{ "Event": { "published": true, "date": "2026-04-16", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-04-16", "timestamp": 1776384925, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "7c63d010-5aa8-4960-9633-aaa1e916a224", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1776298748, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776298748, "uuid": "14db9843-ed0b-4cbc-a7eb-d6f63cb57bb8", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776298748, "uuid": "0739b6f5-58f8-4648-89d9-9b74fad1cf4a", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776298748, "uuid": "9bd47ec4-30c2-4731-a2ec-3350287616a7", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776298748, "uuid": "c138e52a-cb99-488e-bacd-c3f00c516575", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776298748, "uuid": "9daf00d1-0fb4-4055-ba59-90b82204cdfa", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776299657, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776299657, "uuid": "2a3bd0af-cb9a-408b-bba9-1a340a356af9", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776299657, "uuid": "c5cfeb16-517a-4172-aa64-b1b95319da6f", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776299657, "uuid": "1f6b2d24-6008-44e3-8233-d0cd63d8bd10", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776299657, "uuid": "2c2bd6b8-a84e-4ee2-82fd-442c2b6d3a96", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776299657, "uuid": "267a0851-c628-45e4-b419-d795ad2fab6e", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1776304331, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776304331, "uuid": "6a62caf5-2a1d-458b-9471-7495472ae02a", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776304331, "uuid": "1de8676d-00f1-4d9d-ba3d-7669ca0c233a", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776304331, "uuid": "0248bf23-cea7-44c7-b323-08de7cb07ebb", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776304331, "uuid": "1621489f-0b6f-4e99-9d51-b55724d7b628", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776304331, "uuid": "fd1b4a1d-eed8-4cff-8b9f-86426bcb28fd", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "204566bf-393f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776307871, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776307871, "uuid": "f7d96bd8-a97b-47d9-9344-2225ee2f331b", "comment": "Malware payload (Mirai)", "value": "a3fa7918f665024005eb270dd95a36ad", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776307871, "uuid": "9b809e1b-3b57-42f5-b137-f31c9d102dd5", "comment": "Malware payload (Mirai)", "value": "3b45af43b673ee124c89887e3aad20e888a5e645d7cfc7279f24278f4352a5c1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776307871, "uuid": "4483357b-69a8-4b33-9e20-3617ddb4bc44", "value": "T1D0A32863CC262F18D668D5B5B0B19F796BA39920814B1FBF1677C6744083D8DF6093", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776307871, "uuid": "c46850bc-7de9-4efe-a581-24629a01bd4a", "value": "1536:ro5ihIo2bCSjKdPaQ7NXAaLAqB8t2bW7s3Liljxf97:8MX2b1GdbOaLAj4bWo3LO91", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776307871, "uuid": "dfe50b45-9ba3-4d36-876a-29f6570996a7", "value": 105056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776307871, "uuid": "a6b71d09-75a9-44f0-a482-fe98c150ba27", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68c6bb60-3940-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776308422, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776308422, "uuid": "05b88f7d-3af0-4456-a6e3-c75561174b36", "comment": "Malware payload (Mirai)", "value": "0bd38d6eebb3ef26c6c568ecf037d520", "object_relation": "md5", "Tag": [ { "name": "autoconfig-atlcpatax-com", "colour": "#9fc1f1", "exportable": true, "hide_tag": false }, { "name": "autodiscover-atlcpatax-com", "colour": "#325cc7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mail-atlcpatax-com", "colour": "#fc86fd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776308422, "uuid": "7f400ae1-2ab4-4c2f-bec5-25e28867121b", "comment": "Malware payload (Mirai)", "value": "e12d388977fcee4d2f2412bad729b736815a4e8d853165133cf2c177405ddff9", "object_relation": "sha256", "Tag": [ { "name": "autoconfig-atlcpatax-com", "colour": "#9fc1f1", "exportable": true, "hide_tag": false }, { "name": "autodiscover-atlcpatax-com", "colour": "#325cc7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mail-atlcpatax-com", "colour": "#fc86fd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776308422, "uuid": "4b9ae1b0-92b7-4c26-a69f-62ae99073e38", "value": "T127E3F842BD419F13C6C622F7FBAE019C37157BA9D2EA3102DD217F90378A9DA0D762", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776308422, "uuid": "8b468106-830b-4e4f-82a7-ab09749bc852", "value": "3072:cdXz/Rr+Lgo6mpA3qvh0a4I1uRHSdo21D5MgwbZnYYi:cdXz/RrEcqvea4IcRHUoCVbwRYYi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776308422, "uuid": "47f64066-13ce-461b-ab08-f3cc1c3f86bd", "value": 146304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776308422, "uuid": "64139c67-4026-4d38-b80a-426a79c4f8c1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68cc63a6-3940-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776308422, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776308422, "uuid": "2eeeb3ab-595b-4890-b3da-1f6997bdf415", "comment": "Malware payload (Mirai)", "value": "b30e88e9b7b586115845f438691f04ad", "object_relation": "md5", "Tag": [ { "name": "autoconfig-atlcpatax-com", "colour": "#9fc1f1", "exportable": true, "hide_tag": false }, { "name": "autodiscover-atlcpatax-com", "colour": "#325cc7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mail-atlcpatax-com", "colour": "#fc86fd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776308422, "uuid": "2e868660-4f0b-4f87-86d3-404bd5762639", "comment": "Malware payload (Mirai)", "value": "cd9d2b2471bf7c5c09dbeeda73bdae88eddc0d9362f6fab4b3f4518add2a695a", "object_relation": "sha256", "Tag": [ { "name": "autoconfig-atlcpatax-com", "colour": "#9fc1f1", "exportable": true, "hide_tag": false }, { "name": "autodiscover-atlcpatax-com", "colour": "#325cc7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mail-atlcpatax-com", "colour": "#fc86fd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776308422, "uuid": "d9521f96-46c4-4151-93b0-e270c5a436e2", "value": "T16BF31AC7FD01CEBEF40BE77644A30805B530BB6658620A377257BDABED2A0D51427E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776308422, "uuid": "69aad1ba-b652-4e7a-a6cc-bb752c7bc002", "value": "3072:/v3VaR9oVG9p5R/xHq3iFq4qPVUjbiwL/GTdmZqKyMozNdy9w7eTBnd+:EoExHqMq4q8L/U11ry9weJd+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776308422, "uuid": "febf54b4-a67e-45d0-addc-51331db27b95", "value": 165564, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776308422, "uuid": "1fe58a1a-3ff1-4170-9fb7-90c9dc35d8e9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68ccca82-3940-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776308422, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776308422, "uuid": "259d4a03-eedb-4dba-863a-e36be23257d0", "comment": "Malware payload (Mirai)", "value": "7c361e7f9da8c3534196786fc1ad9001", "object_relation": "md5", "Tag": [ { "name": "autoconfig-atlcpatax-com", "colour": "#9fc1f1", "exportable": true, "hide_tag": false }, { "name": "autodiscover-atlcpatax-com", "colour": "#325cc7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mail-atlcpatax-com", "colour": "#fc86fd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776308422, "uuid": "43c39f66-200b-41a8-ab1c-0fbc24c6e92f", "comment": "Malware payload (Mirai)", "value": "4c9d5f3e9d0bd802abc939ac498abd23d8e933c06d3f2765e48b5d596dd30aac", "object_relation": "sha256", "Tag": [ { "name": "autoconfig-atlcpatax-com", "colour": "#9fc1f1", "exportable": true, "hide_tag": false }, { "name": "autodiscover-atlcpatax-com", "colour": "#325cc7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mail-atlcpatax-com", "colour": "#fc86fd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776308422, "uuid": "407c0ac4-2ecc-4d06-be91-129c8f7d548c", "value": "T1352490066F919EF7D86FDD3306E98B0128CCB41725643B7A7670EA6CF90A58B05D38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776308422, "uuid": "5f1c255f-719c-4ec2-b0a8-bd51f84bf7a6", "value": "3072:bWsI34QDSYA1iqfDnGW4mowlOzbeTK7wbZn4:bWsI34QDSTzfDd4mow86ywR4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776308422, "uuid": "fd6e91a6-0928-4745-8d7a-9947f6e45519", "value": 217008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776308422, "uuid": "600f22b8-2b5d-4029-a7cd-d2a2b18b1338", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68cf8cbd-3940-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776308422, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776308422, "uuid": "3dbdc7e1-95ea-4bf8-9f65-39a5e8f3f170", "comment": "Malware payload (Mirai)", "value": "875c59a45927fc3b52444e79e0d66ace", "object_relation": "md5", "Tag": [ { "name": "autoconfig-atlcpatax-com", "colour": "#9fc1f1", "exportable": true, "hide_tag": false }, { "name": "autodiscover-atlcpatax-com", "colour": "#325cc7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mail-atlcpatax-com", "colour": "#fc86fd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776308422, "uuid": "511d210e-2697-4ea7-8dfd-af8f49ceb672", "comment": "Malware payload (Mirai)", "value": "903a903d79cf00593cafd4245266e15d26984979cc154e3b287746260cc768b2", "object_relation": "sha256", "Tag": [ { "name": "autoconfig-atlcpatax-com", "colour": "#9fc1f1", "exportable": true, "hide_tag": false }, { "name": "autodiscover-atlcpatax-com", "colour": "#325cc7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mail-atlcpatax-com", "colour": "#fc86fd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776308422, "uuid": "0f7d2646-eef9-42c9-b64a-16bb4f4aab4e", "value": "T1D4D32886AB43DEF3D80315F112B79B226A32FC3E1836DA91E378BCA1D9555C196063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776308422, "uuid": "cd8fdf28-0520-4d05-a6ca-d59eb36b57f9", "value": "3072:q3FRS6VzrAvknIt4AQ2KoXE9wRYJQ60jxeozJ47/p1XwbZnlwL:q3F1ovknE4ASCEiuW4jplwRq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776308422, "uuid": "0ed6ff89-964c-454e-8763-18be46bf185d", "value": 130896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776308422, "uuid": "a809f3de-5ad6-457f-ada6-ae9a5a28d450", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68d2e911-3940-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776308422, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776308422, "uuid": "396bd508-8b6b-4ac5-9934-eacbc35efb5b", "comment": "Malware payload (Mirai)", "value": "6a983307c3a66a9ed9c3ca839f0b2853", "object_relation": "md5", "Tag": [ { "name": "autoconfig-atlcpatax-com", "colour": "#9fc1f1", "exportable": true, "hide_tag": false }, { "name": "autodiscover-atlcpatax-com", "colour": "#325cc7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mail-atlcpatax-com", "colour": "#fc86fd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776308422, "uuid": "aa49ff6e-8f51-4b4a-8b8d-f065e6738ae0", "comment": "Malware payload (Mirai)", "value": "f4c374ce67d6bb9bc78a31480a60fc25ec2064f67f62b43a3c628574d13a6874", "object_relation": "sha256", "Tag": [ { "name": "autoconfig-atlcpatax-com", "colour": "#9fc1f1", "exportable": true, "hide_tag": false }, { "name": "autodiscover-atlcpatax-com", "colour": "#325cc7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mail-atlcpatax-com", "colour": "#fc86fd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776308422, "uuid": "334832ab-5670-4a20-8898-0be33756bb74", "value": "T13CF31C06A9419F12C5C612BAFF5E014D37137F78D2EE72029D20BFA0778A9EB0D7A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776308422, "uuid": "61f6bff3-d8ef-4e00-8150-e7268244a991", "value": "3072:bN1Nb0xtsx2whiMiQnjXpM9IIhdse1ESgaJL2p2AwbZnP8f:bN1NwxY2whiMiaXxIhF1ESga5PAwRP8f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776308422, "uuid": "f75010de-ad90-40bb-b701-4e2f00950fc2", "value": 160708, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776308422, "uuid": "956d7e21-8dc9-4037-842d-ca181ed48615", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68d45c32-3940-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776308422, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776308422, "uuid": "cf5a9ea8-6292-4ba1-b3b4-c3eba3dbf297", "comment": "Malware payload (Mirai)", "value": "c1b3525a872f8d8728f23392afc59c5b", "object_relation": "md5", "Tag": [ { "name": "autoconfig-atlcpatax-com", "colour": "#9fc1f1", "exportable": true, "hide_tag": false }, { "name": "autodiscover-atlcpatax-com", "colour": "#325cc7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mail-atlcpatax-com", "colour": "#fc86fd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776308422, "uuid": "d28d9381-e7c7-434a-ab24-5998ad41a1ed", "comment": "Malware payload (Mirai)", "value": "13e9425e3fe3d27e53787d6c15ca300df7eab040bad8b3e9b7127db740851bda", "object_relation": "sha256", "Tag": [ { "name": "autoconfig-atlcpatax-com", "colour": "#9fc1f1", "exportable": true, "hide_tag": false }, { "name": "autodiscover-atlcpatax-com", "colour": "#325cc7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mail-atlcpatax-com", "colour": "#fc86fd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776308422, "uuid": "a45c91ac-1453-402e-959d-fd2efdb294cc", "value": "T17BE3F846BD428F13C5C622F7FBAE018C37157BA9D2EA3202DD217F9037869DA0D762", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776308422, "uuid": "19ad4bff-ab4f-49fa-b05c-3ad9d755bbb8", "value": "3072:55Kal34+iwT6AQGdNI44i0X1HD8yQ2obdcLUwwbZnx/ki:55Kal34EQGnI44nDA2qWUwwRx/ki", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776308422, "uuid": "979b79b2-6fcb-4bf3-8dd2-02d13147dce6", "value": 150400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776308422, "uuid": "b3264b8a-b5af-4730-9d0d-6b165b349b8e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "85318f76-3940-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776308470, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776308470, "uuid": "1b16f68f-958b-4a1b-aea9-1a06303f3703", "comment": "Malware payload (Mirai)", "value": "d1067834da3f2038aa71150454dba4bd", "object_relation": "md5", "Tag": [ { "name": "autoconfig-atlcpatax-com", "colour": "#9fc1f1", "exportable": true, "hide_tag": false }, { "name": "autodiscover-atlcpatax-com", "colour": "#325cc7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mail-atlcpatax-com", "colour": "#fc86fd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776308470, "uuid": "23554531-b245-4b34-aa74-2f7940774e1f", "comment": "Malware payload (Mirai)", "value": "9e4d588d68b69f95fb8a27b6fd73fe14508ab711fd18bd40ec40bcb3cca95040", "object_relation": "sha256", "Tag": [ { "name": "autoconfig-atlcpatax-com", "colour": "#9fc1f1", "exportable": true, "hide_tag": false }, { "name": "autodiscover-atlcpatax-com", "colour": "#325cc7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mail-atlcpatax-com", "colour": "#fc86fd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776308470, "uuid": "bfbc41bc-e846-4029-89b9-0c2827a24f3c", "value": "T17DD34A73DD16AF56C116A1F0B6B14E783B53BC2948671EF9A962EAE08043DCCF5093", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776308470, "uuid": "e27308f0-8734-4e6c-bf48-663ef95ce038", "value": "3072:xIC9Y24Pyp9m9gUMyE5NW3VPNcoKywbZnqx:xDq49NUMyO43VKoKywRq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776308470, "uuid": "a2cdf98a-9a6d-4f1b-a8ef-b44cd74ce2cc", "value": 134080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776308470, "uuid": "35b4a623-e051-4e2f-98ea-ef640093e498", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8531debe-3940-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776308470, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776308470, "uuid": "f4ab2951-2023-4ca7-98d2-2524202a3539", "comment": "Malware payload (Mirai)", "value": "965297d9948be0c6adabc39611afd443", "object_relation": "md5", "Tag": [ { "name": "autoconfig-atlcpatax-com", "colour": "#9fc1f1", "exportable": true, "hide_tag": false }, { "name": "autodiscover-atlcpatax-com", "colour": "#325cc7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mail-atlcpatax-com", "colour": "#fc86fd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776308470, "uuid": "b580abee-2b4e-4535-adea-a7e668812a28", "comment": "Malware payload (Mirai)", "value": "4762a0ea1500de832fd3b04ce3f7a098018b536ab0879a927edb373778c1080f", "object_relation": "sha256", "Tag": [ { "name": "autoconfig-atlcpatax-com", "colour": "#9fc1f1", "exportable": true, "hide_tag": false }, { "name": "autodiscover-atlcpatax-com", "colour": "#325cc7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mail-atlcpatax-com", "colour": "#fc86fd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776308470, "uuid": "66e11591-0e38-4d0a-93fe-522ae5ec6099", "value": "T1ED24551E3E12DF7FF66D827407B38D20969936962AE1C545F16CE7181E2028E641FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776308470, "uuid": "26c19d3f-bf4a-453c-bea7-0ddc3ce22a3f", "value": "3072:azjAn460/UsiMKFTFqVXN9YJlZDK3iff+bSi2mqgYwbZnmk2uFDM:a246AUs/WTFqVX+wimV21XwRm9uq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776308470, "uuid": "a3c477c6-696a-409f-a5cc-06a19411e2eb", "value": 214096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776308470, "uuid": "141a5934-9cfe-4543-8b4a-65c2aa9a4f18", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "adfc99f6-3940-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776308538, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776308538, "uuid": "1a5b0f04-0c0e-417b-b205-417a5fad5aff", "comment": "Malware payload (Mirai)", "value": "8588027ebbff10efbdab505133d7f204", "object_relation": "md5", "Tag": [ { "name": "autoconfig-atlcpatax-com", "colour": "#9fc1f1", "exportable": true, "hide_tag": false }, { "name": "autodiscover-atlcpatax-com", "colour": "#325cc7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mail-atlcpatax-com", "colour": "#fc86fd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776308538, "uuid": "bc1afa16-02dd-4c63-96ba-20641a7d3a97", "comment": "Malware payload (Mirai)", "value": "66174ebb8709bdd04d4f4cf0da98d42bccb1f3c14b62e5344d3202e8bf5dfada", "object_relation": "sha256", "Tag": [ { "name": "autoconfig-atlcpatax-com", "colour": "#9fc1f1", "exportable": true, "hide_tag": false }, { "name": "autodiscover-atlcpatax-com", "colour": "#325cc7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mail-atlcpatax-com", "colour": "#fc86fd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776308538, "uuid": "ddeeb657-1e8a-4d55-81e6-92e9e8ba1b4c", "value": "T112830845BD829E01C4DA23BAFA6E008D33537BA9D3FE7112CD116F5073CA99B0EB65", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776308538, "uuid": "d3f3e8a8-2d6d-4d3b-96a2-3807ad2e9d54", "value": "1536:NtnpR3IuWSHhUGba557wNjxDlFNNWirZYs92wQG8mr2llyUeJizYdQwbZnjud:r3IBuUGevwBLsirZYs92wQEb8YdQwbZK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776308538, "uuid": "cdc454ce-50ef-49c1-a673-6b1b84ad666d", "value": 84300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776308538, "uuid": "84f2a9bd-5d69-4efd-b420-02ae6e5e96f3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bab6ac68-3948-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776311995, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776311995, "uuid": "7c667440-3773-495e-a8ec-69042cb19d13", "comment": "Malware payload", "value": "d8ca0e1be98c1383ad8b17d551a1a097", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776311995, "uuid": "751546ef-7a3d-4039-9bdb-461e25319cf6", "comment": "Malware payload", "value": "919b9020c105ae2eed37820b245c8df063f9e2ba9937ff49640da28d296f0e9d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776311995, "uuid": "3b7d230a-a3c5-41f4-ac4f-6f257e18c9d8", "value": "T13193E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA523895F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776311995, "uuid": "68765516-75b5-45dd-bcd4-e77dc22850c4", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPX9IH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776311995, "uuid": "bf2922aa-bc79-4543-9caf-c1baf8fda790", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776311995, "uuid": "f84bea94-3e32-400c-ad23-577bcd131d15", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "87a0267a-3933-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776313060, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776313060, "uuid": "dec9c732-f9b2-4483-a216-d3d083627b4f", "comment": "Malware payload", "value": "347594f5c78a4f394bf5bcf28982ea34", "object_relation": "md5", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776313060, "uuid": "0f555e12-be8f-4094-b8ec-aa35ebf88c0a", "comment": "Malware payload", "value": "f6e9316f52f91bb189a191440a36b186108c99e9fd870685436516080c7d2413", "object_relation": "sha256", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776313060, "uuid": "82c44527-82de-465f-a913-bf86925d37be", "value": "T1B4F55B0FEDB98CF9C095E2744433A556BE647C400B3163E72AE0B2682E737F099B5B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776313060, "uuid": "70fbf6a0-ff63-4abc-a60a-68a60ca01f73", "value": "3271ee162568f50a6810be9b8973807f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776313060, "uuid": "0fb72514-05a2-441d-b770-08312a372eae", "value": "49152:ql1pmt8Yu4t6j8gZ8KnhQlcOGDqjUQclq:qlGLQvQlvk+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776313060, "uuid": "ebf8eea8-39b6-4376-a884-cd7a66b7042a", "value": 3485616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776313060, "uuid": "b574760e-2801-4177-b7db-9c6a3be523cd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c07ba9a-394d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776314091, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776314091, "uuid": "c867de29-3f15-419f-980b-1f4b8e3cf570", "comment": "Malware payload (Mirai)", "value": "935d4e7acb62ec6c24028cc7f4992d35", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776314091, "uuid": "b6e5209f-33ea-4135-82c3-fb063358cb25", "comment": "Malware payload (Mirai)", "value": "cce4491ecb2ed2904d0ca07e99fea9c2d2e7a6bebc89832258f0e0e7cb754e85", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776314091, "uuid": "ea71acb7-8fbe-447e-9074-a88fd122cab3", "value": "T18242D50B57FABE07C1D0E37301E3072266EA4F556124472F7E192C995E9934B2D3AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776314091, "uuid": "2320aee9-3716-4ae3-8d54-5b97ba32c0b2", "value": "192:dmLjGr1/WTohTAjcusPuEfHsCi0UZNDstqYM1DqGcjeZ:AuacuDEfMC7UphqGd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776314091, "uuid": "38ca23f1-3938-4093-914a-8361db42db98", "value": 12292, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776314091, "uuid": "ed5bf255-041e-4723-9578-4f433c6fc315", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "439a3c11-394e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776314372, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776314372, "uuid": "bce9520b-2b04-429e-967b-8d20770bb102", "comment": "Malware payload", "value": "445b5e30b73b7d2022052b8ff50d6c5c", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776314372, "uuid": "407a75c8-9b6f-4f4f-a278-81d4b72ea457", "comment": "Malware payload", "value": "ebf36797e5d89b6c9276f3234972f9ad394ddba7de3058e3ae3e175f2f56b6af", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776314372, "uuid": "24089842-3d3b-4eb2-ab80-e678d01139bd", "value": "T16982D0E0FFFDF758EF8B696AA549142E8EF9484DD4EA00B549A7B40C8B8453570236", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776314372, "uuid": "f28d27a9-841d-4cd7-9e64-e4c25cfd3dcd", "value": "384:C8aSEDZyBysErrpT107WMGqEyJ7ouRwDqA06cV0RV2xG14Jij9B/yVYFrc1b:vaScGwrp50EqN7nRuja0D2xGIij99ybx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776314372, "uuid": "c303be67-33b6-4c1c-9ebf-cc4ecb6a37f7", "value": 18688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776314372, "uuid": "60e13edd-3562-4cd5-8263-8986ccabbaa9", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5c6e3f5-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776314522, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776314522, "uuid": "abbffa41-0e85-4e61-90d1-7c3efa2e744e", "comment": "Malware payload", "value": "3b973286b5d06e8920aa3578a4941be1", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776314522, "uuid": "bda8844f-883d-4486-b7cc-fc9c07b97407", "comment": "Malware payload", "value": "d4b125064e284d4586ccbe058f214c34ae4a973a3f276f7db1a1b1da0e9f97b6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776314522, "uuid": "e8cc8e71-9599-4fae-ad8d-fbbf65552e2b", "value": "9A33024523A62EB6C57548F1A3F8FF89B14A3EA49FF55C0A7C207658A43236C28C4C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776314522, "uuid": "23378b0e-0252-4eb8-b47e-4ef8aa670a80", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6EO:yYI0ARqw1qAEv7UIFM8oJorFquj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776314522, "uuid": "25f472e7-4a11-41b7-8c9a-17b5ad68e1c8", "value": 53576, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e0e95d3-394f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776314873, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776314873, "uuid": "f99e4ecd-8f2b-493e-a1f1-878fc140d997", "comment": "Malware payload (Mirai)", "value": "19b9386d567027e766507d9a298b546b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776314873, "uuid": "8116388a-5cdc-4888-9ef3-62e6b2e3c10b", "comment": "Malware payload (Mirai)", "value": "8deeea0a052e3acd8818c4cd95825347ccdb37d0870befccc6027a21d937819d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776314873, "uuid": "05110446-3569-4591-bac7-5bc354dea1be", "value": "T17293F649FD416B10E8D635FAFE4F024973934B6CE3FE7201AA245B2523CAA5B0F764", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776314873, "uuid": "0ee013ed-1952-44c7-a33b-e9fdffcb0283", "value": "1536:wqnmEMDz8EdtS/pljv8oWKaFuZMgmMGKPlhKv8ioyXi/9RZRYDu:FMkEvqT78oWKaF8MgmhuyXi/9RjU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776314873, "uuid": "4ed6a4b1-8ad9-4074-bdaa-1aae1dcd9e2d", "value": 93252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776314873, "uuid": "64e6eff6-84ea-40b2-a618-4b9d47201104", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80aa88f1-3950-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776315334, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776315334, "uuid": "d452ad5a-f8fa-4ece-8d22-d471eecf2b19", "comment": "Malware payload", "value": "cab8acc109ae1382c38be65e1bd3dc13", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776315334, "uuid": "4af6b3f8-74c2-4c50-93cf-0701e4fe7aec", "comment": "Malware payload", "value": "517438ede1f68e6c151208b51f8cd41056587e724dba6108e0cc6e44abca7a65", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776315334, "uuid": "f796a3de-fd4b-4918-8f25-26f93ad86657", "value": "T12D8308327488582A210B428FD267336C70AFDCE2D611E5B6F6F622344BA5EE135B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776315334, "uuid": "f8db129e-2dca-4d0f-9aee-17c107b26586", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnDWaqVN/:XEKltp9txAX/yr2pbDWfVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776315334, "uuid": "a4568ec9-e307-44e9-9236-a332729e6062", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776315334, "uuid": "70a40216-c566-4ad4-a6d1-827c2519deb5", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2aeced6c-3955-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776317338, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776317338, "uuid": "2bd4e86e-b39c-45e3-9eb1-7134dadfdba3", "comment": "Malware payload (Mirai)", "value": "6de0fda69521dbde22c4e012bf4feb28", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776317338, "uuid": "c7a38c85-99cf-4779-9de4-d943ad7b2d89", "comment": "Malware payload (Mirai)", "value": "6cc239ce8c0cbfaac004f6b1f2a7bff2f4cbdbb9ed94792f835706f234f34708", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776317338, "uuid": "0dd40b90-7f18-4560-a83c-41c06c9114d5", "value": "T1E0B30945FC505B17C6C262BBFB4E428D7B2A1768D3EE720399256F30379B95B0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776317338, "uuid": "47376751-8c41-4911-8c7f-85a62412c0d3", "value": "1536:GGZ6OjrPA8C+Uq4VtbXJTxt9vPEKOO9rb1hw9ZNqWRPlDHwywyshGz7N7ZOLqEdh:X6wrPuq4jZX9vcW1hebls", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776317338, "uuid": "cc564608-139a-4fd7-8a3c-c202c1e6c4f3", "value": 117280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776317338, "uuid": "daf8a097-0584-446c-925b-549ab03299de", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52c93de5-3189-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776317349, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776317349, "uuid": "958b6606-ff76-486d-9ba9-ec66bb0b1113", "comment": "Malware payload", "value": "fab9f6a388f0936d63ba3a539f29eeb2", "object_relation": "md5", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776317349, "uuid": "1725639c-22ac-408c-912b-2dc63f068b1e", "comment": "Malware payload", "value": "8bf533a12841f52137f8ca79f1b8ba9a2017fb5281b3b9896e58940bfb921ef7", "object_relation": "sha256", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776317349, "uuid": "66af65e0-57e3-4901-9af6-45c1f1c67f32", "value": "T147154AF5B71BB22599FB8F10C4051B8ECEBC66C7E2510AA4BEC5E961587E10F40BC7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776317349, "uuid": "7324334b-aed2-446d-99b5-f132a7b0dc24", "value": "24576:Suk1d4b4STrL4SYskS1hZUmNtp06ExQ6jXnEzFSSSSSSSSSSSSSSSSSrSSSSSSSx:0d4JrLpEmhJx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776317349, "uuid": "75cf6e75-841f-43c3-b188-4de68a313064", "value": 959360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776317349, "uuid": "ae471da1-7f73-4e0d-9454-f8b7d6a21027", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "32a7a63c-3955-11f1-bc00-82aee05be84a", "comment": "Malware payload (RemusStealer)", "timestamp": 1776317351, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776317351, "uuid": "dbfb0455-3320-4dc5-b0ba-11c4081e90a3", "comment": "Malware payload (RemusStealer)", "value": "771f6055e60fee2af859c66251f40062", "object_relation": "md5", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776317351, "uuid": "fe103d54-9761-4fc2-a333-380f33ace423", "comment": "Malware payload (RemusStealer)", "value": "e5ff327bbf5209bc062cca5b0caaed695199e973e63349e93c0f4f2bebb5f9b5", "object_relation": "sha256", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776317351, "uuid": "cc01d230-90d9-495b-ab89-d3a38e814c7f", "value": "T12F644D7BA62EEABA8EBF3D04C6051B475C1C4D97C37C80E86FC6583991B7858C874A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776317351, "uuid": "a350ac6e-ef9e-4e86-a400-95af65437272", "value": "6144:cD+jHY61pZTb34OC58NTu9eYh0Hb4zcVHGKbjNMLmkyKm5PF:tT1zDLsObgErKm5PF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776317351, "uuid": "bcb19987-473a-4fe5-8430-70b9f1464cbb", "value": 315428, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776317351, "uuid": "459bdab7-6f64-408f-a351-a9272d47ac35", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "32d5a0f7-3955-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776317351, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776317351, "uuid": "ff26ec1e-e968-46db-bce6-4f1763afed4f", "comment": "Malware payload", "value": "a508e8c5e28b98492da90d4692c7e83f", "object_relation": "md5", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776317351, "uuid": "76e3e08a-b38a-4b30-8261-e8639a9a42b1", "comment": "Malware