5a9bf267-d211-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.89.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812985, "uuid": "edbab408-d20a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.37.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736877844, "uuid": "f0db12b6-d2a1-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.85.79", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736841124, "uuid": "7225a6e0-d24c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.54.8.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736874425, "uuid": "fac5ce24-d299-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "62.122.184.98", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883544, "uuid": "363c4f36-d2af-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "74.48.108.19", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736855105, "uuid": "ffa551c5-d26c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "78.163.220.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736812985, "uuid": "edb4f7e5-d20a-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.220.170.242", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736858946, "uuid": "f0df67b2-d275-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.208.139.147", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860509, "uuid": "94b255ab-d279-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.31.47.167", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860506, "uuid": "92f07f27-d279-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.31.47.48", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736874425, "uuid": "fac5bc85-d299-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "87.247.158.212", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736849044, "uuid": "e2e6498e-d25e-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "89.109.11.99", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860506, "uuid": "92c46349-d279-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "89.110.99.68", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736848144, "uuid": "ca5ada78-d25c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.92.165.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736840944, "uuid": "06f26dc9-d24c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "admin.bookviewreserve.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736840946, "uuid": "07ce1fba-d24c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "admin.capthca.world" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736840944, "uuid": "07010c49-d24c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "aleksandr-block.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736864583, "uuid": "10f62f5d-d283-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "amazon-ny-gifts.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860684, "uuid": "fcd6468d-d279-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "antibot-check.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736840945, "uuid": "071ea4c4-d24c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "atilayelektronik.com.tr" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736864106, "uuid": "f4afa33c-d281-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "ay9.s3.us-east-2.amazonaws.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884684, "uuid": "ddcad18c-d2b1-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "botnet.hopto.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736886424, "uuid": "eb071012-d2b5-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "c0vid.ddns.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736866385, "uuid": "42b23618-d287-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "captcha-serve.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860206, "uuid": "df96e950-d278-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "cbveri.app" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736858644, "uuid": "3ce062e6-d275-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "cdn-connect.docusigner.info" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736858947, "uuid": "f168d5f4-d275-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "codebizz.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736869924, "uuid": "8052b53b-d28f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "combo.s3.eu-north-1.amazonaws.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883245, "uuid": "84111c45-d2ae-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "crystalc2.duckdns.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884024, "uuid": "549e03a5-d2b0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "database.sempulurpratamapapua.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736895063, "uuid": "08604d9c-d2ca-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "dihvbe.theeyefirewall.su" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736869925, "uuid": "808b1b77-d28f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "fixecondfirbook.info" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813584, "uuid": "52d14ac2-d20c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "googlsearchings.art" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813584, "uuid": "5321098a-d20c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "googlsearchings.cfd" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813584, "uuid": "52d077a7-d20c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "googlsearchings.click" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813584, "uuid": "52e0c76d-d20c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "googlsearchings.guru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813584, "uuid": "52d1e5c0-d20c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "googlsearchings.online" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813584, "uuid": "52d594ba-d20c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "googlsearchings.quest" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813584, "uuid": "52dd473a-d20c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "googlsearchings.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813584, "uuid": "52d57401-d20c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "googlsearchings.site" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813584, "uuid": "52d3a2b4-d20c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "googlsearchings.wiki" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813584, "uuid": "52d3086b-d20c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "googlsearchings.xyz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736865185, "uuid": "77c108fb-d284-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "ifuckyourpc.win" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884444, "uuid": "4ede3d82-d2b1-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "killbaidu.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860445, "uuid": "6e2dcf7f-d279-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "kufar.online" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736864165, "uuid": "175e5768-d282-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "nirocloud.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736865306, "uuid": "bf6bb7af-d284-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "no.ssl.very-loves.tech" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736860384, "uuid": "4a04b278-d279-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "olxn.college" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736857145, "uuid": "bf3e5a9e-d271-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "pink57hj.site" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736834285, "uuid": "8577427a-d23c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "primoris-882gg22.s3.us-east-2.amazonaws.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736869924, "uuid": "80531549-d28f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "razer-partners.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736877783, "uuid": "ccbd15c0-d2a1-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "sck-dns.cc" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736869924, "uuid": "80455299-d28f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "securbookinid.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736869924, "uuid": "8045cc28-d28f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "securebookingid8987.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736869924, "uuid": "804b0146-d28f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "solve.xfzz.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813644, "uuid": "767fa6c5-d20c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "thepremiumstuffs.online" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813644, "uuid": "76862abf-d20c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "thepremiumstuffs.pics" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813644, "uuid": "769e41dd-d20c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "thepremiumstuffs.quest" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813644, "uuid": "768909fe-d20c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "thepremiumstuffs.site" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813644, "uuid": "76885546-d20c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "thepremiumstuffs.space" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813644, "uuid": "76880c9b-d20c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "thepremiumstuffs.website" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736813646, "uuid": "77b3fae5-d20c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "thepremiumstuffs.xyz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736891763, "uuid": "594f3bc4-d2c2-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "usa7.info" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736867345, "uuid": "7f21b6e8-d289-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "wceecsit.international-confrence.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736869924, "uuid": "8042112f-d28f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "x1ondfirmbok.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736884024, "uuid": "5440814b-d2b0-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "xinglian.us.kg" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736883844, "uuid": "e97896b5-d2af-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "xy.jzhh.pro" } ] } }