payload", "value": "a305b65a54d79d82bcc46834ebc187dad60ab702e9f0399f07a0e8dbe84219b0", "object_relation": "sha256", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776317351, "uuid": "fbf15e7f-e47f-45bb-beba-5950d10e0a78", "value": "T1F3153AF5B31B7365A9FB9F10C4051B4ECEBC51C3E6810AA4BEC5EE65587E20E40BC6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776317351, "uuid": "b1727330-e9e6-4573-8880-c8274f107550", "value": "24576:SmVmNtVw7a/kDjgh8kzYEEwzMM/H2fKGzSSSSSSSSSSSSSSSSS+SSSSSSSSSSSSK:sVuavP3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776317351, "uuid": "fc509a6f-5000-4ff6-ac2f-82a06fd5866d", "value": 927348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776317351, "uuid": "a7513d26-bb13-4197-8b61-bfb8c529b3cd", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "481a0819-3955-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776317386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776317386, "uuid": "fcad548f-5613-4977-8d11-badb1afea4e7", "comment": "Malware payload (Mirai)", "value": "4d7a0b094294408d2d4c900f67be0f70", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776317386, "uuid": "67a67ed7-cdac-4af8-9da8-fccbd6e0d0c2", "comment": "Malware payload (Mirai)", "value": "5ed132a40feb2d2610e1c4b0cefddcc244412385d48f3474df040244505094b3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776317386, "uuid": "f17032b1-e269-45cb-a4d2-f2d18e165489", "value": "T156B3F845FC409B17C6C665B7FB8E438D7B2A1758E3EE720399256F30378B95A0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776317386, "uuid": "1a299f1b-2ffc-4c2e-ae7c-f416312a4aa6", "value": "1536:LjWGe2TXA7kQ4VBL2TFwdQHmbOuYLR846YcQlFclWBwywXMrMqoXmH7qCyB:eGpTXM4v2xwdwNR8vYVIv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776317386, "uuid": "31e61abe-a684-4afc-9c5f-818f483a151d", "value": 113184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776317386, "uuid": "b1dd9ed5-59c1-42bf-8d16-8c6626caaef0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6025d0cb-1bdb-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1776317491, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776317491, "uuid": "4c659dd2-8650-4f35-a4c5-067fc4df1eed", "comment": "Malware payload", "value": "500266c91b0ec8e57c12216f8bedaf37", "object_relation": "md5", "Tag": [ { "name": "BB19", "colour": "#4f0baf", "exportable": true, "hide_tag": false }, { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776317491, "uuid": "034959aa-fca2-46a4-8fc1-e749329ee37c", "comment": "Malware payload", "value": "c87190a157719caf07b908d6650884d0e429a7f896afa4a3e35ed00382779af2", "object_relation": "sha256", "Tag": [ { "name": "BB19", "colour": "#4f0baf", "exportable": true, "hide_tag": false }, { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776317491, "uuid": "543f5047-994a-44f9-98f8-fa7bf65919e0", "value": "T126E21BF692C031E5A047E3F5FC676B99722E70BFB7058998C6E40984E1C697C89ACD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776317491, "uuid": "5dae4416-8e15-4240-9194-9edfd1948971", "value": "768:4yF7Qsuypgn/f7RmHL4yDCwSrLSMLFjSxu/ern352T18SI5jID:4k7QsuySnn23MsxE1u8D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776317491, "uuid": "265291ef-ef18-44c6-8379-e79a2ad7277e", "value": 32012, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776317491, "uuid": "7493723a-c5b4-4f66-a33c-4555056b4ab6", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f90b78fd-3956-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776318113, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776318113, "uuid": "3e80b7fa-22cd-457d-bb62-b4ab53f53ed3", "comment": "Malware payload", "value": "e6cf47abc6563eddada16ec091c48dd1", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776318113, "uuid": "c9846b6e-8c6f-4cad-831e-8ce8baee0d33", "comment": "Malware payload", "value": "d0fff26a4ad06f5d7cb6f558cec3103e428145b0a78b136ecd7ea670ee43b5b8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776318113, "uuid": "fcef738d-020b-4528-82c8-069b2352391e", "value": "T142931A3178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776318113, "uuid": "9db35202-2710-4a62-a35a-2fdbcbaaba7c", "value": "1536:nByp1tF/uwMmAIa14oXoKIMepeV7tb73WdxCrCitkb5fv2v05xLkrJK70sCxKtoh:n8iIL0GitkbFv2v05xLkr20sCx+oIy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776318113, "uuid": "f408f516-1fdb-4d28-b54b-3f6adecda3ef", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776318113, "uuid": "f399c71f-8807-4030-aaa8-2bdf22c1ea27", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e0d21c8-3957-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776318255, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776318255, "uuid": "0841fa0e-0d3b-4ec4-b494-338d3918ef8a", "comment": "Malware payload", "value": "af4ad46c2c663d2463424fbc81594708", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "dropping-LummaStealer", "colour": "#647eab", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776318255, "uuid": "f8ea92d1-b19e-4fa8-8e26-d8207f506597", "comment": "Malware payload", "value": "73dc80881a838c48185218c7b9bd23c01751821df3850d0e3d359fe9fd5137fc", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "dropping-LummaStealer", "colour": "#647eab", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776318255, "uuid": "ef652dc8-8afe-4d05-b2df-c75b2d01ea66", "value": "T1ACD3DD8F9E9E89FD479F6098011BAC02E55F62170A1EC5B0BEDFAE4E7F21C6034A54", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776318255, "uuid": "aabad18a-2c41-497e-8b05-dfb82b4ce14f", "value": "1536:gG/Ml/6UmjpnqzQxwx+xExAxmxoxLxTxaxRpLHyKttp3sE0:IQoHyKttp3s9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776318255, "uuid": "34ebc8e6-5674-420d-a62d-a6c3da686802", "value": 140268, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776318255, "uuid": "7d176aff-dccf-4010-b606-d6d3818acdbd", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d45381e-3958-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776318791, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776318791, "uuid": "3a030854-cda7-4fe2-8edc-55d2ad7cb861", "comment": "Malware payload (Mirai)", "value": "5cddff8c619febc99a44fbdb5857bcff", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776318791, "uuid": "8aa4e2c3-34dc-496c-8b93-8d50336511ec", "comment": "Malware payload (Mirai)", "value": "61b2da52a289fe536edbeab608d4636a224dafdca9fc469f0fb94bda88576542", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776318791, "uuid": "bd322eb1-b7c8-486b-a778-4578a3e31251", "value": "T1D5C32A06B30C0947E1633EF43B3B27E1D3DFDA8121A4F644255FAA8991B2D32558AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776318791, "uuid": "71ea8242-dd23-4498-9b95-c4b7fe2f863a", "value": "1536:dAd65mdLLhJxDxI+bYqKA2OGxIkEcbI/MvAeJuOARGaJH8QqMibsbh:daS6LhJx2FrOGWkIpeCiIh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776318791, "uuid": "eb1bfc40-1ef5-4a3a-85e0-7c240f13fa11", "value": 121508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776318791, "uuid": "b2d9c5d6-6286-4a61-aadd-a3a1ac878ddf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3427aa43-3959-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776319071, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776319071, "uuid": "9e3e47dd-a522-45b3-be4f-6bd2e0ac9982", "comment": "Malware payload", "value": "0b7b234baaf3bdaafd5eb50084ed0589", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776319071, "uuid": "6903b699-9075-4817-a4a7-b4caed6f63ec", "comment": "Malware payload", "value": "57b66449c1653eabff52b1e19f5e2f98cd6116b9eaf522a8ac4b7a989a560aba", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776319071, "uuid": "9161b01f-c774-44a1-bc8e-c6688eeb5246", "value": "T1C8F3AB898D8988B09F1F6528051F6C578B8DD237022DDB84BEEE9F897F01AB135BD5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776319071, "uuid": "2ce7d030-4a64-41b4-b6f0-d48b7a9bfe8c", "value": "768:kLyTTTFWmmNw6pi2iGeE8MaprEIRx9GgmVIcMb2L0KxMQMb8Gai6t6i6e6c6Hw7o:ANN6gIoVcvVR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776319071, "uuid": "f7e5f25e-93e4-4f30-bae3-fc7adfe1cb07", "value": 169208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776319071, "uuid": "51bc8613-a689-4836-9851-7cdfb008732e", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fe954f8-3962-11f1-bc00-82aee05be84a", "comment": "Malware payload (DarkVisionRAT)", "timestamp": 1776322929, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776322929, "uuid": "0aff17fa-3897-4037-8944-a47bf9e33ad9", "comment": "Malware payload (DarkVisionRAT)", "value": "1ddef122a29bf06c1710424a57464813", "object_relation": "md5", "Tag": [ { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776322929, "uuid": "dcd6d546-fb42-4d4b-a78b-321ed9e13124", "comment": "Malware payload (DarkVisionRAT)", "value": "ac24f6d0da9372825d16e75a76ec2f43d185a3ab6ecbb1df6d7be482e4ea0412", "object_relation": "sha256", "Tag": [ { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776322929, "uuid": "6023ad93-3d77-4720-ba28-0f56e51c75ef", "value": "T1C1C4BE95DBE907D9E1B79A7488F10500EA377C454BB0D68F0384C4BB5F67A92CE39B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776322929, "uuid": "48f33853-371b-4c12-b626-1fe7df5324c5", "value": "a90dd0da2b8eddb963b8ea61476b1e94", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776322929, "uuid": "c1c7ef55-d975-4eb5-82b3-3eb4b592e7db", "value": "12288:oCkVN7FRFdxEofkoTcf5Q9LoNzAiREOzb4P:oCkjFd/fkNOLoN1Eob4P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776322929, "uuid": "a3c934dd-d09c-4893-a50f-5d4c0d94b415", "value": 560848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776322929, "uuid": "de3e73c4-da8e-49df-b699-947918a3a671", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fea84ae-3962-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776322929, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776322929, "uuid": "e589b1ca-8408-470e-8d11-8755354052b9", "comment": "Malware payload", "value": "1a0937be93e7f57d12877571a78d4d46", "object_relation": "md5", "Tag": [ { "name": "91-92-242-132", "colour": "#1ee483", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776322929, "uuid": "ce4abef8-754d-4667-8284-65bcc7faa71a", "comment": "Malware payload", "value": "7d78f74525a11c83c6638882b0bea5f5cc7963aaa134db19a4fe50e3d644385b", "object_relation": "sha256", "Tag": [ { "name": "91-92-242-132", "colour": "#1ee483", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776322929, "uuid": "7438de3a-6a2f-497a-8174-63d82a1e30a2", "value": "T1C905BF1AAFF801F9E0B79634CAE15922EB777C0657B0968F03D6456E0F276508F397", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776322929, "uuid": "b16d493b-3cd2-4b8a-8a60-4aae775f465a", "value": "42d08bda628312ef7f936770a3e3c987", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776322929, "uuid": "57b280d2-f57b-44bf-a623-97526ca3b407", "value": "24576:D8264kGPUXXk0k2Qr5H+S1iRuKXWIfRKp6b4:DO4kGPUXXkM6sugfsp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776322929, "uuid": "c2579b24-4b07-4386-852a-e6158e68ae61", "value": 836304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776322929, "uuid": "2fa5b0ff-d57f-4b12-b49a-e9a3f09c0da6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ddb6bb7-38e6-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776324008, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776324008, "uuid": "a131da5a-7918-430c-92c6-d2a4f68caf0f", "comment": "Malware payload", "value": "ac1874e473c5a844f4db8805f0567d09", "object_relation": "md5", "Tag": [ { "name": "91-92-242-132", "colour": "#1ee483", "exportable": true, "hide_tag": false }, { "name": "91-92-243-242", "colour": "#f9a03a", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776324008, "uuid": "0fccb5c3-57c3-4bfb-9596-6beea38616d5", "comment": "Malware payload", "value": "db7041e2f74ba1581a02e31080961dfb8ed810329fc0befd447d96ae8ef0245f", "object_relation": "sha256", "Tag": [ { "name": "91-92-242-132", "colour": "#1ee483", "exportable": true, "hide_tag": false }, { "name": "91-92-243-242", "colour": "#f9a03a", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776324008, "uuid": "e19e85ef-1b25-4614-b6e8-dcf559a06a1f", "value": "T1F8C49E96ABE503F8E1B7E630CDA10901FB777C4547B09A8F039445B75F276918E3AB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776324008, "uuid": "5efa48e0-166d-47e4-a0ba-7a96637c8ba5", "value": "a90dd0da2b8eddb963b8ea61476b1e94", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776324008, "uuid": "8aa2cdc1-3735-4177-ae41-20382564a62d", "value": "6144:piSm+owa1lGnNTszAKPWHh3UPKDK+gbJEZoaiokUI+2AIqMvpCE4mODiUU9sbHAo:8XPGnNKAvrDK+AIio/oNzAiREOzb4P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776324008, "uuid": "f326c9ac-5f66-45b7-8121-4f4f5f1de4d6", "value": 560848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776324008, "uuid": "dd23734e-29a2-45f3-bd0b-bcd311ba5970", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0443d1e0-396e-11f1-bc00-82aee05be84a", "comment": "Malware payload (RustyStealer)", "timestamp": 1776328010, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776328010, "uuid": "62c70718-90f3-484b-b93b-e0924679fc81", "comment": "Malware payload (RustyStealer)", "value": "babd9fdb1ce71bf7742e342b8c71057e", "object_relation": "md5", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776328010, "uuid": "493bafc8-572f-44b3-bc88-5b3ee07e6b94", "comment": "Malware payload (RustyStealer)", "value": "1e303b25c724cab6e37c038ac83ee7cd86d967ee9305c3e22749d79e4bed8ca4", "object_relation": "sha256", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776328010, "uuid": "a6f48a2d-22c7-4f20-856e-4ef19afff35f", "value": "T1F7A52361628E4632C02167B7EABFFBD0EB55DE34039ECA9074ADF25A1C38D3361674", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776328010, "uuid": "9ae4ac85-f266-4ff1-9acc-05588cf03dcd", "value": "49152:nv4U44bdNBONG7klf39tHFgkx7x9+wi+EDJQ64/Gu:d44bdNgN1l3lLx7n+w3EqG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776328010, "uuid": "f93183c4-291f-4f7e-8779-3c9748507914", "value": 2199552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776328010, "uuid": "13ad31ba-d5a3-4f03-ab68-07766d6e1679", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98a1aedf-38f7-11f1-bc00-82aee05be84a", "comment": "Malware payload (WeedHack)", "timestamp": 1776329349, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776329349, "uuid": "5a23a787-1f2f-481a-a5b8-01e5de31e744", "comment": "Malware payload (WeedHack)", "value": "d10a619145bfd62a5f65584b4cbcd033", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776329349, "uuid": "e8186a00-9db6-46cc-8c84-64c5258744ae", "comment": "Malware payload (WeedHack)", "value": "14118a6070f89baafd5f2aeaf2df7535a8053f99944453584f0d1efeb6501ac3", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776329349, "uuid": "5320193b-e28c-4c86-8802-64017625cc3b", "value": "T17284E0433AC45B12C1A44979D4F764300BE3F087B6BBD7492E99578A1E127FD8E4AF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776329349, "uuid": "8a6af4f6-61f9-4a90-8ad5-e09dd5d3e023", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776329349, "uuid": "9c44c444-d8e4-44bd-907e-24fd239cf5de", "value": "12288:N7UIuQDloSZh93j+6lwxzr/W11xFVc6By:2IxoQhtj+mazr/Ixzc6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776329349, "uuid": "43f2e36f-d31e-483b-87af-a7dbb9e71106", "value": 396288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776329349, "uuid": "a46cbe55-aad8-4dd5-9d74-5c39bbd521fd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "960aa631-397d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776334697, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776334697, "uuid": "85880736-6b71-4056-b80e-fe10564963b4", "comment": "Malware payload", "value": "1c0ce71e63da99848d3ff6d28c626d2f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776334697, "uuid": "08c459c9-a784-4f60-932b-f459d28b0a13", "comment": "Malware payload", "value": "2e66ab88f615f3b0fe6d874597fae654ed67c80b5ee56efe5aed5f1bf0511719", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776334697, "uuid": "bc7fb2d4-fdcf-4792-8f15-37e5defff135", "value": "T1ECF0E2CEA4D08DB1684589EB70A15C06A49BE8DD1BE64FC857CC20BE598EE09B652F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776334697, "uuid": "3a6812c5-51f8-4fd7-a162-3aa0c52c2e5f", "value": "12:7AWKZHY4uqDZrK23ZrKlt9MBEZrKGyT3ZrKGygt9Md:7xEf5DZeWZexMBEZe/ZesMd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776334697, "uuid": "4dac07f8-821f-4db3-8709-ec89df752bb9", "value": 490, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776334697, "uuid": "1a7b3601-3149-4ffd-a5a2-eb966431b000", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b59b32a2-397d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776334750, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776334750, "uuid": "0f769626-d976-41dd-920e-6a1567a0f1b4", "comment": "Malware payload", "value": "c787f90bbf07c34369cd42796f3b80d5", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776334750, "uuid": "a938bf9b-65bb-43ef-960b-17ba0404c69d", "comment": "Malware payload", "value": "1f0b911c5f3394a6d65182597c0fb197bd9749e6353bf2b85316e42e71e43c11", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776334750, "uuid": "d7e8673f-097d-4a32-bc96-c3ba8098a10d", "value": "T12182BF74D2C6F2D0FD1E2E5454990513F4E43C9F3E33C9B863596ED791A1A1253412", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776334750, "uuid": "6187f62b-4a17-473f-b9e6-f1f4d12a9bea", "value": "384:mppWAcJWal4vgyUj5kVxOa+p69DtGO7zY0sewc:mpFsWw8e5kVxHDtL/Toc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776334750, "uuid": "d607e416-f789-411d-a07e-973a96a5e95c", "value": 18688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776334750, "uuid": "210b3a7e-0e1b-431e-8d23-f8aa2b0ab393", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1061cd9d-397e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776334902, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776334902, "uuid": "7ad1ae40-cc14-49bb-ac2c-ec6185dfa4b8", "comment": "Malware payload", "value": "b71ed7b452ebeaca29bfb9a8ab01e7df", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776334902, "uuid": "25b2f72b-6f48-4326-8004-22692af8b0cf", "comment": "Malware payload", "value": "fd6790f933273690233625cf4d42b651242cf4582a162139919583026e8292bd", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776334902, "uuid": "aee9c67d-b713-4348-9f57-b6f2bc667250", "value": "T17C968D07E89515E5C0A9E2748A669253BA717C486F3133D72F90F3782F77BD0AAB97", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776334902, "uuid": "c84a7489-fb9a-44c4-97e1-ad4cf0549fef", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776334902, "uuid": "29db69e3-1647-427a-a464-955065c5ad5f", "value": "98304:aWH3dSvSAel5ti5UyBwMtjtO5ww31mGjNXlnckoK3uosgE:aWcvgl5tKUyBxjtCww19jN1cYG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776334902, "uuid": "4f1f1ec9-0884-44a8-8be3-3432fd7deba2", "value": 8703488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776334902, "uuid": "809e8e2e-da05-4d9b-8897-39cd9ca2d8c7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d4341cbe-397f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776335660, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776335660, "uuid": "f6d957ae-8180-4e1f-bf57-3abcdc01a5c9", "comment": "Malware payload", "value": "b7e6896d6e2c07b8b0a8f3e6b1143f69", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776335660, "uuid": "d71b1de6-c0d5-4308-bfc8-0457632d3f1c", "comment": "Malware payload", "value": "b9f31c8489ea9c2b6ff4c52c69fdadca3395a2ba18dd60b1efb6a1c318a2d698", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776335660, "uuid": "b151d025-e6f6-4fff-b93a-2c96576f1b58", "value": "T1D132BF3BB3D2959B9BC5200DC727BE6C8D4135969CCBF12C066689CB77B9130613BD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776335660, "uuid": "c7a8c084-065b-4307-a924-5588540cec27", "value": "192:JA4T25DUfLOg/ciWKEbeY10VK6u3tcXNcEGF6IGkEJwLS8Kri6:sZAJcrK/VK6wmNq7G/2J6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776335660, "uuid": "925d02f8-0686-41b6-9fde-a86d701c45ea", "value": 11520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776335660, "uuid": "3ddbb170-dbd7-4b95-9902-3b4ace7a562e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16eb9fc9-3983-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776337061, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776337061, "uuid": "6a338b63-54cf-4e09-9501-529043de23a3", "comment": "Malware payload", "value": "660e08f032ad56d14796821b96b7ee83", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776337061, "uuid": "e33b457b-d8e4-443f-b56f-469243d11204", "comment": "Malware payload", "value": "f873a8a50b9b384bc9d6348d57bd70af264109dfc4d6ac9f148723939334b1dd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776337061, "uuid": "c687aee7-9b83-4dc5-ba17-bbd702d66266", "value": "T138A3E91916670890F1EEDDC00D89B8BA1A137773A5E11BF967CCD64CCD16EED28C36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776337061, "uuid": "bd0dcbcf-0fc8-44c9-abb9-ca2b7dc27f4a", "value": "1536:84Xku131N6/RTVBMKJu83mPm+sezkTiBHAw06IyGbwgewyDjEYgIPLOAj1QJzqAj:9gVBH3mPm+sqk+HAw0F5KijXxj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776337061, "uuid": "40698cf1-db93-4ffb-bb3d-ef5cfd24127b", "value": 98122, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776337061, "uuid": "7be53a34-d492-41e5-9477-44dc38914b81", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44c62abe-3984-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776337567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776337567, "uuid": "f13662a1-870d-48c2-ba7d-07b3f0b82893", "comment": "Malware payload", "value": "b3dc7550d43dd42ce312d629f0204d25", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776337567, "uuid": "ebb70c8b-97e7-4376-afd5-80ddd9979e29", "comment": "Malware payload", "value": "aa4b74753139b4bd7469e9c97616784f4f6e745b6f8b0745e926190a7503d0d0", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776337567, "uuid": "d89d21ba-efad-42c4-9470-67f4aff51d02", "value": "T1DB04DDE7338082776D7AC99B7B1D88D960FEBF10039030E1DE5BB8A5D1A8743C1A56", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776337567, "uuid": "aa2a68da-d7c1-4779-8e92-4b51de4c5c4b", "value": "3072:Ua2VYv6J5Qmi2vTf+hVfaRVAqorlxomwOMWtW59K1JgG9s:kFEIb1s2wgv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776337567, "uuid": "aaa79b3d-4b2b-4c3e-966a-6739c24e43b2", "value": 174093, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776337567, "uuid": "bd308e47-0696-461f-b4f9-f14d365250c3", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5e2f181-f512-11ef-9894-82aee05be84a", "comment": "Malware payload", "timestamp": 1776337949, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776337949, "uuid": "d4e31763-0278-444b-9092-a04ee6357633", "comment": "Malware payload", "value": "f1fb042c62910c34be16ad91cbbd71fa", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776337949, "uuid": "1773c536-e926-4278-a0a0-56b8834cd94b", "comment": "Malware payload", "value": "9278d16ed2fdcd5dc651615b0b8adc6b55fb667a9d106a9891b861d4561d9a24", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776337949, "uuid": "b6bf51ab-d71c-4d79-9799-6e667c14ed2b", "value": "T171C08CD8009C383C7124B888DFC102C284669009A4A03EC154DBB62CC27CA27C88E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776337949, "uuid": "93311701-8bcc-4f29-9bb0-d95f67e49dcd", "value": "3:qVZx7ihxINq2nMLdrRK0xQxINq8VP5YNamEQfz3ZWhBbZ6iFi:qzx7Xq2udrRK0xpq2P5nmJ3aB96x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776337949, "uuid": "5df59be7-e10e-4e99-a19a-f845a2eaab81", "value": 163, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776337949, "uuid": "cfef7843-994e-4cc4-a817-c4320f390997", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a29e50-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1776339489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339489, "uuid": "d7b75e37-3aa7-42ed-b0f0-86be3b8e9106", "comment": "Malware payload (Hajime)", "value": "9b6c3518a91d23ed77504b5416bfb5b3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339489, "uuid": "5c9b7cf4-14e6-4239-9bde-33147a537128", "comment": "Malware payload (Hajime)", "value": "a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339489, "uuid": "a5cd651a-68de-4674-b672-a0a217637162", "value": "6D7312E017B517CC1371A8353BED205E9128223972AE35302E97528DF957703BAB2DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339489, "uuid": "42717f29-5c6f-4019-9256-331d9fe6f037", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBht5:8D+CAXFYQChaAUk5ljnQssL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776339489, "uuid": "217fa125-9693-45d1-a1ba-90ce42dc8bd5", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776339727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339727, "uuid": "b7d37a05-5120-4101-b3dd-c3eb25e3973b", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339727, "uuid": "26faa2b1-3aa4-496a-83d3-73af9300300e", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339727, "uuid": "63fcfc5f-9190-487e-aacd-2633eedef48e", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339727, "uuid": "0a453455-1b9b-4cd8-8401-9496bda6cd11", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776339727, "uuid": "11003309-da40-4d2d-bf22-b956ca2c45f1", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba405adc-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776339912, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339912, "uuid": "b2548eb5-047c-4a12-b2bd-39ca0d6fe83e", "comment": "Malware payload (Mirai)", "value": "fb86d950d537910525ac0dea846a838c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339912, "uuid": "4f5d04aa-abec-4115-a738-beb55d24195b", "comment": "Malware payload (Mirai)", "value": "65ea796df37d0d22f00de1091433987371304ee97bc5e2fb656d56112aacf7df", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339912, "uuid": "edfabbed-aba7-4b05-90a9-13c0b29e9f15", "value": "T131C2E05EBCA17D1ACBDC68B3589B53692588B040330E577DF350E940BB3A1CABA462", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339912, "uuid": "f28a0d5c-e746-407f-8ddd-1abb5788bd95", "value": "384:jkAiTbr7aXdY34nTcuURei3pyd0nV8T36pFRALOJ/E53kahBH741gpmQRWGVCz0A:jkXkdFTmhZg0VtpFRAiXahR8fQW/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776339912, "uuid": "9be5875f-2ab2-4bfb-923d-f637d83d0d01", "value": 27348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339912, "uuid": "a32bbc24-6ceb-4f5d-af2f-44e420925cb5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba40bc8a-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776339912, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339912, "uuid": "149ea4f6-eaee-4366-b093-4c051998a5a7", "comment": "Malware payload", "value": "ff1d72737568b222ae98efdcc2791d2a", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339912, "uuid": "ec924def-a442-42b9-b3e4-86ab43e7d03d", "comment": "Malware payload", "value": "afaea0ffb9b11631d139bbe4ceee9b535b5cad7725ff19310082ad7f72965268", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339912, "uuid": "5a92c20f-af2e-4cb8-8487-6ff868a99905", "value": "T1E612BF9AF7336B2BF7B4123325E398D6A2C3726E5D52924EC0540C01BB9FD5B21546", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339912, "uuid": "bc7b7cb3-61cf-4fb0-82b7-9854deea964b", "value": "192:5y/iwmkTIf3kJseWpf4gxydj+xflT3hTpWOltZZEaBHKEDQ7:4KwN8f32sF4SyRsJhTp/ftB47", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776339912, "uuid": "b3e253bb-3c1c-4ab8-82ef-53fddccad008", "value": 9280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339912, "uuid": "7227df75-8ea5-40fe-982d-7097cd484c0f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba418952-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776339912, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339912, "uuid": "e262588b-5d45-4219-b93a-417cb82b1aef", "comment": "Malware payload (Mirai)", "value": "dd79f1760547f258fd66ed2172d31af4", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339912, "uuid": "be3e2729-2c1f-4dbd-b5b6-d25c78081251", "comment": "Malware payload (Mirai)", "value": "7b234f3ec508c0e42708caae2394e1f16e0ac3e9e65593aea4fd6eb7458ac0f7", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339912, "uuid": "1a1be662-5c61-4d35-bb35-e812aa4ef8ad", "value": "T1E73316D7F501E9FEF809C33B4497151AB170E3A60A825635A353662BECBA2940877F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339912, "uuid": "18a55e58-78c8-418e-af38-40b34b62616e", "value": "768:wfEdRaMdHae8D3qyTBxg23/SOL/79gzff3GEmrtkEvIhBBSMI6:mwz58bqABu236OL/79gLf2EkwhBBTJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776339912, "uuid": "51c500b7-a864-4634-84dc-860b4c6de662", "value": 53828, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339912, "uuid": "e72f912f-1417-4e16-b919-8de1942da4a4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba50ee91-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776339912, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339912, "uuid": "9a086c19-49ca-42c2-b1a8-5211bcca012b", "comment": "Malware payload (Mirai)", "value": "5353217e006e9a84a95325a5e39e4db2", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339912, "uuid": "c1ce8cf1-9507-4c59-8c78-7f4478d210e9", "comment": "Malware payload (Mirai)", "value": "366a48d51282fc19bc1b8f25cd907fd871ca8fad9d86f02ff3220a07d49756e5", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339912, "uuid": "bfeab856-7c33-4f86-8f20-57efbded67a4", "value": "T1CA333937FA36082BC4C5657620E34739F2F7439A24BC4A2B7D710E8C6F65A402257B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339912, "uuid": "192c3ab6-699f-4326-9d21-4f4c42360b7d", "value": "768:NUOcutie9672AeO+Yk5V+DBXqlElYN/iRLEt+nG1Id:NUOcKNC2vYk5+lYhiStd1u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776339912, "uuid": "432c3fe0-019f-436c-931d-832d55dae546", "value": 51720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339912, "uuid": "206ea981-20a7-4d52-8236-c3d88677c5c1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba5392ed-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776339912, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339912, "uuid": "77b53053-ef32-4670-99e0-23f581954f23", "comment": "Malware payload (Mirai)", "value": "a37855f47a5583be14766b3c4041fd9b", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339912, "uuid": "1dc42333-47a2-41ab-936e-996c3bd8cfb6", "comment": "Malware payload (Mirai)", "value": "07b20b5ffe00d3f8449b68baa11a090603ba0191991af86afb31168a7abf2ffd", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339912, "uuid": "c6c7d76d-30ea-4b45-b676-d48517301572", "value": "T1A7C2E0E51D8404B0E91BDCB81AA31BD028310F957823CCC77692F676ED42A7838ADD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339912, "uuid": "e29f2467-ea19-4057-85ab-75ff2ff8c51c", "value": "768:0M4QrlNaN0OZlMqIr1eVuv5xvvfE7PJgGlzDpbuR1JYo:75ON0MlMqIheVMxvvfE7NVJuuo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776339912, "uuid": "a5de805d-a38e-4991-ab8d-cfbcaa1002b4", "value": 27224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339912, "uuid": "2ee8f302-778b-47b1-9e9a-f34213869411", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba546062-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776339912, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339912, "uuid": "0fb5aebc-acfb-4f70-a2ff-a26dc78c4cf5", "comment": "Malware payload (Mirai)", "value": "e0f2dd81cc92ecf574c838a63bbe13e3", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339912, "uuid": "e4d7d05f-4bb8-45a1-a4b3-cbfd7351e649", "comment": "Malware payload (Mirai)", "value": "e9f19fbf4c638d1095e3e978e157573db45fd9c251215c582559e314cd07c27d", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339912, "uuid": "0770718a-24f6-4c9a-b9bd-7dc736ba6d60", "value": "T1A8A2E018D5D45107D423433776BDD6B661B86F82978ECACA309F3ED255F212EF6228", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339912, "uuid": "93be1611-8135-404d-a16b-41a95ded1e40", "value": "384:MM2h016F/uiQ5oDeIHO427Rv1jL3m8WEnfahGhYLv1Rr:ah016F85oiIHO4IPq8WEikhYr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776339912, "uuid": "0629d730-ff4e-4e20-afe0-211cf3db871a", "value": 22496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339912, "uuid": "81bcf616-f439-46af-b349-236b4ef0e438", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba62ad5c-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776339912, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339912, "uuid": "8e080b48-c634-45c0-8f44-d17aed87bed1", "comment": "Malware payload (Mirai)", "value": "db1ae52482b726c0b5e9c0dc29f770fb", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339912, "uuid": "46a80e87-ccd0-44ac-adaf-5cbec3cf5450", "comment": "Malware payload (Mirai)", "value": "5d2b45b3ea265f1ee621d7b9d75c96f177d2b135158db93fde213c56a63ba726", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339912, "uuid": "cf9159c0-0dd9-4fc1-9c4e-5c6b932909b7", "value": "T148036CA3CE652D48D27EC9B530309FB913A3A568A6471FFA1279C6289053DCEF1463", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339912, "uuid": "8b91fb0d-c50e-4493-b7a0-6b51efc9f72e", "value": "768:lkEyFZp0Z6i6zw3dKJyKZzXKa6bi+Wj9oJq0vd0fYMCQUD+fjACQJI:ClF86iLVKZzX9sKj3+Z3D+sCQJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776339912, "uuid": "5440dad0-48a2-494b-a750-55696e85f2bf", "value": 40608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339912, "uuid": "8edfa441-8be7-4f9e-aeca-4c3225bc6dc4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba6f5f12-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776339912, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339912, "uuid": "5341564c-c5b7-4acf-8d57-695df65500a7", "comment": "Malware payload (Mirai)", "value": "b2c3f11d3e90143fdf6c4226c9c088c2", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339912, "uuid": "ba2afbe9-d299-466f-a12a-bf29bad4a852", "comment": "Malware payload (Mirai)", "value": "e16a3a60f39ce83cfa19ba50fe88b109cb02096126ac9e1c7cfeb8f64a432618", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339912, "uuid": "6fb950df-bab4-4282-94aa-f0666b80fa71", "value": "T17361AFA7C3BD4C231555DF0AF690D2A9680541F26EF353F8C9B5EB9246530B8B2837", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339912, "uuid": "f3a9b1a7-ecd4-4360-9510-281ced7ec866", "value": "96:m0GNlzGNlInbKWebKWHg2JJJf2JJJMV1c0U1c0lhPJ4YQPJ4YpjZJG66ZJG6Lu08:Nt605hn05hOn7E447E4U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776339912, "uuid": "5c548eb7-502c-4989-b2f3-731f2c3fc861", "value": 3371, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339912, "uuid": "295cfddd-c439-4f21-9026-7a5e83870883", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba72b7cc-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776339912, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339912, "uuid": "7b0147fe-7339-4336-b936-d8fe42a32c52", "comment": "Malware payload (Mirai)", "value": "a077d909120231f7df08c5beff574c02", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339912, "uuid": "6974f135-b034-4769-b5cc-fb445540447e", "comment": "Malware payload (Mirai)", "value": "dbcc8e8dabe18770063ed3a04ab5e5ea2b5435bee8bc99d77494e8394dc2a7d2", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339912, "uuid": "fdef8720-734a-4a99-bcc6-6390247011ef", "value": "T188E2E1F05601977182F044BEDA7947928C6549FDC4BAB0F6DA9843600CF7C432AABA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339912, "uuid": "cb36c22e-81fc-4eb9-aef9-af7f22eaddfd", "value": "768:e3QJ5+cW1DnIuM5+fIfut7rFM64h2x9q3UELdBlj:Lv+cW10kYuiRLlj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776339912, "uuid": "94df5735-a48b-488e-a3a5-e2d85c058286", "value": 31664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339912, "uuid": "c001a8c4-8999-4748-a3a3-b9e71feb7f58", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba751a5f-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776339912, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339912, "uuid": "688847fc-689d-4b32-9a4e-ffa4b645bfce", "comment": "Malware payload (Mirai)", "value": "a062f56fa62ec3f2693a26ea9d69888f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339912, "uuid": "10dbebe6-fb79-4ecd-9868-683df472f5ff", "comment": "Malware payload (Mirai)", "value": "3dd99c4736de0a158bbf4bb620ac1eea42327c570ddbe3650e720b10e2dee30f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339912, "uuid": "f9d84430-8110-4faf-b75f-d3f4a4fcd51f", "value": "T193D2E145ECA68D6BC4085637696C6EA183D9199A20F303C7B2739905DBA90F2773EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339912, "uuid": "c6e17f1b-6de9-4acd-b151-946ab75141e7", "value": "768:PNPGw+rwCFfqqCmd0goUiRZFUqtj0DTZCMW:d6rqqC+1iRwCu0Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776339912, "uuid": "b82da8f3-1d6d-4c8d-9770-8b6cd8f77ac4", "value": 28836, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339912, "uuid": "28a6c6a1-f849-4f73-82db-04264d670163", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba78e672-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776339912, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339912, "uuid": "cb06a4c4-a7dd-47ed-b212-7891c60a05d4", "comment": "Malware payload", "value": "e32f667c653ac28bcbd71d0341197b6e", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339912, "uuid": "2ffeb45f-5be4-4495-a616-11a1bd3322b7", "comment": "Malware payload", "value": "66bb8a38d52ebe2709ec7227ea50f09a66a2ed46511898900d161b343aec8807", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339912, "uuid": "22ba4f81-2058-4725-a4f0-2d006346add4", "value": "T15451ABD8A570BEBBA015CF18E67549D4130758FA70E1B7E49977482F9E0C521F90CB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339912, "uuid": "e4c41721-60ee-47ca-92a7-113e17c34b81", "value": "48:opF1Gsp/1srlnpv1kqp+G1Y+auopJ1CcpX1kcYpf1EUp911bw9ES:oRUlnZouodrYrPTOES", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776339912, "uuid": "feefba8e-e98f-4b84-a726-6a9be44fa101", "value": 2457, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339912, "uuid": "5e23e5be-0a09-47c4-a3b1-879be1aad6ad", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba7cfd7f-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776339912, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339912, "uuid": "55a5355b-4091-4893-912f-7b52d06599e7", "comment": "Malware payload (Mirai)", "value": "dbe37a1134f335c1d1ca7d750fc52a22", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339912, "uuid": "b7d9e60a-2d1b-4dad-9091-16d8b06f37e9", "comment": "Malware payload (Mirai)", "value": "732b5aed62edc80735e76b0073e5e733e297fb0958d2bc9675102c906388ae40", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339912, "uuid": "a0d48024-3a73-43c8-80da-3c819e34c986", "value": "T17AB2D0A8D3854DA2DFBCED625F85CD4137B14AE663A7EA861108D3112618C37B21EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339912, "uuid": "80e0d896-ebad-446d-a2a4-349785bca27b", "value": "768:YZpNSA/i+sdd8v8slIS22Eq4uVcqgw09B:2Z6+sv8pIh2Eq4u+qgw09B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776339912, "uuid": "9b27b712-d787-4d89-b148-ec7783769863", "value": 25448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339912, "uuid": "1a786d37-d688-4ec9-ba2b-2a410739e361", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bb0ed62c-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776339913, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339913, "uuid": "1f7bff11-d77e-450c-afac-0964032215cb", "comment": "Malware payload", "value": "a8253461966811801ac5acadce6ca466", "object_relation": "md5", "Tag": [ { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "RapidStealer", "colour": "#cbbd7c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339913, "uuid": "53aed55a-f709-44b1-a279-71eca6a5cace", "comment": "Malware payload", "value": "8ca7e40244cb15ae90e5ee5a01b6fee90c23355b893e6a8a24b575d4786aeeda", "object_relation": "sha256", "Tag": [ { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "RapidStealer", "colour": "#cbbd7c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339913, "uuid": "2f6c5d0b-8f8a-4c74-8bb4-c5e3abfe7e8a", "value": "T1D022B16D2B0EC2694FFA55DA999BC881DF7462263029DC1931EFD784DB2D084C73C6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339913, "uuid": "89fd78c1-3eab-4b87-aeee-c4083441ba11", "value": "192:LXJ6sfjkJeFmKIw43+EPkzjgrPCOeO7GmJG6dHW+7PQfrlUxg6PQoGDU6UjGtUxa:LXJbfjkJeFmKIt3+EszErqOeO7GWG6dA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776339913, "uuid": "0ea79c39-5a49-4252-b9ad-92337d2d4376", "value": 10389, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339913, "uuid": "fe24c83e-98c9-4fab-8c1f-7abcf4698988", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aeb99878-36c8-11f1-bc00-82aee05be84a", "comment": "Malware payload (WeedHack)", "timestamp": 1776339916, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339916, "uuid": "beb4a629-322a-4e28-9d6c-7d8966b072ee", "comment": "Malware payload (WeedHack)", "value": "cfa4099d42f87a980374026e1cfbe8a9", "object_relation": "md5", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339916, "uuid": "104c06d5-a273-4be2-9c88-6ae8c6b7d12a", "comment": "Malware payload (WeedHack)", "value": "202055dc11f11bb81e051e7b314e6433399d838676802fac479fe4a2b3924046", "object_relation": "sha256", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339916, "uuid": "b7f07b5f-198b-4639-a3a2-f799e954dd06", "value": "T1E566F112FDC6CA2BDA6780B3E1C68267502A27D9B80AD03F47A02D855D75D4A43D3F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339916, "uuid": "a886b248-7175-4d79-952f-c3798d6b9cee", "value": "98304:pMXLjtQ5CryByCcMSaiKMAqcoArxoBx8JosjeYHrTg9hRtAdijORhHF1RLQ1eNRd:42LyCcMbhM1d+HjemMjf8iUHySR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776339916, "uuid": "b7b0790b-1a27-43e4-bed3-1411c21d0fef", "value": 7016308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339916, "uuid": "caaee489-aeef-46c5-8743-a3c0bd71ee9b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82d42f3c-315f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776339917, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339917, "uuid": "a31b96fa-aa3a-4d14-a5c6-bc38c3445bbb", "comment": "Malware payload", "value": "2cc1b66aa58a7c0192ea1c1ed87abf91", "object_relation": "md5", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339917, "uuid": "500ce2c7-c3c5-4341-bff6-be506b42d756", "comment": "Malware payload", "value": "f492324f1e3fbce71145d12cb6c0debf50622fadddbbb8eb4b56293f5da89a53", "object_relation": "sha256", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339917, "uuid": "9e7d885f-a9c3-4bc0-9f9f-95da80c3d8f5", "value": "T1948601277D86CE2AD9AB61B351C281D7642A12DDA80BF02F07A04D855F71DCE2352F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339917, "uuid": "df352e28-da7f-4e5a-bd27-609e4f2ee4c2", "value": "196608:YC+9M2MQqM1xuTh6ehfr3FXX/wQAyJWJ+iV:YBy2MhMjuTpdtfAN+u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776339917, "uuid": "95b89ec0-1c63-4050-94b0-d5e6a2f10919", "value": 8095208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339917, "uuid": "2b98dd8f-d64e-4234-871d-6223ec612ab0", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68c0e4c6-26f8-11f1-ba1a-82aee05be84a", "comment": "Malware payload (RustyStealer)", "timestamp": 1776339918, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339918, "uuid": "9e71e83f-86a8-42b8-9b33-b4116aef84c1", "comment": "Malware payload (RustyStealer)", "value": "def4f909eeed327ab949d99a810ff64e", "object_relation": "md5", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339918, "uuid": "d6e785f3-1cdc-4a8e-b77c-af73a3592609", "comment": "Malware payload (RustyStealer)", "value": "b9f71ed4b08c93a7fc5468bee23660e3129e1cf9c84100d4d40ad70fb7c851fa", "object_relation": "sha256", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339918, "uuid": "cce1a5b7-858e-4e16-af92-268fcc76da1e", "value": "T118765B53F66290ECC16DC1B4831A6632FB32B88A073476EB57D086213E66FD06B3DB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339918, "uuid": "458a366b-a466-42de-bf1a-fcd0b5512e25", "value": "c6968d4f1c415fa3e43f6c6377cd6b0b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339918, "uuid": "7fc6c4ea-d8b3-4fc4-ae53-ab38229587b3", "value": "98304:0i3Qm0vuJyIvFbWMVqqLKYhebCtjlKSObn+:7CpQvK17", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776339918, "uuid": "a2de35c0-47b1-47d9-9ac9-64c3798ce230", "value": 7608320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339918, "uuid": "986bc628-64c5-42be-8aec-082e8a4c81b7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c37d6c8-22a4-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1776339918, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339918, "uuid": "7e1b86be-5997-4f6d-a765-bdeee13d6ede", "comment": "Malware payload", "value": "f1705b79ff7e1bee779415c32a95fa76", "object_relation": "md5", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339918, "uuid": "c36c93d7-f32f-4931-b210-5621bd7215f3", "comment": "Malware payload", "value": "cf9bc0a3e01a7b466bc35dbf88563adf61c884ad5fb2b28afd1298a5f723f370", "object_relation": "sha256", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339918, "uuid": "0e200c63-45aa-44b3-8301-7950a6ba535a", "value": "T1E906E163EE9BC469EE6744B371C28242602A55B8AF0B90BE03D15DC54B73D8B0752F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339918, "uuid": "45dba262-96f5-4438-a9fc-63dacc595864", "value": "98304:zLzEKRws9MEP+Zet2IxGG7CQW289MWndGleYj3VQGDBtM8rE:zLz39h2ZefoG9W28eWdISGD08rE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776339918, "uuid": "0588b35e-d0dc-468c-945c-aabfc558afd3", "value": 3735240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339918, "uuid": "af960468-68ec-4792-9b3f-c5becefa993c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ddb80169-38c5-11f1-bc00-82aee05be84a", "comment": "Malware payload (WeedHack)", "timestamp": 1776339920, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339920, "uuid": "41bebca7-0bd6-42fe-bb03-24b4f8289abe", "comment": "Malware payload (WeedHack)", "value": "f622490a445cca999fcd1901ca83ec91", "object_relation": "md5", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339920, "uuid": "a154b0bb-09cd-40e5-a0d3-077a42ed45af", "comment": "Malware payload (WeedHack)", "value": "dba9908f63f5f32405f7a728f37979e743814532378cabc4f0e9f24c34197c60", "object_relation": "sha256", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339920, "uuid": "fa79d6bf-9526-49b8-8632-9c5ef2bc7249", "value": "T14686125A7D81DD29DB4B70B11691C4AF662907CAF015D01BCAA14D8A2C72F8E93C3F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339920, "uuid": "445bae3f-b06b-4f30-86fa-fe487618b972", "value": "196608:P/KhDTJBB3Bu6jXo66K5TzjHMdKr1vozCTOZrQV6az17/xZ66X:PeXrB3B7kHyHoKr1LKOVZbZvX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776339920, "uuid": "d7a54855-a7e4-4113-adb9-6e38cc42e777", "value": 8073801, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339920, "uuid": "10e5d8c6-9de3-4f93-8dff-a8e7d858fc96", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cca03a65-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload (RapidStealer)", "timestamp": 1776339943, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339943, "uuid": "a6673b48-bb03-4a8e-939f-85fb95aa7a92", "comment": "Malware payload (RapidStealer)", "value": "87eecd640e84d9d8d5cae7b5d207a4c9", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RapidStealer", "colour": "#cbbd7c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339943, "uuid": "85fc619f-7c39-4e04-9e65-a4e1f2f0b1e0", "comment": "Malware payload (RapidStealer)", "value": "aa589ef7e0ea27bed4ee87929117cfc5b28b68c343b3991209514db311c1a3ec", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RapidStealer", "colour": "#cbbd7c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339943, "uuid": "72631faf-8742-4aaf-959d-7feebec8d3a6", "value": "T1C4E73327A6445327D6C03A79CAB050BC8F5013C26273737AD6F0E4ADF9159ACBFA85", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339943, "uuid": "41295906-8217-456e-923f-2ef3d5085b61", "value": "b34f154ec913d2d2c435cbd644e91687", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339943, "uuid": "e5dcc56e-a225-489f-a304-d1722de0b4d1", "value": "1572864:mHLdkFgSqCJ4lMXpUCxb/PBqlf4UeWKowpnvQaSpwYR67:q2FvqCJFmCxbBGwlxvIfR67", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776339943, "uuid": "9f7cfbe5-80af-45f0-adc8-8b1b3d5ba5e4", "value": 70119027, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339943, "uuid": "19fe649c-f57c-41da-abc4-af58a9c09a98", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "daf6b894-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776339967, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339967, "uuid": "e4aa15b1-369e-4929-9e1d-159b9c155752", "comment": "Malware payload (Mirai)", "value": "c7ab8e08f56722003361c74665401ce9", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339967, "uuid": "54a63588-7213-4529-917a-51170782fbf3", "comment": "Malware payload (Mirai)", "value": "e890b31302fdacb32df6b187eda07880c34066945fe30f31aa3ac460b8a5aa36", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339967, "uuid": "c93ebd53-e7c3-4e08-b717-e0824094839e", "value": "T1FFA2D05CD531400FCC29C132F7670E86E1FB4CC98A0BD897A5E6582297EB1EA963AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339967, "uuid": "fd0583fc-12f2-44fa-98cc-8d2ebbe2124c", "value": "384:M749b/LKZ6A66q3mtD3m5QKWZMbpiCA0/iRLtThmmyfgyvrZ8RNJER/w2invnLvC:BRzEX61QvMb4R06xh1yTrZ8RNJER/w2t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776339967, "uuid": "a4b35f48-bfd1-4c7f-954d-420d58477574", "value": 23272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339967, "uuid": "d1e4941e-11a9-46a4-b63b-62b95beffe2f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dafa59d5-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776339967, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339967, "uuid": "175075d6-1fbd-4e1b-8417-6f320fe6d450", "comment": "Malware payload (Mirai)", "value": "2c27e27391f4ed53e813eb4a3565f4cd", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339967, "uuid": "a8cd3e05-9173-4392-964d-0deebf33d666", "comment": "Malware payload (Mirai)", "value": "c8ac1b479721ae4857cb0c6ff3d011b3248eae14519d26a8167eee58fd41f287", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339967, "uuid": "ff3fbe68-9aba-401a-b07e-ee30ada3a2bf", "value": "T13EB2E1ED933B9321CE76C034A463AD9FBC56080A2F857D45BF10EBD1209D193E86BD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339967, "uuid": "b2935238-132e-4982-9770-1d4a00160ad2", "value": "384:paqmOcOpQV7WAPKSQoWIDQQiCQbcvIMPc6NN5QFcv8UdC6HF28jc8iFqcJY:/dcOpQVfC3EI4IUHNAOh1jlse", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776339967, "uuid": "71613740-edc2-46f5-b350-607ae4c199e4", "value": 24248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339967, "uuid": "5d15e5ba-f5f1-46a0-96c1-459109f99200", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dafa88ec-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776339967, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339967, "uuid": "d251afed-1798-4e9d-abe2-5690e2b47da4", "comment": "Malware payload (Mirai)", "value": "20d488b27f9c44b74bff3035ca2a1464", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339967, "uuid": "7b9ee17d-5b2e-46f0-b052-b675cc0ac501", "comment": "Malware payload (Mirai)", "value": "5d4a7453c4ef279e9581aafb9057f7fdc2499e77524df3d38d390aab46308b4c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339967, "uuid": "73958fd4-237e-4029-b070-0116ab1af87c", "value": "T107B2CF344B74D8F5EA740B36DA9C898EBD930E3DC6E738356D305820E2825679E7C2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339967, "uuid": "86e048dc-aa7d-40a2-b587-3ef20f0a37a5", "value": "384:5dWoJ9/OdgxHzAM2xBFYhDW/RFuZmv3fRotNY45UEfcvjBcNuMhymdGUop5hx:99/O2xHkhq+uMXRGlcbBkDs3Uoz/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776339967, "uuid": "b57ccce1-7c0f-4199-9de3-3c817d022834", "value": 25696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339967, "uuid": "778fffa4-1685-44a7-b332-a6031ee3a980", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db034b92-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776339967, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339967, "uuid": "32d9b44a-b043-4022-ab63-193a85b3f5e9", "comment": "Malware payload (Mirai)", "value": "c4b70e7eb2eb33915ad3361aad487736", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339967, "uuid": "e36e36e9-13df-4953-a3a6-2b52b0142297", "comment": "Malware payload (Mirai)", "value": "ead90ddaafcf6e19d333f7bceab60464e555aeb970f6df9c85f3084002670f2c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339967, "uuid": "cd8a8603-6155-4479-8e4f-bd6c65d18cd0", "value": "T18E33F1646B15FAE09B28F57CE2285959F62E19FCC886A0BE57C0413CEE1700F8D7D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339967, "uuid": "1d669233-e17a-48e8-b330-95ac33257f84", "value": "1536:Pjape5Zl3R3ll4oDvwtr16VgVLlZDoh4YCkyCh0:Pjape5Zz3l+wo56qVLDDxYCDi0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776339967, "uuid": "1a8e4c5b-2629-41fd-bc8b-55930b0aebb8", "value": 52136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339967, "uuid": "6ffe9fa3-e8e3-4cf0-9016-40a6c0af5614", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c9a6bde-398a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776340211, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776340211, "uuid": "dbc510b4-a7a0-4e89-bee6-3dc8bdbd6685", "comment": "Malware payload", "value": "90b99df8f3725127cc475d55b2c03dda", "object_relation": "md5", "Tag": [ { "name": "pw-update", "colour": "#10debc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776340211, "uuid": "4e88fa6b-6b0a-4c6b-ac34-4c6629ee531b", "comment": "Malware payload", "value": "734a37bd60eb0dd948dda1813f62a7c51d2847342a37a70bb7cb413390dd9eea", "object_relation": "sha256", "Tag": [ { "name": "pw-update", "colour": "#10debc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776340211, "uuid": "8966489d-9dca-4ad0-b3b0-1c0aaa2be6d6", "value": "T11BB7332D81DA91CC84118D52443A8D976436B70EFB7B0A9A3A6FCADD4E379F9D7138", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776340211, "uuid": "c939821e-f4f4-4787-a621-17c4853f441f", "value": "786432:Xsu3l3wgAxx9YlM9UyqYjuir8qdTBi8KDmnfwYdRg8h5dyV6KRnBF0AK:F13wgUx9FtquUqdTg81hRj5dybRBF0AK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776340211, "uuid": "603c9200-12e7-4b02-88df-66e5a710cf26", "value": 49909853, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776340211, "uuid": "46a6d4c0-f786-48f1-8f2b-1cbe135c2016", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6183e94d-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776343585, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776343585, "uuid": "cb0b664b-89f7-45b1-be6c-9204e03a180d", "comment": "Malware payload", "value": "dbc520ea1518748fec9fcfcf29755c30", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776343585, "uuid": "bbbe3a84-f3ba-4906-b9f4-28b089d1816d", "comment": "Malware payload", "value": "c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776343585, "uuid": "847ae910-3a0b-420a-8df8-8fb7c0c073cf", "value": "D2D3128AA536ED54F11B9AF11B3B99907DF5659E82F4D4A4A2CF634312CC343FA4070B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776343585, "uuid": "bcd9b281-1c40-4433-b7aa-b8054d2bc3c9", "value": "3072:Nc4i0agsmw3Py5CP5HM8EVLUuYtgB5H6oz:Nc/0aNPy54EVAhOae", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776343585, "uuid": "dbbab177-030a-4591-a911-b4da8330eb7d", "value": 132860, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "36edfafc-3994-11f1-bc00-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1776344416, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776344416, "uuid": "8a5b0786-cbab-418b-b411-60f0b0641a35", "comment": "Malware payload (CoinMiner)", "value": "dba59d9859d89e6db6b1c8d4a7ec752a", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776344416, "uuid": "2a50a786-46ee-44ba-9705-79ee9a6720d7", "comment": "Malware payload (CoinMiner)", "value": "349dab2f8a35fe80468fa12d155aeddb9f81ae2b94541123e17e56b00e5e1df9", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776344416, "uuid": "bf813005-36a3-495f-9f21-25326e1eab75", "value": "T11336125197C41FEEDAE94D3410F9345ED3F01ABA9467694B5FB33E4A2FA3880023AD", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776344416, "uuid": "3caf248e-5bf8-46f3-bd6f-d159887a95de", "value": "d9ea6fe6f1693e30c59fbbbe1b5f91d8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776344416, "uuid": "f6762a48-d7ef-4ca4-a2c3-3239afcf50dd", "value": "49152:Kg0ZAT3AOdLn3y7jr0xV0qnnjEHeALYKrrYhDbfmz9iVC9G:", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776344416, "uuid": "0b19ad0c-c72a-4a03-b5f7-89668202d873", "value": 5161984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776344416, "uuid": "7bca1f5d-d81d-4d8f-a3dd-7ee6645131d7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15665d16-399c-11f1-bc00-82aee05be84a", "comment": "Malware payload (OffLoader)", "timestamp": 1776347796, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776347796, "uuid": "00c85d70-6d5e-4795-8f32-f440473c03d0", "comment": "Malware payload (OffLoader)", "value": "e2b86c6f33d22bd8e5c02d16af5b6cec", "object_relation": "md5", "Tag": [ { "name": "130-12-180-119-8080", "colour": "#cb7cfd", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#baa077", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776347796, "uuid": "546fbac9-bbd0-401f-ad01-58bfc264a81a", "comment": "Malware payload (OffLoader)", "value": "f204fee177aa501688820f38a21e3183351a98db83e33763fe6b5774469d4e50", "object_relation": "sha256", "Tag": [ { "name": "130-12-180-119-8080", "colour": "#cb7cfd", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#baa077", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776347796, "uuid": "365dc284-5643-4f52-bc1b-5554f915e889", "value": "T1E4A60233B28A633EE06E5A3B59B292105D3B7A61A41F8C5697F44C4CCF2E0601E7F6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776347796, "uuid": "d9db681f-33e2-40f4-81ef-59753ff57096", "value": "ac4ded70f85ef621e5f8917b250855be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776347796, "uuid": "13b120aa-915a-4989-8e40-33d76a22ae6a", "value": "49152:zN61T1mWQxl72tQnjEQjtgddQWqi0l4CCRJcXqbG5BPNAEfKs/sB2hHnd2sBenqN:zN66WAxnjEQEnqvWKjWP2sUHnd2sBjN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776347796, "uuid": "0aab22a7-92f8-4478-821b-f38fa08eeeb2", "value": 10237533, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776347796, "uuid": "9ff21d14-6da5-483b-a1cc-52a2427b2497", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b3c9ace-399d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776348369, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776348369, "uuid": "50dd2145-56e8-49ff-b4ac-6fddaee42420", "comment": "Malware payload", "value": "834ea61693bccab352df29cab7691ea4", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776348369, "uuid": "1b099d63-ba8d-4105-b435-cfba02c2fb0f", "comment": "Malware payload", "value": "88e637060a95acb513f475cbb3ee48ccd8de658e3f51c2ae07c5ce71dd356a41", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776348369, "uuid": "4ea8b546-3d4f-424f-95b3-6d817ad53dd3", "value": "T17DD56BA688B1FF13B7AA8E4873341E5D101426370FCB150AB4BED7C67683A75346F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776348369, "uuid": "3a9cdfef-786f-477d-b491-6dc933300804", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFTn9m3o17gAVSY28W:m0eF4xaDjDONijDG8ZxFT4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776348369, "uuid": "aa9699b8-e717-4208-87ff-a1eab26b8442", "value": 2968530, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776348369, "uuid": "ad08c58a-39e2-4c17-bd15-b88f45f50830", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "37473f0a-39ab-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776354295, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776354295, "uuid": "64bd4bf7-fb4b-4884-b5df-8bc2a58b7b11", "comment": "Malware payload", "value": "f43c85472f039b04789095b699f90288", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776354295, "uuid": "3a0e052f-cce1-47d9-8ee2-fa084fa95a86", "comment": "Malware payload", "value": "c83e5bc10835368e0257c79f40777193ed2782d4df4f7ba505a5f37824552ea2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776354295, "uuid": "f9955d13-a9b8-489c-a47b-c61b0b0b4213", "value": "T101931A3178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776354295, "uuid": "5ea611d1-8701-407e-8749-273af86331ff", "value": "1536:nByp1tF/uwMmAIa14oXoKIMepeV7tb73WdxCrCitkb5fv2v05xLkrJKZ0sCxKJoh:n8iIL0GitkbFv2v05xLkrc0sCx2oIy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776354295, "uuid": "a619b4b8-be78-493b-9031-7ba2ce343215", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776354295, "uuid": "4ea20c1f-d7a0-4fab-8b72-9afd61ba7029", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc5003db-39ab-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776354518, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776354518, "uuid": "579f3f08-25bd-4641-8f37-f0f2562cbd3e", "comment": "Malware payload", "value": "1c3ae2a1dd6520f8a72a7362f323cdf6", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776354518, "uuid": "0d5945f0-04bb-4406-aff8-5d34d3a515eb", "comment": "Malware payload", "value": "354ffcc2c4a59ab79423285360ab02ef3d89b78648597ae1b007f263b049305d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776354518, "uuid": "2c0ae815-2394-494a-9465-4b5791452df6", "value": "T13401498AA4E062B72881361B90807DCA86E2C1BA82F14DB43C0FB493DB45EF890071", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776354518, "uuid": "f3ebe566-7b56-454c-b263-420f683c823d", "value": "12:BMQtJOo9VxRsTdO0sszLxeMLZQlLeLft9WRHeE9xmPPnMFYz61bSEpHeAg:WCFx+49snxeWZyoft9el9xmMFYNEp5g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776354518, "uuid": "4da21ba6-c9fe-4f49-9d62-b3154fd0eb20", "value": 658, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776354518, "uuid": "d51d6c52-2892-417d-bb3c-91500742f006", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d8a7481f-39b0-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776356713, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776356713, "uuid": "147d0300-5fb0-4d6a-97e0-c282d52b4ffa", "comment": "Malware payload", "value": "54653bf7c0115070bd7ce826cc645c6b", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776356713, "uuid": "d36e9ef6-9a06-486a-bce0-7522d6a413c5", "comment": "Malware payload", "value": "7764a5d266884437a7072f58bc4bf9077f3a47f03061c1f2a61d67216a623803", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776356713, "uuid": "21183d17-817a-4342-99ce-b46a6921278f", "value": "T122521DBDC9D1FCD0875B62D075ADFBC2104E9B07BE6A2B9CB5D815501B80358EBB92", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776356713, "uuid": "ce0ac1fb-236a-48b8-b47e-05d12aad2f52", "value": "384:wsjNt5magOJi8capEyFylWcBAcZGeQ5KDjsC5Kp0prcYFcrz:fddgGcanylJBFwP5MXO0pAAcf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776356713, "uuid": "a1204184-85dd-4e7b-8391-1e27722aba6d", "value": 13478, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776356713, "uuid": "badfef73-127e-4eb5-89ac-a08fe605e007", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "340f75ea-39ad-11f1-bc00-82aee05be84a", "comment": "Malware payload (NetSupport)", "timestamp": 1776356761, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776356761, "uuid": "35931561-ad13-4d02-9173-932df8cba82f", "comment": "Malware payload (NetSupport)", "value": "56f01ab1f2ce89b0a4cacfc478b072cb", "object_relation": "md5", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776356761, "uuid": "64f2bfc9-7ee6-4b2f-8825-82277330b3f4", "comment": "Malware payload (NetSupport)", "value": "3b07d1eba526ed78c4d436379f363f0cc85ce83d3808d3fc56ad244090a4a65a", "object_relation": "sha256", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776356761, "uuid": "66ae1b1a-1560-43a7-922a-63770e946a25", "value": "T163064A0BEDB98CA9C0E9A1348433A1167E34B8400B3563D72BD1B7692F777F4987AB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776356761, "uuid": "6cc005c9-1291-4439-a59b-767314cf0e30", "value": "3271ee162568f50a6810be9b8973807f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776356761, "uuid": "6be61a1b-7fbb-414f-bb89-a30a065beb1e", "value": "49152:G1KENjMqcc9TcUR9Fg9FQlBuj7I9cH39:Gh1p4CK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776356761, "uuid": "c7a613fa-49c1-4435-8fec-5560f4b62165", "value": 3905528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776356761, "uuid": "b2347498-e9ce-4abd-856f-d530445ae368", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2c8394d-39b1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776357079, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776357079, "uuid": "883243ab-9758-410b-a0b9-ee9226b5b9f0", "comment": "Malware payload (Mirai)", "value": "0d851e01253f2f171be608119b91e4b7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776357079, "uuid": "4e48e098-b9e3-4e7e-bf43-c6339cb676fc", "comment": "Malware payload (Mirai)", "value": "e2a4286783827e7959d0cec8657c942c56836811a239cf3e2262722b84269891", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776357079, "uuid": "04933fba-1582-4b07-991d-4c048365f4e5", "value": "T115830952B9928F12C5C212BAFA6E414D33137BBCD3EE7212CD20AF5067865EB0E775", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776357079, "uuid": "2593449a-406b-4445-88d6-f194b7ed75ae", "value": "1536:kJn8upYLu2DWn1RKeIGA/PYWzuTyVa23wGxRdPiYF0mQIz7gX57CJ2:WCqn1RKb/P/uTyVa27F0mQIz0XpCJ2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776357079, "uuid": "e72657c2-e80b-4318-8f01-4fbd77a4a4b7", "value": 86480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776357079, "uuid": "8c386e88-fe76-4ce5-8e4f-c8f53b0c5ed4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4238514-39b1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776357081, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776357081, "uuid": "3009bda6-84be-49a0-86c3-7935a1c27843", "comment": "Malware payload (Mirai)", "value": "05216925a222210d7ee70e985d7f4fa9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776357081, "uuid": "c28fa650-4c0c-43ac-b39a-cad4764bdfc2", "comment": "Malware payload (Mirai)", "value": "463c218c42cd106cf479ea55caa574b8544b1edcae0a7b6382a55a5a0bcee718", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776357081, "uuid": "7f27d14f-f098-437d-91d3-66be6980e5ea", "value": "T1F9A3D50ABF514FB7D82FDD7746E90B01288CB91B25B53B757634E868B60A18B19E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776357081, "uuid": "65220a05-e5c3-4826-bd1a-6c7671ef4320", "value": "1536:jwZHO6ksk5Gh1zitbaPEj2X5owCj0oxuv/jgjpoynRjmJwTeT:jwVOfsk5I1uDj0cVFTTeT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776357081, "uuid": "33212b00-30fd-4e4c-998c-d7d452f36165", "value": 101164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776357081, "uuid": "d066e183-c241-40ea-99e1-f4ee3c1baa60", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b431154c-39b1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776357082, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776357082, "uuid": "f5586129-4c80-4ddf-ac39-13e34fde697e", "comment": "Malware payload (Mirai)", "value": "ad5ec550b511031f132819408a7c222e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776357082, "uuid": "71ead428-3a6d-41a7-964f-b372ea9ae5a4", "comment": "Malware payload (Mirai)", "value": "8b74f5b68437dcf3d81f7c171d62f0eaaeb347aad2365214234caf445fe605e3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776357082, "uuid": "98af4c23-1c79-4352-a578-a15ce34acc06", "value": "T18283F952BD428F13C1D221FAFBAE014D37127B78D2EB3242D925BF9167868EA0D673", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776357082, "uuid": "2eb09b30-9ef1-418a-8a69-816f47b0c322", "value": "1536:gQyynJgXAlN5txuv8iCZcpqJe9w8XtvRcq8EE07yqSzaqXnz:gQpgQlN5ttiCZ2YjW1Rcq8T9Xnz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776357082, "uuid": "64ffa834-40af-41a3-badf-a098106aa350", "value": 82304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776357082, "uuid": "85af8d00-2abc-41e1-bb48-32549d146d73", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b431e082-39b1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776357082, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776357082, "uuid": "0f4233d8-53a6-4cb8-bc40-3fb2176e046b", "comment": "Malware payload (Mirai)", "value": "43e0e1bff7b1bfa9bf341f7080ca1ba7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776357082, "uuid": "db8c650a-559d-4980-be24-4a5df9da47b5", "comment": "Malware payload (Mirai)", "value": "af6ea1931f4205be453421b5667564d8e9abe82b7f6085fe316154a1cda5de96", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776357082, "uuid": "96623aec-2485-4f9e-adb9-2bb7f3aa4491", "value": "T107730952BD429F13C1C221F6FBAE015D3B167BB8D6EB3242D921BF9023968DA0D673", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776357082, "uuid": "d6b6f324-92b7-489a-91e9-fb2d375245ea", "value": "1536:IKad0pNoh5CsA32cFbEUXpT4lZJLzQ5KTS0yAz:IKpC6BFFXpT465eyAz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776357082, "uuid": "227b1992-9b1e-4812-b422-be97a6179e06", "value": 78208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776357082, "uuid": "e89da065-0a81-44c3-a113-346505fefab3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4d4b873-39b1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776357083, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776357083, "uuid": "3c792bc3-575c-4f41-b093-fa34601038cd", "comment": "Malware payload (Mirai)", "value": "4023a76ba1def4500cfb8c2d2093eddb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776357083, "uuid": "5d1b04a9-590b-44f3-91fe-0ca325994efb", "comment": "Malware payload (Mirai)", "value": "ce79904a9386b438a04c67d3bb3ea6a01e8c644466a8f0b5a130e6ac596466b6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776357083, "uuid": "31294df2-2add-4b99-8e14-dc7b4d1d07af", "value": "T1F173F885BE47CAF6D41749F040F7B63F8A30FD290832959AEF25BEE6CA235C061163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776357083, "uuid": "764a0c78-ac2a-4bcc-b96a-e131de2f1098", "value": "1536:1xIt/c13PuKPSh6B4TWmablQgRHUGCmO3KA+5:1xItW3PuqdlblQgR0G79", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776357083, "uuid": "c2ba5499-7660-446b-ab70-9d2b46e76371", "value": 73912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776357083, "uuid": "7c4a9755-e642-4508-8944-7252a6f342ab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d9f5bbdf-39b1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776357145, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776357145, "uuid": "a3be97a4-4726-4ee9-81f6-cbadd6905cfe", "comment": "Malware payload (Mirai)", "value": "9c6279ebbfda10288cfe6dfa49fe5c32", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776357145, "uuid": "9d8344dd-436f-4083-ba4f-a4a341a7bb6d", "comment": "Malware payload (Mirai)", "value": "fbca20bdbcbd5dddff170ceb503e25f7175beea8943ed95d157efc64837f9d92", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776357145, "uuid": "f18157d2-393a-4ae3-80ff-8954cdec1f0b", "value": "T171731B0277090F43D26369F02A7F17E087A9FDA529B4A9C8751ABEC58371DF22142E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776357145, "uuid": "1a593cc0-9b0a-4e81-b081-65030d07f4a5", "value": "1536:Gj65cLx0Fy4FEenmbU/W7xi33WXfywbw1B2jbnUW4:J5Iiy4aggbfbbjUW4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776357145, "uuid": "fbb0b570-3613-466b-8092-217b5563bd72", "value": 78304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776357145, "uuid": "2f39f304-7c70-4754-832c-ec8b44c924b5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db117c6c-39b1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776357147, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776357147, "uuid": "66d16df9-4132-4a68-96ea-57a32df8d8e0", "comment": "Malware payload (Mirai)", "value": "6fadca3d08c9107da17a60da7b82bdbc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776357147, "uuid": "cb936bd8-5c4d-47f8-b33e-bccc342b7aca", "comment": "Malware payload (Mirai)", "value": "bc8297cf7a88c6b679df9c69cbb2aaa2302e19b3622e0cde040a085025760699", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776357147, "uuid": "9a91f99a-43bb-4010-9b2f-8f2531aebe06", "value": "T134A3A80A3F21CF6EF669937047F74E21974837D626E1D681E15CEA411E603CE681FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776357147, "uuid": "8d1f9c15-fcd3-41d9-9bd5-1c4cc7c54d4e", "value": "1536:PJSzm+oHkSS/plQ+631BTBM6d9k9bL0+uXIp+rI+Lpl8XAzAe31aLqcsSjDO:PUzm+Ak4ksbrXL8QMNsSjS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776357147, "uuid": "91562725-d3b9-4f8c-b3b0-671973fefb8b", "value": 100716, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776357147, "uuid": "efe20604-ca45-474d-bce1-5bdf78ca149c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e6c200e-39b3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776357743, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776357743, "uuid": "6b9f94f8-55fd-422e-a683-bbb34c8ff716", "comment": "Malware payload", "value": "6d22c1b6428ded8386d69c0e73d181cf", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776357743, "uuid": "02201273-3265-4fc2-a90c-a60047d337a7", "comment": "Malware payload", "value": "ae2e6e766a258b9e285299af4c5c156951aa06b3c7f14f9f5c310c3f7f0db484", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776357743, "uuid": "f39aadff-c0e1-404e-94c7-24e3ce0ec8bf", "value": "T1868309327488582A210B428FD267336C70AFDCE2D611E5B6F6F622344BA5EE135B76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776357743, "uuid": "e0949615-03f6-4b95-8293-ab2b5552dce8", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnRWaKVN/:XEKltp9txAX/yr2pbRWTVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776357743, "uuid": "b75d1669-fa20-4119-a110-427f3f01496f", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776357743, "uuid": "3b623d2e-8af9-40d4-84be-b38dd325fa5a", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bb9aada1-39b5-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776358812, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776358812, "uuid": "cbb70a76-838f-4466-83e5-122f0d3474af", "comment": "Malware payload", "value": "1b23f338d98dacbace5f5abd63b2d77e", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776358812, "uuid": "42ff10a3-47b3-49f3-82fe-015e593b94fb", "comment": "Malware payload", "value": "b6a29ee040d6dcbb9168c19299b4b1578a58dda1e2cb329f24b65dd7a94e027d", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776358812, "uuid": "45610360-df4c-4155-8cc6-e9b85702f6e0", "value": "T1ED5320550B424F349BC3E5946D3736B44522C8A5259F081A29C8DFFADB35E79AECCC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776358812, "uuid": "06664eb9-6e2f-4ab4-a52c-e8c2144413f2", "value": "384:9i1iKFQ0YLT/YwRtUJG7rqMGyb2pfKMZe7zCRPwHe5rDMOPLbLnlm2:vRrqML7uDffI2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776358812, "uuid": "6b78f5a8-0a22-4dd0-ab4b-86d329d0a1db", "value": 66028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776358812, "uuid": "bf70302e-333f-4663-aded-139b70e624d8", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0192ae72-39ba-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776360647, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776360647, "uuid": "fd30c1d5-194e-4a00-8463-2a65d6133506", "comment": "Malware payload", "value": "f9d36d07fff212667f54ca2c37b65961", "object_relation": "md5", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776360647, "uuid": "4f1c738d-4e1a-4708-b9e5-5635ce80b1fe", "comment": "Malware payload", "value": "3e5d00fd22666970d708c6a0f8813f81689f21eb6e6d3ffbe01e19023562b630", "object_relation": "sha256", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776360647, "uuid": "aa220a90-dcb5-4274-84bd-09ca768236a9", "value": "T1BBF23A487B98C12BDBAF0E7DB5621A50167196621203DFD53ECC64EEFF937048612B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776360647, "uuid": "ecc28973-d6f5-456d-9bb3-dd662bba6204", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776360647, "uuid": "75436ff7-5f90-4d34-a134-2c1eb0133f75", "value": "768:bmQZqx1lYcTYbFyf8qbIKPjnbaoXbYC10koH:b0lYibIKPjRbPoH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776360647, "uuid": "40ea423f-5562-4782-8584-36354bb8f9ef", "value": 36352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776360647, "uuid": "ad980471-27c4-4883-8d42-c02ea3367480", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f94a1df2-39ba-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776361063, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776361063, "uuid": "335591da-4d05-458c-b3b4-dab84f32b1a7", "comment": "Malware payload", "value": "1f2a113ec959cb4bd21fef0444754c9f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776361063, "uuid": "419087bb-44fb-4c64-85be-0d8ab2fce0d0", "comment": "Malware payload", "value": "e90f2bde37cf7649712096cc3ec29f70f5bc7e316d5d86e9bfbea8c14fe80a6f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776361063, "uuid": "035b08ad-d2d1-4a76-8f78-888c65bc9325", "value": "T1F293E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA523895F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776361063, "uuid": "198501e6-8b4b-43cb-bdb5-75eaf614615a", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXHIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYP2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776361063, "uuid": "a480518b-ead9-4f88-9832-f2ec054215d0", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776361063, "uuid": "d6c21e67-9a9f-4538-858d-51dc162a5a9b", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f24bbba7-39cb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776368353, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776368353, "uuid": "8c556480-af74-448f-9edd-80eeb5475d9b", "comment": "Malware payload (Mirai)", "value": "6001ccdadeb862b0a91c28e67e3cd4e3", "object_relation": "md5", "Tag": [ { "name": "92-112-127-184", "colour": "#603182", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776368353, "uuid": "80e86902-c6d2-416c-ba10-4038a1afa4fe", "comment": "Malware payload (Mirai)", "value": "92d186c887ecc2cb2d51d22aa09f9bdf16e1138d4b2e86c74505fcb2f5b2bf94", "object_relation": "sha256", "Tag": [ { "name": "92-112-127-184", "colour": "#603182", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776368353, "uuid": "fc112d50-f649-4a26-b56d-33171f8f1b20", "value": "T1F6A30946B9429F12D4D621FAFB9E414933136BBCD3F97102CD20AF5127CA99B0EB76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776368353, "uuid": "c3e03b42-b420-4385-87e7-2f097e511ae2", "value": "3072:XA+yAiIFuAfDcea40+sAQEZvIhTduAzhla3:XAlATuAfAea40+sAQ0vI3uo7a3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776368353, "uuid": "8c6c3eb1-8636-48b4-996a-fa8e2b0b1d2c", "value": 101104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776368353, "uuid": "cbf4b07c-fcc5-4faa-b6fa-d0118474c46c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f24c46df-39cb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776368353, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776368353, "uuid": "6caa095f-95a7-4a07-a8d1-0f6ad21a9f9a", "comment": "Malware payload (Mirai)", "value": "7c9e8b084e6e6a1124bb5d962556e152", "object_relation": "md5", "Tag": [ { "name": "92-112-127-184", "colour": "#603182", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776368353, "uuid": "30b86acb-aeb4-4d61-b48d-cc7f82fc32ec", "comment": "Malware payload (Mirai)", "value": "168cecf63cb4031c99111fad3ffde1595c394515fd3d80adf06f40f5edfacfa0", "object_relation": "sha256", "Tag": [ { "name": "92-112-127-184", "colour": "#603182", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776368353, "uuid": "b9208ec4-2c74-4fc1-a27f-6c0c466ba303", "value": "T1FA732A077A81CAFFC45BC1B407FB6935C823BC3E0A3A719567E4FD926A85DE02E196", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776368353, "uuid": "8883fa2b-7d35-47d2-bceb-ba204d2d8654", "value": "1536:Dk2x75Fxbs2uTeHgGRktap2N0kuezIzZP+KzDputV5+:1F9BuTeHgG2aMNkezIlrz0TY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776368353, "uuid": "6d2f6d05-4286-4860-883a-7798294a1a96", "value": 74392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776368353, "uuid": "02703730-6e29-4381-a343-f347d60cc193", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7000b9f7-3643-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776369748, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776369748, "uuid": "8cde6004-034d-4292-afad-935729726f10", "comment": "Malware payload", "value": "c500f58c1abbd7e476af0ff65c8b9480", "object_relation": "md5", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776369748, "uuid": "3eaf8bfe-a71e-4bc1-abf0-eac6ae22e745", "comment": "Malware payload", "value": "026603cdbbf78cda5c213649ab070c794f56e9555f8fc9d2bae84f4f51bc6cc8", "object_relation": "sha256", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776369748, "uuid": "564b34dd-04fa-4695-b60f-f098a86cce0c", "value": "T112A833A8B64F3E5961E003766705CED1B919CAABD20647CCCE503FEAE4C59E72D901", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776369748, "uuid": "4ea6ab2f-7685-4c61-bc45-e0fc47ad8c01", "value": "6291456:Jtq/2gIIlmqgE6zmm9VBGTqtYx6iweAPosg7HH0:Jtm2amBE6zmmHNtYxbL0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776369748, "uuid": "0cba6a50-334f-40ed-94f9-84ae98ba89b6", "value": 207804047, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776369748, "uuid": "bfe0d0f2-b61c-412d-8e28-6d465703aad4", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "32f2f994-39d4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776371897, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776371897, "uuid": "c4be5041-fee3-412b-9d72-2d2857ca271e", "comment": "Malware payload", "value": "aaeeed8e50744c7acd33a143a25c00b2", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776371897, "uuid": "4c8b4498-a4af-4f5f-b362-7851c5fe067e", "comment": "Malware payload", "value": "203dd91522955695c6dc2a4266ded622a8e8ecef1e0f0710aca38d40d263fb8d", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776371897, "uuid": "5429c187-0e89-40ed-9d66-18dedca04984", "value": "T123146B1CEE0EED91DEC7E67DAD590FA3703678A84315E1B35E00023DF59BDD889A28", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776371897, "uuid": "3b0d3225-0530-496a-8bf3-c1a060482de0", "value": "3072:aOLb22xs0SchL4d2hMFwqLE4lzbjwMmxfcQR2pObVU92bSkKhRX+jz:j2ulhH4lHjwMFQR2pL2bPKre", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776371897, "uuid": "7db64957-46f6-4a73-aa13-1f47bb8d8c7a", "value": 194256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776371897, "uuid": "df72d908-f609-4e0d-9b79-890f17d1ff52", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e02226d7-39d7-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776373476, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776373476, "uuid": "b862989d-b713-495f-b036-7862d382ff38", "comment": "Malware payload", "value": "425bf72b11aa927c4187d39bb4ba20e1", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776373476, "uuid": "da3e4885-a00e-49df-b588-6a5009a2461e", "comment": "Malware payload", "value": "f8fe72194c5d70f1e084a8716b04c70c8408c9c1bb0b76fcfd55af02c5ed79c9", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776373476, "uuid": "8478ab4c-0734-4cd9-8dd8-dab0371faa40", "value": "T18624BD0A242ECE44ACF71FCC642639C8D4FF16EE1FC5EC642DA82569DDEB44662394", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776373476, "uuid": "89ab4e56-7c2a-414f-bca6-9b26198ad718", "value": "3072:uEKIYpB/T+gwgKFarqmT/tT9sl/Fabp6A0AGTfJ3Lv6Yl0bzp:uEKNlT9w98/TtRsSbpzGDJbvo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776373476, "uuid": "10f8088c-3dad-4439-a68a-4b0d72c28f76", "value": 223313, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776373476, "uuid": "66987f48-a5fa-4f76-b732-c9c12eb7b169", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e45cffef-3646-11f1-bc00-82aee05be84a", "comment": "Malware payload (SantaStealer)", "timestamp": 1776373508, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776373508, "uuid": "ceb3cdb9-84b2-44e6-bde4-8b5f183a88ea", "comment": "Malware payload (SantaStealer)", "value": "1f7aa3a0425d198ff16df8e903d56aac", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776373508, "uuid": "27933dad-2bb8-4df0-9f11-f8478ae878f4", "comment": "Malware payload (SantaStealer)", "value": "ea28b85e97fdfe77335e8625586212f0df64ceee15c8290d17b75e6096694d81", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776373508, "uuid": "3bdaabe8-5c79-4a9e-ae7b-1696b863a799", "value": "T16DC5029F31E62069F9E83330D47577B60ED2BD8A78E49E8CC694552C7E0D02D498E2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776373508, "uuid": "d56a3c44-2b4b-424c-989e-d8a0a04822b1", "value": "f1d840d6eae17d90e2995a85b3633177", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776373508, "uuid": "43f207bc-3ebe-4359-b658-0e9382e585bf", "value": "49152:i795t5WNFN8llgHKWmBNzD+CnySA88RvCEOV70eM1VM6Wys:i795vWNP2lsV+f+CnW86CEOVEDjWy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776373508, "uuid": "627cea99-b346-4eef-bd28-6a45151f71a8", "value": 2696704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776373508, "uuid": "3674b938-0bbd-45d6-b5c4-d679f43f27ef", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8859271-39d8-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776373866, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776373866, "uuid": "04390d94-6257-4007-8cc2-f2a70b6fa76a", "comment": "Malware payload", "value": "c69d1711da127ee02a061a97838c7b4a", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776373866, "uuid": "ef81a16d-338b-4b4f-986f-7992c4e6435f", "comment": "Malware payload", "value": "e31e2861dcd3a83fdabc5f68367b44e277e3bd0bf4111eaef2dd9b991201ae6d", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776373866, "uuid": "3ced04c5-35f9-4a7e-a164-4bbb7d4988b4", "value": "T1A254D00AD54D31F0F58AB2BD4233565E8C2194AA1237320D5A787AEDEED23D0872FB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776373866, "uuid": "57db0f45-21c0-47c9-967a-36a50e658349", "value": "562a0fa1097a7e442aee1ca676f7cd61", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776373866, "uuid": "d9ed3ece-1bfe-456a-bc0d-d45eb182e534", "value": "3072:rDT2nwUg+Z368i2VKmeKto6MDr8FsV2D/xDiWIsJdvfgnU0CpO5tD8y574YgH/qA:rDTf6qz2c+D/DdvInU0Cp0tZ5pOgtE0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776373866, "uuid": "3775b5ff-9413-48b0-bb6c-0ce33adb7514", "value": 285184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776373866, "uuid": "71a40792-2ef3-4b01-8614-f52f3ab4cab0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776383660, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776383660, "uuid": "d2831c19-c02b-4ee8-b96b-0db001736cc9", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776383660, "uuid": "5ec773b9-cf09-4b38-9376-33171525ac61", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776383660, "uuid": "d0fefcde-97f9-45a2-ab44-efb3e379bfac", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776383660, "uuid": "7a782556-d83d-4eee-be48-eaf6070563ae", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776383660, "uuid": "cf7042ed-8422-48b9-add1-e211fe98b85e", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776297611, "uuid": "3d203279-3927-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://11q31v.invert-manner.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776297617, "uuid": "40684357-3927-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.102.253:49819/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776297912, "uuid": "f02e6985-3927-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vscoj.invert-manner.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776298266, "uuid": "c3866e35-3928-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://87phs.invert-manner.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776298523, "uuid": "5cd915ed-3929-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.254.82:55738/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776298568, "uuid": "77283f1c-3929-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gutyx.invert-manner.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776298748, "uuid": "e27b4f64-3929-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.15.165:55536/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776298871, "uuid": "2bb81ec0-392a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://authsnapshot.invert-manner.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776299052, "uuid": "97e92fd6-392a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.86.52.95:38095/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776299227, "uuid": "005be53f-392b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tri-fluxon.invert-manner.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776299587, "uuid": "d6e91b3b-392b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://central-market1.zom5pirel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776299657, "uuid": "00ca1946-392c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.188.138.221:26024/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776299887, "uuid": "895ed889-392c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://guest-portal2.zom5pirel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776300139, "uuid": "1ff83dfd-392d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.122.104:41155/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776300309, "uuid": "84ec7475-392d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://media-gallery3.zom5pirel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776300547, "uuid": "13261586-392e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://item-details4.zom5pirel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776300560, "uuid": "1b05d799-392e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.161.248.54:47184/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776300561, "uuid": "1b2b614c-392e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.86.52.95:38095/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776300854, "uuid": "c9e066c2-392e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.48.231:46174/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776300909, "uuid": "ea903863-392e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://public-help5.zom5pirel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776301098, "uuid": "5b359e24-392f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.238.150:49952/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776301267, "uuid": "bfd77c71-392f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://home-section6.zom5pirel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776301820, "uuid": "09ec9a5a-3931-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.217.59:55697/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776301867, "uuid": "260931a4-3931-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://order-status1.lax8dorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776302047, "uuid": "91560c00-3931-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://large-parcel2.lax8dorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776302230, "uuid": "fe233b60-3931-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://local-office3.lax8dorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776302242, "uuid": "05198b51-3932-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.235.249.74:39147/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776302535, "uuid": "b3d595d1-3932-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.38.134.233:57439/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776302586, "uuid": "d29d427c-3932-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.48.231:46174/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776302890, "uuid": "87ac4781-3933-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://total-summary4.lax8dorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776303068, "uuid": "f18000b9-3933-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-street5.lax8dorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776303308, "uuid": "80d7a37e-3934-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://global-site6.lax8dorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776303609, "uuid": "33df42b3-3935-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://urban-vision1.vyr3solen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776303967, "uuid": "09a6f093-3936-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://scenic-spot2.vyr3solen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776304327, "uuid": "e01188f9-3936-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://latest-news3.vyr3solen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776304332, "uuid": "e2d63585-3936-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.124.129:41123/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776304386, "uuid": "0355a19b-3937-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.46.177:44224/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776304511, "uuid": "4dfc2ac2-3937-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.140.67:41209/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776304629, "uuid": "942fda0c-3937-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://small-map4.vyr3solen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776304756, "uuid": "dfb589e1-3937-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.217.59:55697/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776304988, "uuid": "69f280ba-3938-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://travel-blog5.vyr3solen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776305287, "uuid": "1bfcebd0-3939-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://open-source6.vyr3solen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776305646, "uuid": "f2213e3e-3939-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://best-choice1.tix7marel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776305837, "uuid": "645742a6-393a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.140.67:41209/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776305897, "uuid": "879965d5-393a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.149.123:54393/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776305953, "uuid": "a8fcb9bc-393a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://smart-point2.tix7marel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776306309, "uuid": "7d24951d-393b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://prime-list3.tix7marel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776306431, "uuid": "c6134619-393b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.70.25:55329/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776306668, "uuid": "539b8b9c-393c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://full-table4.tix7marel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776306679, "uuid": "59f5f8ea-393c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.250.11:41341/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776307101, "uuid": "554b9f35-393d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.35.50.73:47727/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776307271, "uuid": "bac4a5fa-393d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://user-profile5.tix7marel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776307386, "uuid": "ff8aaf48-393d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://front-gate6.tix7marel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776307627, "uuid": "8f48ff2c-393e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.149.123:54393/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776307687, "uuid": "b2b40d0e-393e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lucky-gift1.wex4tiral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776307755, "uuid": "db699a2f-393e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.7.168:34470/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776307755, "uuid": "db75e813-393e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.0.135:48337/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776307872, "uuid": "20ec15ee-393f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.89.246:41998/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776307990, "uuid": "679861cd-393f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://daily-bonus2.wex4tiral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776308179, "uuid": "d7e21b4a-393f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.250.11:41341/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776308349, "uuid": "3d97f56f-3940-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://extra-coin3.wex4tiral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776308422, "uuid": "68caf8e2-3940-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.105.41:39772/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776308422, "uuid": "68de61e5-3940-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.118.144:47229/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776308422, "uuid": "690f109f-3940-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.208.9.62/bins/parm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776308422, "uuid": "691773d2-3940-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.208.9.62/bins/parm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776308422, "uuid": "69182541-3940-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.208.9.62/bins/pm68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776308422, "uuid": "692086fb-3940-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.208.9.62/bins/px86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776308422, "uuid": "69208fb4-3940-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.208.9.62/bins/pmpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776308423, "uuid": "692999cc-3940-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.208.9.62/bins/parm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776308470, "uuid": "853d6cf2-3940-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.208.9.62/bins/psh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776308470, "uuid": "853d71fc-3940-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.208.9.62/bins/pmips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776308538, "uuid": "ae0dfbae-3940-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.208.9.62/bins/parm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776308647, "uuid": "eed9ca61-3940-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://promo-card4.wex4tiral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776308711, "uuid": "15314a29-3941-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.105.41:39772/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776308898, "uuid": "84c621c5-3941-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.27.175:54653/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776309012, "uuid": "c83ebddf-3941-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://short-plan5.wex4tiral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776309308, "uuid": "79183fd2-3942-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://active-job6.wex4tiral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776309557, "uuid": "0d59760d-3943-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.89.246:41998/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776309680, "uuid": "5667c8e7-3943-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.224.113:39360/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776309728, "uuid": "73755e37-3943-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fresh-food1.pyn9sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776310027, "uuid": "258ebabf-3944-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://summer-sale2.pyn9sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776310038, "uuid": "2be977c3-3944-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.185.79:44068/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776310329, "uuid": "d9472044-3944-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://empty-cart3.pyn9sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776310688, "uuid": "af99fc98-3945-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://info-desk4.pyn9sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776310752, "uuid": "d5b8cbe1-3945-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.142.157:48587/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776310999, "uuid": "68aee10b-3946-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.142.157:48587/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776311046, "uuid": "84eeca62-3946-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://quick-cash5.pyn9sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776311353, "uuid": "3b91957c-3947-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://brand-mark6.pyn9sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776311477, "uuid": "860499e8-3947-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.184.176:49912/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776311713, "uuid": "12a348b0-3948-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://small-team1.dax6porel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776311717, "uuid": "14dd618b-3948-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.184.29.230:60461/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776312009, "uuid": "c2e00f6a-3948-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://senior-staff2.dax6porel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776312609, "uuid": "283e1939-394a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://phone-call3.dax6porel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776312789, "uuid": "93e9e374-394a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://simple-form4.dax6porel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776313032, "uuid": "245d3cc2-394b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://brief-meet5.dax6porel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776313328, "uuid": "d4d765d3-394b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.213.15:38968/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776313334, "uuid": "d85d707b-394b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://group-join6.dax6porel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776313391, "uuid": "fa550290-394b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.177.220.128:33134/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776313522, "uuid": "489f6b20-394c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.184.29.230:60461/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776313753, "uuid": "d299c4c6-394c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://clear-water1.bex1lorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776313994, "uuid": "61bd8470-394d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ocean-blue2.bex1lorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776314347, "uuid": "342c8589-394e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://river-flow3.bex1lorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776314653, "uuid": "eb1d4b45-394e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://deep-well4.bex1lorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776314724, "uuid": "151284cc-394f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.25.51:56197/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776314889, "uuid": "778015ff-394f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.184.176:49912/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776314958, "uuid": "a0c3bfd3-394f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.213.15:38968/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776315073, "uuid": "e5473c13-394f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rain-drop5.bex1lorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776315204, "uuid": "3370b6d2-3950-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.177.220.128:33134/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776315432, "uuid": "bb6242e3-3950-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://solid-base6.bex1lorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776315732, "uuid": "6e284af2-3951-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://express-mail1.tix9larem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776316029, "uuid": "1f3d9938-3952-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://direct-send2.tix9larem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776316394, "uuid": "f8601e32-3952-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sticky-note3.tix9larem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776316753, "uuid": "ce5aac26-3953-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://short-word4.tix9larem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776316783, "uuid": "e0640316-3953-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.188.194:36596/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776316824, "uuid": "f8ce0bd3-3953-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.230.91:53615/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776316892, "uuid": "216250d8-3954-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.230.91:53615/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776316892, "uuid": "216fcd1a-3954-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.109.228.82:60661/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776317055, "uuid": "8269ae2b-3954-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://heavy-pack5.tix9larem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776317349, "uuid": "31c90e76-3955-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.200/public_files/KGVn4OY.txt", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776317351, "uuid": "32b1f926-3955-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.200/public_files/49YyrdI.txt", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776317351, "uuid": "32e1b7e5-3955-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.200/public_files/G65Chbx.txt", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776317416, "uuid": "597b8183-3955-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://work-done6.tix9larem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776317425, "uuid": "5ecc3586-3955-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.3.225:32998/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776317714, "uuid": "0b61975a-3956-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sweet-home1.kro2vilen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776317853, "uuid": "5e2ff8c4-3956-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.227.65:41653/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776318075, "uuid": "e251cb78-3956-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://health-care2.kro2vilen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776318253, "uuid": "4c7e4137-3957-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://brukva.shop/files/output.exe", "Tag": [ { "name": "dropped-by-vidar", "colour": "#64154c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776318434, "uuid": "b862596e-3957-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bright-sun3.kro2vilen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776318504, "uuid": "e24f4510-3957-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.109.228.82:60661/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776318733, "uuid": "6af68d65-3958-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sunny-day4.kro2vilen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776318804, "uuid": "94d90c23-3958-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.188.194:36596/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776319094, "uuid": "4202d0eb-3959-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://good-luck5.kro2vilen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776319333, "uuid": "d033249b-3959-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.227.65:41653/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776319456, "uuid": "19a45497-395a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://street-view6.kro2vilen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776319814, "uuid": "ef1d6765-395a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://central-market1.domna-replenish.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776320057, "uuid": "7fcc0c5d-395b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.104.106:50618/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776320110, "uuid": "9f343e86-395b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://guest-portal2.domna-replenish.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776320358, "uuid": "333df4d4-395c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.161.248.54:47184/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776320472, "uuid": "77707e8b-395c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://media-gallery3.domna-replenish.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776320590, "uuid": "bd59f8c2-395c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.67.111:38084/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776320722, "uuid": "0c1d0245-395d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.77.19:60390/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776320782, "uuid": "2fdead72-395d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://item-details4.domna-replenish.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776321069, "uuid": "db1ce75b-395d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://public-help5.domna-replenish.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776321433, "uuid": "b3bba415-395e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://home-section6.domna-replenish.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776321610, "uuid": "1d388d24-395f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.79.74:5001/client.exe", "Tag": [ { "name": "147-45-79-74-5001", "colour": "#4a69ed", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776321623, "uuid": "256fda44-395f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.52.142.194:34676/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776321623, "uuid": "25861f5e-395f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.191.16.24:51824/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776321793, "uuid": "8a8a74f9-395f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.125.56:43434/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776321793, "uuid": "8a8e892b-395f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://order-status1.rol1erspeeding.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776321920, "uuid": "d654ea77-395f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.125.56:43434/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776322147, "uuid": "5d6241c0-3960-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://large-parcel2.rol1erspeeding.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776322450, "uuid": "126e59ab-3961-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://local-office3.rol1erspeeding.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776322811, "uuid": "e97dc843-3961-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://total-summary4.rol1erspeeding.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776322817, "uuid": "ed186e4b-3961-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.97.236:44314/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776322882, "uuid": "13b1f87b-3962-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.221.153.207/hiddenbin/boatnet.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776322882, "uuid": "13b3c82a-3962-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.221.153.207/hiddenbin/boatnet.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776322929, "uuid": "2ffa6f0e-3962-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://ferwgf4er343.duckdns.org/opt/adm/lct/shjef2aVFDe.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776322930, "uuid": "3009151a-3962-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://ferwgf4er343.duckdns.org/opt/adm/lct/ssad4edD!4d.exe", "Tag": [ { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776322948, "uuid": "3b1df22c-3962-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.221.153.207/hiddenbin/boatnet.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776322948, "uuid": "3b2694f4-3962-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.221.153.207/hiddenbin/boatnet.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776322948, "uuid": "3b4105d9-3962-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.221.153.207/hiddenbin/boatnet.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776322949, "uuid": "3b623ae8-3962-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.221.153.207/hiddenbin/boatnet.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776322949, "uuid": "3b6fd89c-3962-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.221.153.207/hiddenbin/boatnet.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776322949, "uuid": "3b8191cb-3962-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.221.153.207/hiddenbin/boatnet.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776322949, "uuid": "3b93d5f2-3962-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.221.153.207/hiddenbin/boatnet.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776322949, "uuid": "3ba701a0-3962-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.221.153.207/hiddenbin/boatnet.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776323172, "uuid": "c0743661-3962-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-street5.rol1erspeeding.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776323470, "uuid": "72185783-3963-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://global-site6.rol1erspeeding.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776323900, "uuid": "724394ed-3964-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.206.138.8:45268/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776323947, "uuid": "8eb80d41-3964-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.132/opt/adm/lct/shjef2aVFDe.exe", "Tag": [ { "name": "91-92-242-132", "colour": "#1ee483", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776323952, "uuid": "91337635-3964-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.126.26:56751/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776324008, "uuid": "b2d4ccb1-3964-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.132/opt/adm/lct/m", "Tag": [ { "name": "91-92-242-132", "colour": "#1ee483", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776324069, "uuid": "d746746f-3964-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://urban-vision1.acidity-inflame.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776324076, "uuid": "db51524d-3964-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.240.254:51449/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776324194, "uuid": "218dfc8a-3965-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.194.227.46:50880/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776324251, "uuid": "436a4dd9-3965-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://scenic-spot2.acidity-inflame.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776324377, "uuid": "8e81582c-3965-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.97.236:44314/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776324382, "uuid": "91ffd217-3965-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.192.4:42557/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776324435, "uuid": "b127951f-3965-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.52.142.194:34676/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776324487, "uuid": "d04632e1-3965-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://latest-news3.acidity-inflame.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776324677, "uuid": "41c88b57-3966-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.52.255.21:54061/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776324678, "uuid": "41fe8278-3966-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.192.4:42557/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776324848, "uuid": "a7c1a8ae-3966-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://small-map4.acidity-inflame.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776325043, "uuid": "1b7d9ee1-3967-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.206.138.8:45268/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776325338, "uuid": "cbb6ab16-3967-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.0.79:44241/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776325387, "uuid": "e88fb6e7-3967-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.elpolacodelsur2.duckdns.org/sostener.vbs", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-elpolacodelsur2-duckdns-org", "colour": "#f31fdb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776325387, "uuid": "e8a767d1-3967-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://travel-blog5.acidity-inflame.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776325388, "uuid": "e9861952-3967-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.elpolacodelsur2.duckdns.org/31agosto.vbs", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-elpolacodelsur2-duckdns-org", "colour": "#f31fdb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776325389, "uuid": "e9bbc681-3967-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.elpolacodelsur2.duckdns.org/andre.vbs", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-elpolacodelsur2-duckdns-org", "colour": "#f31fdb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776325390, "uuid": "ead7d17f-3967-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.elpolacodelsur2.duckdns.org/33333.vbs", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-elpolacodelsur2-duckdns-org", "colour": "#f31fdb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776325567, "uuid": "5447ba3c-3968-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://open-source6.acidity-inflame.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776325746, "uuid": "bf05187a-3968-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://sostexampp.duckdns.org/33333.vbs", "Tag": [ { "name": "sostexampp-duckdns-org", "colour": "#313d0b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776325746, "uuid": "bf09dab3-3968-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://elpolacodelsur2.duckdns.org/33333.vbs", "Tag": [ { "name": "elpolacodelsur2-duckdns-org", "colour": "#ac2ef6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776325746, "uuid": "bf0cd6c9-3968-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://dllpluginmsbuild.duckdns.org/31agosto.vbs", "Tag": [ { "name": "dllpluginmsbuild-duckdns-org", "colour": "#48afc4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776325747, "uuid": "bf216b32-3968-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://dllpluginmsbuild.duckdns.org/sostener.vbs", "Tag": [ { "name": "dllpluginmsbuild-duckdns-org", "colour": "#48afc4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776325747, "uuid": "bf326da5-3968-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://elpolacodelsur1.duckdns.org/33333.vbs", "Tag": [ { "name": "elpolacodelsur1-duckdns-org", "colour": "#1df47d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776325747, "uuid": "bf4248e8-3968-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://elpolacodelsur2.duckdns.org/sostener.vbs", "Tag": [ { "name": "elpolacodelsur2-duckdns-org", "colour": "#ac2ef6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776325747, "uuid": "bf42d2b6-3968-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://elpolacodelsur3.duckdns.org/sostener.vbs", "Tag": [ { "name": "elpolacodelsur3-duckdns-org", "colour": "#4f2c10", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776325747, "uuid": "bfa01ba2-3968-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://elpolacodelsur3.duckdns.org/33333.vbs", "Tag": [ { "name": "elpolacodelsur3-duckdns-org", "colour": "#4f2c10", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776325748, "uuid": "bfb801ea-3968-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.dllpluginmsbuild.duckdns.org/andre.vbs", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-dllpluginmsbuild-duckdns-org", "colour": "#20a4e6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776325748, "uuid": "bfda0b5e-3968-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.dllpluginmsbuild.duckdns.org/31agosto.vbs", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-dllpluginmsbuild-duckdns-org", "colour": "#20a4e6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776325748, "uuid": "bff77fd5-3968-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.elpolacodelsur3.duckdns.org/andre.vbs", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-elpolacodelsur3-duckdns-org", "colour": "#815775", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776325748, "uuid": "c000efed-3968-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://dllpluginmsbuild.duckdns.org/33333.vbs", "Tag": [ { "name": "dllpluginmsbuild-duckdns-org", "colour": "#48afc4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776325748, "uuid": "c00c7fbf-3968-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.elpolacodelsur3.duckdns.org/31agosto.vbs", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-elpolacodelsur3-duckdns-org", "colour": "#815775", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776325748, "uuid": "c020751a-3968-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://elpolacodelsur1.duckdns.org/andre.vbs", "Tag": [ { "name": "elpolacodelsur1-duckdns-org", "colour": "#1df47d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776325748, "uuid": "c0240805-3968-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://elpolacodelsur3.duckdns.org/andre.vbs", "Tag": [ { "name": "elpolacodelsur3-duckdns-org", "colour": "#4f2c10", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776325748, "uuid": "c024198a-3968-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://elpolacodelsur3.duckdns.org/31agosto.vbs", "Tag": [ { "name": "elpolacodelsur3-duckdns-org", "colour": "#4f2c10", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776325748, "uuid": "c0260e57-3968-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.dllpluginmsbuild.duckdns.org/33333.vbs", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-dllpluginmsbuild-duckdns-org", "colour": "#20a4e6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776325748, "uuid": "c02c1017-3968-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.elpolacodelsur3.duckdns.org/sostener.vbs", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-elpolacodelsur3-duckdns-org", "colour": "#815775", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776325749, "uuid": "c099a2e1-3968-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://elpolacodelsur1.duckdns.org/sostener.vbs", "Tag": [ { "name": "elpolacodelsur1-duckdns-org", "colour": "#1df47d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776325749, "uuid": "c0ac3b0f-3968-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://dllpluginmsbuild.duckdns.org/andre.vbs", "Tag": [ { "name": "dllpluginmsbuild-duckdns-org", "colour": "#48afc4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776325751, "uuid": "c1c1d74c-3968-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://elpolacodelsur2.duckdns.org/andre.vbs", "Tag": [ { "name": "elpolacodelsur2-duckdns-org", "colour": "#ac2ef6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776325751, "uuid": "c1c20f44-3968-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://elpolacodelsur2.duckdns.org/31agosto.vbs", "Tag": [ { "name": "elpolacodelsur2-duckdns-org", "colour": "#ac2ef6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776325751, "uuid": "c1cb0a62-3968-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.dllpluginmsbuild.duckdns.org/sostener.vbs", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-dllpluginmsbuild-duckdns-org", "colour": "#20a4e6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776325751, "uuid": "c1e58150-3968-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://elpolacodelsur1.duckdns.org/31agosto.vbs", "Tag": [ { "name": "elpolacodelsur1-duckdns-org", "colour": "#1df47d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776325751, "uuid": "c1f40573-3968-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.elpolacodelsur3.duckdns.org/33333.vbs", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-elpolacodelsur3-duckdns-org", "colour": "#815775", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776325870, "uuid": "08dd71db-3969-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://best-choice1.benomkin5.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776325870, "uuid": "08e4003f-3969-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.34.109.121:57833/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776326109, "uuid": "96fb7663-3969-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://smart-point2.benomkin5.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776326297, "uuid": "07570dd5-396a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.126.26:56751/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776326529, "uuid": "91bfd7fa-396a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://prime-list3.benomkin5.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776327072, "uuid": "d4f4b7f1-396b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://full-table4.benomkin5.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776327247, "uuid": "3d8be299-396c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://user-profile5.benomkin5.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776327375, "uuid": "899c4f59-396c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.91.178:53687/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776327556, "uuid": "f5e2e5cc-396c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.113.51:51171/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776327564, "uuid": "fa218d71-396c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.34.109.121:57833/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776327729, "uuid": "5ce379d7-396d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://front-gate6.benomkin5.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776327967, "uuid": "ea7ce635-396d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lucky-gift1.empirical-tuna.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776327975, "uuid": "ef6ce15f-396d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.246.161:51320/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776328089, "uuid": "33804f14-396e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.59.26:37624/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776328150, "uuid": "57ec11c9-396e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://daily-bonus2.empirical-tuna.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776328447, "uuid": "08e9f625-396f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://extra-coin3.empirical-tuna.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776328574, "uuid": "542d3761-396f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.237.135:35143/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776328809, "uuid": "e0ba391f-396f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://promo-card4.empirical-tuna.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776328998, "uuid": "510bfb56-3970-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.26.86.218:57084/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776329167, "uuid": "b5fe02a2-3970-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://short-plan5.empirical-tuna.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776329179, "uuid": "bd0eb527-3970-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.190.220:36078/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776329181, "uuid": "bde7e73b-3970-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.56.238:47199/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776329348, "uuid": "21ecf8af-3971-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://whtempdomain.com/files/jar/component", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776329350, "uuid": "22cc0093-3971-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://whtempdomain.com/files/jar/Pjibf.exe", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776329350, "uuid": "22e1310d-3971-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://whtempdomain.com/files/jar/RuntimeBroker.exe", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776329350, "uuid": "22e13234-3971-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://whtempdomain.com/files/jar/security", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776329350, "uuid": "230e9be8-3971-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://whtempdomain.com/files/jar/elevator", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776329350, "uuid": "23185b07-3971-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://whtempdomain.com/files/jar/module", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776329350, "uuid": "2326532d-3971-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://whtempdomain.com/files/jar/module2", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776329427, "uuid": "50ff1e5a-3971-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.1.83:54799/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776329479, "uuid": "6fcb6d52-3971-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.22.244.216:60093/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776329529, "uuid": "8d8aa572-3971-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://active-job6.empirical-tuna.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776329590, "uuid": "b20c6af0-3971-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.113.51:51171/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776329843, "uuid": "4885b94a-3972-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.197.241.229:54463/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776329888, "uuid": "637783fe-3972-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fresh-food1.guy5mist.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776330187, "uuid": "15af0bdb-3973-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://summer-sale2.guy5mist.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776330489, "uuid": "ca150dbf-3973-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://empty-cart3.guy5mist.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776330913, "uuid": "c6a69b31-3974-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://info-desk4.guy5mist.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776331098, "uuid": "351010d5-3975-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.56.238:47199/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776331154, "uuid": "565e1e9b-3975-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.22.244.216:60093/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776331276, "uuid": "9f0a72a4-3975-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.138.65:55715/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776331450, "uuid": "0672a902-3976-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://quick-cash5.guy5mist.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776331457, "uuid": "0ad9b453-3976-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.68.153:33929/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776331686, "uuid": "933c5adc-3976-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://brand-mark6.guy5mist.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776331763, "uuid": "c1610dc0-3976-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.159.130:49733/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776331928, "uuid": "2351e92a-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://small-team1.aim-national.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332051, "uuid": "6cfcd0b0-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.39.106:54517/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332111, "uuid": "90d17c32-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.224.27.246:60149/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332227, "uuid": "d5745bde-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260412_002801_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332227, "uuid": "d576871c-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260411_121420_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332227, "uuid": "d576c3ff-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260411_132508_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332227, "uuid": "d576c88d-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260412_053842_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332227, "uuid": "d576c9bb-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260412_105235_webcam.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332227, "uuid": "d5870a63-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260413_125232_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332227, "uuid": "d59064d2-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260412_002019_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332228, "uuid": "d622a7df-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260411_220402_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332229, "uuid": "d6b61226-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260411_223446_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332229, "uuid": "d6bcf89c-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260413_060657_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332229, "uuid": "d6c86d15-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260413_104151_webcam.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332229, "uuid": "d6dab638-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260411_120214_clicknext.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332229, "uuid": "d716675d-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260411_224710_scan.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332229, "uuid": "d72406d3-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260411_100811_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332229, "uuid": "d72bde14-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/debug.exe", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332230, "uuid": "d750c0fc-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260415_060421_Microsoft.WindowsAppRuntime.Bootstrap.dll", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332230, "uuid": "d75d1ead-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260413_072449_Win32.vbs", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332230, "uuid": "d75ded85-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260415_080459_backgroundTaskHost.exe", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332232, "uuid": "d87232a2-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260412_004008_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332232, "uuid": "d8838648-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260413_105538_vns.vbs", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332232, "uuid": "d8a50734-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260410_090505_socks5.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332232, "uuid": "d8a959ff-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260412_080249_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332232, "uuid": "d8aaf2c7-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260413_094226_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332232, "uuid": "d8afba36-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260412_051105_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332232, "uuid": "d8c2329e-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260413_124628_litewebcam.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332233, "uuid": "d9150d41-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260411_120802_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332233, "uuid": "d915e8b0-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260411_133701_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332233, "uuid": "d91fc6cd-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260413_102542_vns.vbs", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332233, "uuid": "d939d18b-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/stealer.bin", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332233, "uuid": "d951f854-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/version_proxy.dll", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332233, "uuid": "d951fd71-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260414_133641_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332233, "uuid": "d95946dc-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260412_055951_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332233, "uuid": "d9735ddd-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260412_003937_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332233, "uuid": "d97b0c6c-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260413_100232_webcam.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332235, "uuid": "da3b7a89-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260413_105658_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332235, "uuid": "dab7d468-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260413_103850_vns.vbs", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332235, "uuid": "dab824a8-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260411_132157_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332236, "uuid": "daf80c63-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/FAvFf4V3.exe", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332236, "uuid": "db0d20f0-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260412_100633_webcam.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332236, "uuid": "db149446-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260412_010245_cbcheck.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332237, "uuid": "dbb69fd3-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/Ledger", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332238, "uuid": "dbfefc6e-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/malwar.exe", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332238, "uuid": "dc1a90cb-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260413_105133_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332238, "uuid": "dc31def1-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260411_101234_clicknext.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332238, "uuid": "dc389934-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260411_230643_output.exe", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332238, "uuid": "dc7b38e9-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260411_095241_clicknext.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332240, "uuid": "dd43afca-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260414_113541_Win32.vbs", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332240, "uuid": "ddab68fa-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260411_094741_clicknext.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332240, "uuid": "ddaf55cd-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260414_113750_Win32.vbs", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332241, "uuid": "dde139a8-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/kluch.bin", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332241, "uuid": "ddf5a149-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/7782139129/HG8WXRg.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332241, "uuid": "ddf6809d-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260413_130456_litewebcam.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332241, "uuid": "ddf6afca-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260413_124307_litewebcam.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332241, "uuid": "de169a7a-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260412_105029_webcam.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332242, "uuid": "de66439f-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260413_071232_Win32.vbs", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332242, "uuid": "de7b7830-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260413_123915_litewebcam.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332242, "uuid": "dee55722-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260413_102219_vns.vbs", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332242, "uuid": "def74b74-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260414_135339_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332243, "uuid": "deffe94c-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260415_071549_Win32.vbs", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332243, "uuid": "df01f1cc-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260411_235330_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332243, "uuid": "df066a6c-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260415_072542_CKeyboardH.dll", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332243, "uuid": "df102c4d-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260414_113856_Win32.vbs", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332243, "uuid": "df2beacc-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260411_232854_findadm.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332243, "uuid": "df2f5f19-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/chelevat.bin", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332243, "uuid": "df420ad1-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260415_062231_vns.vbs", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332243, "uuid": "df42223f-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/rsocx.bin", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332243, "uuid": "df427a55-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260411_120957_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332243, "uuid": "df4419c4-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260413_130244_litewebcam.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332243, "uuid": "df5c1c15-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/webcam.bin", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332243, "uuid": "df5e3926-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260411_101517_clicknext.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332243, "uuid": "df5e9108-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260415_074222_Microsoft.WindowsAppRuntime.Bootstrap.dll", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332244, "uuid": "dfe39b25-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260414_110300_Win32.vbs", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332244, "uuid": "dfe861bf-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260411_233545_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332244, "uuid": "dfeeb65a-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/outputold.exe", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332244, "uuid": "dff60180-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/test_update.exe", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332244, "uuid": "dff86184-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260412_000429_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332244, "uuid": "dffb1c5d-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260412_052527_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332244, "uuid": "dffb3093-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260410_090604_start-socks5.vbs", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332244, "uuid": "e0028f1a-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260415_072912_Microsoft.WindowsAppRuntime.Bootstrap.dll", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332244, "uuid": "e0107d06-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260415_071702_Win32.vbs", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332244, "uuid": "e01260a0-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260411_101209_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332245, "uuid": "e04297d3-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/output.exe", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332246, "uuid": "e0cfea4d-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/chisel.bin", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332246, "uuid": "e1081dc6-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260414_065342_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332246, "uuid": "e135be50-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260412_062116_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332246, "uuid": "e1392d7d-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260412_061213_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332247, "uuid": "e162a6d2-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260411_220111_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332247, "uuid": "e1653f79-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260412_104940_webcam.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332247, "uuid": "e17bb03f-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260412_055201_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332247, "uuid": "e1b0a0b9-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260411_120148_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332248, "uuid": "e205fe90-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260412_000355_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332248, "uuid": "e218c092-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260413_072738_Win32.vbs", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332248, "uuid": "e21abeae-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260412_004127_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332248, "uuid": "e24697b7-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260413_125003_litewebcam.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332248, "uuid": "e247aa21-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260414_105947_Win32.vbs", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332248, "uuid": "e2542fa7-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260412_080215_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332248, "uuid": "e254c58d-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260412_060321_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332248, "uuid": "e2568e29-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260412_001230_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332248, "uuid": "e2612f81-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://senior-staff2.aim-national.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332248, "uuid": "e279803f-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260412_102136_webcam.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332249, "uuid": "e2e4843a-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260411_235032_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332249, "uuid": "e2edc843-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260411_094023_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332250, "uuid": "e330b231-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260415_071454_Win32.vbs", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332250, "uuid": "e344e15b-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260414_110618_Win32.vbs", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332250, "uuid": "e350c8b8-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260411_131142_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332250, "uuid": "e372ef6c-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260412_054903_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332250, "uuid": "e37950b1-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260411_215520_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332251, "uuid": "e3df93f6-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/test_payload.exe", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332251, "uuid": "e42ecb8e-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260415_071319_Win32.vbs", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332252, "uuid": "e460933f-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260408_113354_log_11675_Files.zip", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332252, "uuid": "e460ea59-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260415_072851_KwpsOffice.exe", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332252, "uuid": "e4868881-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260415_074604_KwpsOffice.exe", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332252, "uuid": "e4963fcc-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260413_160048_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332252, "uuid": "e49ae6d0-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260415_073119_KwpsOffice.exe", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332252, "uuid": "e4bf7843-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260413_063919_fixenroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332252, "uuid": "e4e01a44-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260414_114010_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332252, "uuid": "e4e85b48-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260413_073100_Win32.vbs", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332253, "uuid": "e4f924bb-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260413_063425_fixenroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332253, "uuid": "e530ad0a-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260415_055856_KwpsOffice.exe", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332253, "uuid": "e554e766-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260414_113305_Win32.vbs", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332254, "uuid": "e5cb54b0-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260413_065159_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332254, "uuid": "e5cd3a93-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260412_095404_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332254, "uuid": "e6159c24-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260412_080409_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332255, "uuid": "e6279f72-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260414_121642_Win32.vbs", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332255, "uuid": "e637bd31-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260412_054745_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332255, "uuid": "e65321ed-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260415_074901_backgroundTaskHost.exe", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332255, "uuid": "e654bfcd-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260411_234412_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332255, "uuid": "e669bbc5-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/runtime.bin", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332255, "uuid": "e6833c07-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260411_100744_clicknext.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332255, "uuid": "e69d4af0-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260414_112803_Win32.vbs", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332255, "uuid": "e69d4bce-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260415_074157_KwpsOffice.exe", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332256, "uuid": "e6bcd424-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260411_094958_clicknext.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332256, "uuid": "e6df6dab-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/vnc.bin", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332256, "uuid": "e710a90b-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260413_103614_vns.vbs", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332256, "uuid": "e738892d-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/havan.bin", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332257, "uuid": "e77f5c5d-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260411_134016_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332259, "uuid": "e8b2c6a9-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260413_101715_vns.vbs", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332259, "uuid": "e8f3efd9-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260415_061303_nView64.dll", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332259, "uuid": "e8fc06b6-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260415_061240_nView.exe", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332259, "uuid": "e8fc0a25-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/stil.bin", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332261, "uuid": "e9dd9ac1-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260415_062339_enroll.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332262, "uuid": "ea77e139-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/netinfo.exe", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332262, "uuid": "ea82237b-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260413_104113_ffmpeg.zip", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332266, "uuid": "eceda361-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260415_074921_CKeyboardH.dll", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332271, "uuid": "f02974b7-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260413_094108_ffmpeg.zip", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776332277, "uuid": "f3babc3a-3977-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260413_095904_ffmpeg.zip", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776333131, "uuid": "f05a579c-3979-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260415_074824_backgroundTaskHost.exe", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776333131, "uuid": "f07ece63-3979-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://simple-form4.aim-national.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776333138, "uuid": "f4d78ae1-3979-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://phone-call3.aim-national.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776333140, "uuid": "f600a868-3979-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.138.65:55715/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776333140, "uuid": "f62a6622-3979-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.189.216:60389/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776333141, "uuid": "f670014f-3979-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.216.119:33156/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776333142, "uuid": "f7032062-3979-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://248bestmoon.click/files/fm_20260413_093212_ffmpeg-8.1-essentials_build.zip", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "domain", "colour": "#f8acae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776333253, "uuid": "398d8c54-397a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.77.62:47220/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776333253, "uuid": "398ee4e1-397a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://brief-meet5.aim-national.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776333610, "uuid": "0df829a7-397b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://group-join6.aim-national.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776333799, "uuid": "7ecf949b-397b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.182.174:34826/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776333850, "uuid": "9cd2c970-397b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://clear-water1.overgr0wnsaval.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776333920, "uuid": "c6aaee73-397b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.189.216:60389/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776334267, "uuid": "95747ce7-397c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ocean-blue2.overgr0wnsaval.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776334270, "uuid": "97720903-397c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.228.163:42944/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776334569, "uuid": "49e99d5f-397d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://river-flow3.overgr0wnsaval.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776334872, "uuid": "fe34c240-397d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://deep-well4.overgr0wnsaval.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776335005, "uuid": "4db869a7-397e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.231.61:39151/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776335236, "uuid": "d7692515-397e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rain-drop5.overgr0wnsaval.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776335412, "uuid": "3fe798c3-397f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.208.9.62/bins/pppc", "Tag": [ { "name": "85-208-9-62", "colour": "#ae5311", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776335412, "uuid": "3fefa5c8-397f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.208.9.62/bins/px86_64", "Tag": [ { "name": "85-208-9-62", "colour": "#ae5311", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776335534, "uuid": "88b9c916-397f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://solid-base6.overgr0wnsaval.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776335541, "uuid": "8d19dd54-397f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.106.221:38624/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776335775, "uuid": "189b2581-3980-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.120.208:53084/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776335952, "uuid": "820776ab-3980-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://express-mail1.crazy-talk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776336250, "uuid": "3374fc64-3981-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://direct-send2.crazy-talk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776336323, "uuid": "5f3dc978-3981-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://autodiscover.atlcpatax.com/bins/parm", "Tag": [ { "name": "autodiscover-atlcpatax-com", "colour": "#325cc7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776336323, "uuid": "5f3decb6-3981-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://autodiscover.atlcpatax.com/bins/psh4", "Tag": [ { "name": "autodiscover-atlcpatax-com", "colour": "#325cc7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776336323, "uuid": "5f4d1415-3981-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://autoconfig.atlcpatax.com/bins/parm7", "Tag": [ { "name": "autoconfig-atlcpatax-com", "colour": "#9fc1f1", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776336323, "uuid": "5f5638bc-3981-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://autodiscover.atlcpatax.com/bins/parm6", "Tag": [ { "name": "autodiscover-atlcpatax-com", "colour": "#325cc7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776336323, "uuid": "5f593248-3981-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.atlcpatax.com/bins/pmips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mail-atlcpatax-com", "colour": "#fc86fd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776336323, "uuid": "5f5c6090-3981-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://autodiscover.atlcpatax.com/bins/pmpsl", "Tag": [ { "name": "autodiscover-atlcpatax-com", "colour": "#325cc7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776336323, "uuid": "5f5c63ac-3981-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://autoconfig.atlcpatax.com/bins/pm68k", "Tag": [ { "name": "autoconfig-atlcpatax-com", "colour": "#9fc1f1", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776336323, "uuid": "5f5ca7bb-3981-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://autodiscover.atlcpatax.com/bins/pppc", "Tag": [ { "name": "autodiscover-atlcpatax-com", "colour": "#325cc7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776336323, "uuid": "5f6065b4-3981-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://autoconfig.atlcpatax.com/bins/px86_64", "Tag": [ { "name": "autoconfig-atlcpatax-com", "colour": "#9fc1f1", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776336324, "uuid": "5f7d27e4-3981-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://autodiscover.atlcpatax.com/bins/pm68k", "Tag": [ { "name": "autodiscover-atlcpatax-com", "colour": "#325cc7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776336324, "uuid": "5f8692e2-3981-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.atlcpatax.com/bins/px86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mail-atlcpatax-com", "colour": "#fc86fd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776336324, "uuid": "5f86c87c-3981-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://autodiscover.atlcpatax.com/bins/px86_64", "Tag": [ { "name": "autodiscover-atlcpatax-com", "colour": "#325cc7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776336331, "uuid": "63c60a0b-3981-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://autodiscover.atlcpatax.com/bins/px86", "Tag": [ { "name": "autodiscover-atlcpatax-com", "colour": "#325cc7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776336331, "uuid": "63c7f906-3981-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://autoconfig.atlcpatax.com/bins/pppc", "Tag": [ { "name": "autoconfig-atlcpatax-com", "colour": "#9fc1f1", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776336331, "uuid": "63cb9cf1-3981-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.atlcpatax.com/bins/parm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mail-atlcpatax-com", "colour": "#fc86fd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776336331, "uuid": "63cba0cc-3981-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.atlcpatax.com/bins/parm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mail-atlcpatax-com", "colour": "#fc86fd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776336331, "uuid": "63cba2cf-3981-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.atlcpatax.com/bins/pm68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mail-atlcpatax-com", "colour": "#fc86fd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776336331, "uuid": "63d6d73e-3981-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://autoconfig.atlcpatax.com/bins/psh4", "Tag": [ { "name": "autoconfig-atlcpatax-com", "colour": "#9fc1f1", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776336331, "uuid": "63d9fd31-3981-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.atlcpatax.com/bins/parm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mail-atlcpatax-com", "colour": "#fc86fd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776336331, "uuid": "63dbf2c7-3981-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://autoconfig.atlcpatax.com/bins/parm5", "Tag": [ { "name": "autoconfig-atlcpatax-com", "colour": "#9fc1f1", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776336331, "uuid": "63e33870-3981-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.atlcpatax.com/bins/pmpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mail-atlcpatax-com", "colour": "#fc86fd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776336331, "uuid": "640893e6-3981-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://autoconfig.atlcpatax.com/bins/parm6", "Tag": [ { "name": "autoconfig-atlcpatax-com", "colour": "#9fc1f1", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776336333, "uuid": "6525ee71-3981-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://autoconfig.atlcpatax.com/bins/parm", "Tag": [ { "name": "autoconfig-atlcpatax-com", "colour": "#9fc1f1", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776336333, "uuid": "652e9ec7-3981-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://autodiscover.atlcpatax.com/bins/parm7", "Tag": [ { "name": "autodiscover-atlcpatax-com", "colour": "#325cc7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776336333, "uuid": "6531f432-3981-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://autodiscover.atlcpatax.com/bins/pmips", "Tag": [ { "name": "autodiscover-atlcpatax-com", "colour": "#325cc7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776336333, "uuid": "65326dcf-3981-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.atlcpatax.com/bins/psh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mail-atlcpatax-com", "colour": "#fc86fd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776336333, "uuid": "65327879-3981-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.atlcpatax.com/bins/pppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mail-atlcpatax-com", "colour": "#fc86fd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776337275, "uuid": "968d7173-3983-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://short-word4.crazy-talk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776337275, "uuid": "96b041b0-3983-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sticky-note3.crazy-talk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776337279, "uuid": "98ceb15f-3983-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://heavy-pack5.crazy-talk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776337284, "uuid": "9c2cca07-3983-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://autoconfig.atlcpatax.com/bins/pmips", "Tag": [ { "name": "autoconfig-atlcpatax-com", "colour": "#9fc1f1", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776337284, "uuid": "9c322487-3983-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.atlcpatax.com/bins/px86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mail-atlcpatax-com", "colour": "#fc86fd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776337285, "uuid": "9cd269b6-3983-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.106.221:38624/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776337286, "uuid": "9cf756d4-3983-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.228.163:42944/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776337286, "uuid": "9cfdf3d4-3983-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.atlcpatax.com/bins/parm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mail-atlcpatax-com", "colour": "#fc86fd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776337287, "uuid": "9d75d804-3983-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.143.170:47852/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776337293, "uuid": "a13b33b9-3983-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://autoconfig.atlcpatax.com/bins/px86", "Tag": [ { "name": "autoconfig-atlcpatax-com", "colour": "#9fc1f1", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776337293, "uuid": "a144826a-3983-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://autoconfig.atlcpatax.com/bins/pmpsl", "Tag": [ { "name": "autoconfig-atlcpatax-com", "colour": "#9fc1f1", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776337295, "uuid": "a2760ecb-3983-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.1.83:54799/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776338235, "uuid": "d2cef782-3985-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://doome.crazy-talk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776338240, "uuid": "d60fa2ab-3985-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.118.144:47229/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776338241, "uuid": "d6776c94-3985-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.0.135:48337/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776338241, "uuid": "d67d3453-3985-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.143.170:47852/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776338242, "uuid": "d6e0ec66-3985-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.38.184:47338/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776338246, "uuid": "d96269d2-3985-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://autodiscover.atlcpatax.com/bins/parm5", "Tag": [ { "name": "autodiscover-atlcpatax-com", "colour": "#325cc7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776338293, "uuid": "f52ab715-3985-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://work-done6.crazy-talk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776338359, "uuid": "1cc9a735-3986-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.231.61:39151/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776338672, "uuid": "d7065106-3986-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.103.130:43025/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776338894, "uuid": "5b9af867-3987-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://arkspireor.burrowkislyat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339192, "uuid": "0cf3ce7d-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://4cnluiv.burrowkislyat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339425, "uuid": "984278bf-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.186.230.74:54569/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339425, "uuid": "984285ba-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.91.202:42546/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339425, "uuid": "98466eae-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.18.54:48200/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339426, "uuid": "98b96d08-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.83.9:59140/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339426, "uuid": "98db207b-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.189.222.143:13639/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339426, "uuid": "98e78d18-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.88.72:60515/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339430, "uuid": "9aed8549-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.82.182.90:39381/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339430, "uuid": "9b0a0582-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.30.107:46688/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339430, "uuid": "9b1b641e-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.235.127:40429/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339430, "uuid": "9b319523-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.26.71:60683/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339430, "uuid": "9b31da30-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.68.61:35291/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339430, "uuid": "9b37ebf5-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.181.173:41732/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339430, "uuid": "9b3e5ad4-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.214.132:37112/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339431, "uuid": "9b649c26-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.153.59:55164/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339431, "uuid": "9b7219d0-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.34.178:41872/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339431, "uuid": "9b7da510-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.97.165:36849/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339431, "uuid": "9b83a87c-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.75.20:54035/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339431, "uuid": "9b83a962-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.45.65:43109/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339431, "uuid": "9b9b1ffe-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.1.204:52457/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339431, "uuid": "9bb339fe-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.37.81.41:55749/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339436, "uuid": "9e779843-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.156.12:50875/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339442, "uuid": "a26ec22a-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.249.152.211:55115/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339490, "uuid": "bece0c03-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.31.179:51513/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339490, "uuid": "bece0d1b-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://145.255.196.49:44985/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339490, "uuid": "bed5eefb-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.249.4.20:39013/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339490, "uuid": "bee0d976-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.31.179:51513/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339490, "uuid": "bef5ccf6-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.225.241:53561/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339490, "uuid": "bef9e22a-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://decoderill.burrowkislyat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339490, "uuid": "bf1d014a-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.155.36:40022/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339491, "uuid": "bf34d983-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.40.110:38900/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339491, "uuid": "bf3b4ae8-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.245.44:37452/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339491, "uuid": "bf4db558-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.96.170:36747/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339498, "uuid": "c38f08fc-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.47.201.7:52455/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339547, "uuid": "e0b79ca7-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.89.157.150:58859/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339549, "uuid": "e21028bb-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.214.132:37112/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339549, "uuid": "e21db28a-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.115.102.16:33210/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339549, "uuid": "e222d53a-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.69.92.51:37658/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339549, "uuid": "e222e273-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.245.44:37452/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339549, "uuid": "e2247064-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.247.109.76:40625/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339549, "uuid": "e224763f-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.15.184:34786/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339549, "uuid": "e226a3b0-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.179.7.35:41054/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339549, "uuid": "e226bd81-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.233.38:40766/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339549, "uuid": "e2275353-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.26.71:60683/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339549, "uuid": "e22bd205-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.9.117:56211/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339549, "uuid": "e22f9698-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.147.200:44176/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339550, "uuid": "e24bde08-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.37.108:47652/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339550, "uuid": "e264e643-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.234.10:60868/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339550, "uuid": "e28720a7-3988-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.92.162:55660/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339613, "uuid": "07fdd333-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.37.108:47652/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339613, "uuid": "07fdff0b-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.47.179:46179/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339613, "uuid": "07fe2b98-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.187.239.144:48842/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339613, "uuid": "0812a835-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.6.91.43:57730/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339613, "uuid": "0817162c-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.52.120:43283/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339613, "uuid": "081756e2-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.1.204:52457/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339613, "uuid": "0823a9a5-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.236.212.224:60035/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339613, "uuid": "0829319f-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.83.13.37:3569/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339613, "uuid": "082ea7ca-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.200.237.170:45286/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339613, "uuid": "0844f0b0-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.137.155.177:60650/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339613, "uuid": "084e8948-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.90.196:57451/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339613, "uuid": "085595e2-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.84.41:53626/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339613, "uuid": "085ad2d6-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.174.171.155:41130/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339613, "uuid": "0866e02a-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.248.187:49309/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339613, "uuid": "086f0fe7-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.14.131:34018/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339614, "uuid": "08725b96-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.126.96:59275/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339614, "uuid": "087f3fc3-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.46.160:44856/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339664, "uuid": "26c5ae4b-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.45.72:41057/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339667, "uuid": "2825f080-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.21.70.189:49079/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339669, "uuid": "293e805d-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.104.145:34189/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339669, "uuid": "29428572-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.223.252.123:55034/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339669, "uuid": "2942d01c-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.237.131:40238/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339669, "uuid": "29464fb9-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.45.72:41057/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339669, "uuid": "296617b6-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.248.187:49309/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339669, "uuid": "298b00a8-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.82.182.90:39381/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339669, "uuid": "2990e2a5-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.38.88:50560/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339669, "uuid": "2990faed-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.115.102.16:33210/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339669, "uuid": "299ab605-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.78.240:56843/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339669, "uuid": "29aeefc3-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.5.19:46960/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339669, "uuid": "29b398a4-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.140.86:38710/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339670, "uuid": "2a01f7cc-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.229.20.10:34801/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339670, "uuid": "2a27050d-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.177.138.61:34459/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339672, "uuid": "2b400d19-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.192.153:49373/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339681, "uuid": "308433c4-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.123.156:39363/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339686, "uuid": "33be6bc2-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.58.110.62:33480/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339727, "uuid": "4c5c9214-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.47.194:50609/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339727, "uuid": "4c5dcaa4-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.182.174:34826/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339728, "uuid": "4c717260-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.50.26:40062/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339731, "uuid": "4e2d5801-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.89.157.150:58859/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339731, "uuid": "4e9c0e0f-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.102.253:49819/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339731, "uuid": "4e9c2df2-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.155.36:40022/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339732, "uuid": "4ef87e96-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.7.234.255:42783/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339741, "uuid": "54549adb-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.240.122:48517/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339801, "uuid": "7868f970-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.124.140:36133/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339802, "uuid": "78b7f8c1-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.218.180:35364/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339853, "uuid": "9708213d-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://buffer4-port.burrowkislyat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339909, "uuid": "b857eb0f-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.27.12.6/Okami.arm5", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339909, "uuid": "b85a8823-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.27.12.6/Okami.ppc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339909, "uuid": "b870894f-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.27.12.6/payload.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339909, "uuid": "b8a9439a-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.27.12.6/bins/bot.x86_64", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339909, "uuid": "b8a9615f-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.27.12.6/Okami.mips", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339909, "uuid": "b8b67313-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.27.12.6/Okami.arm6", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339909, "uuid": "b8b67806-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.27.12.6/Okami.arm7", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339910, "uuid": "b96877c8-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.27.12.6/Okami.arm4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339910, "uuid": "b96c9984-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.27.12.6/bins.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339911, "uuid": "b986c661-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.27.12.6/Okami.m68k", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339911, "uuid": "ba09f5e6-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.189.222.143:13639/mozi.m", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339912, "uuid": "ba102616-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.189.222.143:13639/mozi.a", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339912, "uuid": "ba2f8284-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://145.255.196.49:44985/mozi.m", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339912, "uuid": "ba4288ed-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://145.255.196.49:44985/mozi.a", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339912, "uuid": "ba7bbfdb-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.26.98.67/hiddenbin/boatnet.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339912, "uuid": "ba7bcf11-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.26.98.67/hiddenbin/boatnet.arm5", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339912, "uuid": "ba7be289-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.26.98.67/hiddenbin/boatnet.spc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339912, "uuid": "ba7c0503-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.26.98.67/hiddenbin/boatnet.mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339912, "uuid": "ba7c311d-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.26.98.67/hiddenbin/boatnet.m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339912, "uuid": "ba7cfc09-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.26.98.67/hiddenbin/boatnet.x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339912, "uuid": "ba825089-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.26.98.67/hiddenbin/boatnet.sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339912, "uuid": "ba89d389-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.26.98.67/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339912, "uuid": "ba89e428-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.26.98.67/hiddenbin/boatnet.arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339912, "uuid": "ba921798-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.26.98.67/hiddenbin/boatnet.i486", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339912, "uuid": "baa601b8-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.26.98.67/hiddenbin/boatnet.ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339913, "uuid": "bab137e0-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67:83/p.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339914, "uuid": "bba9d0e9-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://rapidinc.lol/api/ps", "Tag": [ { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "RapidStealer", "colour": "#cbbd7c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339916, "uuid": "bcd9698e-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://friendlydomain.ru/files/jar/Pjibf.exe", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339916, "uuid": "bd005887-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://friendlydomain.ru/files/jar/module", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339917, "uuid": "bd1be2cb-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://friendlydomain.ru/files/jar/elevator", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339918, "uuid": "bdb69a1b-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://friendlydomain.ru/files/jar/module2", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339918, "uuid": "bdf819dc-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://friendlydomain.ru/files/jar/RuntimeBroker.exe", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339918, "uuid": "be0ba173-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://friendlydomain.ru/files/jar/security", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339920, "uuid": "bf3fa535-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://friendlydomain.ru/files/jar/component", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339925, "uuid": "c230fa8e-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.162.185:43971/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339943, "uuid": "ccedc3c8-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.75:751/download", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RapidStealer", "colour": "#cbbd7c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339967, "uuid": "db03b01e-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.26.98.67/hiddenbin/boatnet.i686", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339967, "uuid": "db03c0c4-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.26.98.67/hiddenbin/boatnet.x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339967, "uuid": "db03c2fe-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.26.98.67/hiddenbin/boatnet.arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776339967, "uuid": "db0b3dc6-3989-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.26.98.67/hiddenbin/boatnet.arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776340268, "uuid": "8e6fe58a-398a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.123.23:41679/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776340273, "uuid": "918e17ae-398a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://runvv4y4-reach.burrowkislyat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776340285, "uuid": "9899488f-398a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.34.178:41872/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776340514, "uuid": "2160265e-398b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://snapshotcrawler.burrowkislyat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776340870, "uuid": "f53d5eda-398b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://18qr.amygdala-fugue.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776340874, "uuid": "f79a4c55-398b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.189.181.54:51682/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776340940, "uuid": "1f034873-398c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.218.180:35364/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776341118, "uuid": "8904030d-398c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.126.199:43014/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776341167, "uuid": "a68dbeba-398c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://workerwar.amygdala-fugue.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776341541, "uuid": "853bdb6f-398d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.9.131:35702/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776341587, "uuid": "a0eb91f7-398d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kern-zone.amygdala-fugue.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776341828, "uuid": "3065a256-398e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://frkoakq.amygdala-fugue.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776341957, "uuid": "7d3cf831-398e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.123.23:41679/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776341958, "uuid": "7dcaa434-398e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.178.165.188:36451/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776342067, "uuid": "bf0b08fe-398e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tw1f5ruc.ebensen-timent.digital/?ublib=rDAEypPWBuYSRyWT", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776342129, "uuid": "e399ac6b-398e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.163.187.213:60651/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776342488, "uuid": "b9c3e330-398f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://easgold.amygdala-fugue.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776342489, "uuid": "ba397697-398f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.118.240.155:36509/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776342607, "uuid": "00ec90f2-3990-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://deploy2-vector.amygdala-fugue.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776342909, "uuid": "b4e958dc-3990-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wild-snaps.lessonp7oceed.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776342920, "uuid": "bb5f3f82-3990-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.9.131:35702/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776343211, "uuid": "68de7ee1-3991-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vorven3um.lessonp7oceed.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776343280, "uuid": "9200efba-3991-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.91.133:46743/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776343510, "uuid": "1aae9592-3992-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bytecolum.lessonp7oceed.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776343585, "uuid": "47e3d724-3992-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.36.145:33561/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776343820, "uuid": "d3fde396-3992-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.28.183:34655/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776343871, "uuid": "f1e9164a-3992-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.178.165.188:36451/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776343934, "uuid": "1766a4ee-3993-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ueuwt.lessonp7oceed.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776343942, "uuid": "1c27fc06-3993-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.162.139:44733/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776344290, "uuid": "eb9b1ef1-3993-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tinloos.lessonp7oceed.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776344416, "uuid": "370edc44-3994-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/cblootah/test/raw/refs/heads/main/crypted.exe", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776344588, "uuid": "9db99cf8-3994-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://geo-r3por.lessonp7oceed.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776344947, "uuid": "73bdccac-3995-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ser-coreen.cloth-guipure.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776345197, "uuid": "086b170b-3996-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.68.43.217:34887/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776345248, "uuid": "26e6a542-3996-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://61rplpi.cloth-guipure.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776345492, "uuid": "b83593c7-3996-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.28.183:34655/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776345549, "uuid": "da3c2265-3996-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tran5it-array.cloth-guipure.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776345619, "uuid": "040e1cec-3997-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.58.160:39367/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776345909, "uuid": "b0e8f450-3997-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://servaleon.cloth-guipure.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776346090, "uuid": "1ca37953-3998-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.197.2:35752/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776346209, "uuid": "6366916a-3998-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://y3acxztp.cloth-guipure.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776346216, "uuid": "678c77c8-3998-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.50.21:58129/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776346460, "uuid": "f9205b58-3998-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.49.26.178:44714/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776346571, "uuid": "3b444a14-3999-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://quorvaleis.cloth-guipure.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776346756, "uuid": "a9bd116a-3999-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.58.160:39367/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776346885, "uuid": "f69f5b8b-3999-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.148.211:48943/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776346927, "uuid": "0f6bc653-399a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lettedust.wei8htunconq.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776346989, "uuid": "347cc5a5-399a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.47.194:50609/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776347004, "uuid": "3d6a6d8f-399a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.156.114:48489/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776347288, "uuid": "e680a994-399a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://d4wn-hinge.wei8htunconq.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776347475, "uuid": "566fd2f7-399b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.148.211:48943/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776347588, "uuid": "99783613-399b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ucelrko.wei8htunconq.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776347654, "uuid": "c0d84799-399b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.23.131.194:35197/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776347769, "uuid": "0575ab62-399c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.197.2:35752/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776347887, "uuid": "4c03cee2-399c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://l0qq.wei8htunconq.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776347951, "uuid": "71c160db-399c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.13.84:39624/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776348136, "uuid": "e0298206-399c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.27.12.6/Okami.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776348136, "uuid": "e02a355b-399c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.27.12.6/Okami.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776348136, "uuid": "e02a3c17-399c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.27.12.6/Okami.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776348136, "uuid": "e02a40d5-399c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.27.12.6/Okami.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776348136, "uuid": "e02a4786-399c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.27.12.6/Okami.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776348137, "uuid": "e094ccec-399c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.27.12.6/Okami.i586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776348251, "uuid": "2492d786-399d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://st0r3-scope.wei8htunconq.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776348370, "uuid": "6b769075-399d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.122.144/img/hid/img_205037.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776348611, "uuid": "fb5521df-399d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://28lk.wei8htunconq.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776348912, "uuid": "aea12240-399e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://skbeju.agrotekh-home.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776348916, "uuid": "b122c9d9-399e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.212.144:41959/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776348970, "uuid": "d1608ac6-399e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.13.84:39624/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776349039, "uuid": "fa739334-399e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.157.253.209:45483/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776349268, "uuid": "832577e5-399f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://samplehidden.agrotekh-home.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776349271, "uuid": "84f0034e-399f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.83.194:38331/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776349395, "uuid": "ce8944ed-399f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.46.74.31:46295/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776349752, "uuid": "a376d0e7-39a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.209.42:47048/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776349868, "uuid": "e84e6440-39a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://solvaleet3.agrotekh-home.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776350110, "uuid": "78983402-39a1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://arkmesh0ar.agrotekh-home.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776350228, "uuid": "bf41c400-39a1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://oxrv.agrotekh-home.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776350232, "uuid": "c1636db5-39a1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.93.65:49840/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776350648, "uuid": "b98b24a1-39a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fjzpcljo.agrotekh-home.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776350828, "uuid": "24bac3c0-39a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.83.194:38331/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776350898, "uuid": "4e75cd0f-39a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.46.74.31:46295/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776351009, "uuid": "90a29b9c-39a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://glyph-prai.dish2rhumane.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776351082, "uuid": "bc44790a-39a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.37.139.218:55337/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776351259, "uuid": "25958746-39a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.209.42:47048/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776351308, "uuid": "42d047b0-39a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zenforgeos2.dish2rhumane.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776351501, "uuid": "b61ddff6-39a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.219.119:51321/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776351610, "uuid": "f72579ed-39a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dyn-markix.dish2rhumane.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776352027, "uuid": "ef734a48-39a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://r0uter-sheet.dish2rhumane.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776352389, "uuid": "c6f3be5a-39a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nszftsfl.dish2rhumane.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776352690, "uuid": "7a5d9fa6-39a7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://oblg.dish2rhumane.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776352699, "uuid": "7fbb20cf-39a7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.219.119:51321/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776352756, "uuid": "a1f23669-39a7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.13.149.41:34742/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776353053, "uuid": "53296342-39a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gran7-lab.inept-tail.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776353293, "uuid": "e2533bd6-39a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dcfn606z.inept-tail.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776353297, "uuid": "e4ab27c4-39a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.145.175:38749/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776353361, "uuid": "0a5948a4-39a9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.42.21:53307/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776353361, "uuid": "0acd088d-39a9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.235.231:35134/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776353362, "uuid": "0b34da7e-39a9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.165.236.95:40735/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776353769, "uuid": "fdf39c31-39a9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://handlerspool.inept-tail.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776354311, "uuid": "40e31a33-39ab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.36.176:53534/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776354368, "uuid": "63093d64-39ab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ysrykt.inept-tail.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776354499, "uuid": "b10c7f0e-39ab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.235.231:35134/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776354551, "uuid": "cf9a0d18-39ab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://form-plate.inept-tail.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776354619, "uuid": "f858935c-39ab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.13.149.41:34742/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776354671, "uuid": "176f2788-39ac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.46.160:44856/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776354671, "uuid": "178e3f52-39ac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.183.231:46154/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776354788, "uuid": "5cdedfc5-39ac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://go1d-leaf.inept-tail.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776354813, "uuid": "6bddcb6c-39ac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.145.175:38749/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776354916, "uuid": "a985b5de-39ac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.165.236.95:40735/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776355149, "uuid": "341d060f-39ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://s7sb939.barankad1sin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776355157, "uuid": "38dc6ad5-39ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.55.198.100:41095/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776355157, "uuid": "39181e82-39ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.252.150:46026/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776355279, "uuid": "81f8746a-39ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.133.230:34461/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776355447, "uuid": "e61d0150-39ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sgwua7.barankad1sin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776355690, "uuid": "76cc79c6-39ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.1.74:46636/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776355810, "uuid": "be7a6643-39ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pwlmc.barankad1sin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776356112, "uuid": "7208023a-39af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://assetinvoice.barankad1sin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776356470, "uuid": "47f02880-39b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.35.78.2:23117/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776356534, "uuid": "6e091f6a-39b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://padaj0.barankad1sin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776356662, "uuid": "ba31cc0c-39b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.252.150:46026/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776356778, "uuid": "ff767035-39b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hidd3n-spark.barankad1sin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776357079, "uuid": "b2f4cd1f-39b1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.112.127.184/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776357082, "uuid": "b42f4180-39b1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.112.127.184/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776357082, "uuid": "b43a3c2b-39b1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.112.127.184/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776357082, "uuid": "b43a7ccf-39b1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.112.127.184/arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776357083, "uuid": "b4de815e-39b1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.112.127.184/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776357133, "uuid": "d3187cec-39b1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://meta-w1ld.concent-shelm.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776357145, "uuid": "da03587d-39b1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.112.127.184/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776357147, "uuid": "db1d562d-39b1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.112.127.184/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776357429, "uuid": "8314efd0-39b2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.248.141:46120/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776357497, "uuid": "abb47cc3-39b2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://genomecomp.concent-shelm.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776357855, "uuid": "817be0b9-39b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://3776.concent-shelm.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776358153, "uuid": "331e6a98-39b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ravenpalet.concent-shelm.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776358574, "uuid": "2de4c360-39b5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://afrqcy.concent-shelm.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776358815, "uuid": "bd5bdedd-39b5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bran-build.concent-shelm.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776359173, "uuid": "92d0909e-39b6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://spli1-watch.zex3piral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776359533, "uuid": "6922fd53-39b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tnkjrebh.zex3piral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776359892, "uuid": "3fa0f439-39b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://keltide4al.zex3piral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776360026, "uuid": "8f68b7c9-39b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.233.232.44:60693/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776360187, "uuid": "ef6b46f5-39b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://targetpasture.zex3piral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776360265, "uuid": "1d696303-39b9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.216.250.235:52036/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776360323, "uuid": "40058129-39b9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.55.13:38168/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776360548, "uuid": "c65ccfd7-39b9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wrwr.zex3piral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776360854, "uuid": "7cc59737-39ba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fix7-cast.zex3piral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776361213, "uuid": "52d63f81-39bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://b1rd-panel.lix7morav.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776361513, "uuid": "058dc2c4-39bc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://iciqx71.lix7morav.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776361521, "uuid": "0a2b6f6b-39bc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.169.6:33017/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776361521, "uuid": "0a3b8ac6-39bc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.216.250.235:52036/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776361689, "uuid": "6eae6ca6-39bc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.133.230:34461/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776361933, "uuid": "ffe49f81-39bc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://merven6ex.lix7morav.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776362233, "uuid": "b2d676e5-39bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mpfpni4.lix7morav.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776362595, "uuid": "8a590c9f-39be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://irpd79.lix7morav.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776362893, "uuid": "3c313007-39bf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://metriccivil.lix7morav.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776362898, "uuid": "3f485538-39bf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.169:48759/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776362955, "uuid": "611006c5-39bf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.248.141:46120/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776363249, "uuid": "10859bc4-39c0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://snow-ass.vyr2dalen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776363547, "uuid": "c19ea025-39c0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://qpmerz.vyr2dalen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776363853, "uuid": "7802e920-39c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://birch2-pulse.vyr2dalen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776363919, "uuid": "9fefc7d2-39c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.55.13:38168/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776364209, "uuid": "4c562be2-39c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://oshwcrk.vyr2dalen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776364335, "uuid": "979c4d63-39c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.169:48759/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776364401, "uuid": "bed3ec62-39c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.162.191:47432/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776364629, "uuid": "46b82bb1-39c3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.156.114:48489/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776364699, "uuid": "705787de-39c3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.52.120:43283/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776364812, "uuid": "b3e9928d-39c3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://binarymod.vyr2dalen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776365049, "uuid": "40ea35bd-39c4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://5ton0-vault.vyr2dalen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776365121, "uuid": "6c0ccd5b-39c4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.111.60:54152/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776365232, "uuid": "ae8b839a-39c4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gathe-tri.tix9sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776365297, "uuid": "d4f7cfd9-39c4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.162.191:47432/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776365362, "uuid": "fbeca4e4-39c4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.2.247:49444/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776365591, "uuid": "841c7fa5-39c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mruyas.tix9sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776365948, "uuid": "59291459-39c6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fyd10k.tix9sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776366136, "uuid": "c9380258-39c6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.1.74:46636/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776366251, "uuid": "0d74b73b-39c7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://outdock.tix9sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776366259, "uuid": "121c06d8-39c7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.126.96:59275/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776366912, "uuid": "97743c05-39c8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://quordraex5.tix9sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776367087, "uuid": "ffe5935d-39c8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://exposeatom.tix9sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776367395, "uuid": "b7bd258d-39c9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://auditgate.kro4liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776367749, "uuid": "8a7bc6cb-39ca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://trucarr.kro4liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776367872, "uuid": "d3e54587-39ca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.69.241:58099/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776367935, "uuid": "f94dff13-39ca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.8.118.17:42657/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776368178, "uuid": "8a3f5057-39cb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.160.29:55419/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776368289, "uuid": "cc925708-39cb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastureurban.kro4liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776368353, "uuid": "f25333ac-39cb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.112.127.184/x64", "Tag": [ { "name": "92-112-127-184", "colour": "#603182", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776368353, "uuid": "f253340f-39cb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.112.127.184/arm7", "Tag": [ { "name": "92-112-127-184", "colour": "#603182", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776368468, "uuid": "36ec7c6e-39cc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://xa20yx.kro4liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776368772, "uuid": "ec2aaff6-39cc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gsl4.kro4liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776369068, "uuid": "9c6e4651-39cd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://curi7-bridge.kro4liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776369076, "uuid": "a12ce731-39cd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.5.182:57651/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776369374, "uuid": "52ee2081-39ce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fyxfe.pyn6toral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776369386, "uuid": "5a7e9f78-39ce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.96.99:34271/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776369499, "uuid": "9d712eb2-39ce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.8.118.17:42657/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776369748, "uuid": "322f3321-39cf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://dl.armour-inc-down.net/in/?KIDDIONSMODMENU", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776369754, "uuid": "356e4f9a-39cf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ubft6.pyn6toral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776369859, "uuid": "7434960e-39cf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.69.241:58099/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776370092, "uuid": "fedbe3b5-39cf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://shapemoral.pyn6toral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776370279, "uuid": "6e9300f5-39d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.160.29:55419/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776370331, "uuid": "8d874af0-39d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.89.3:35959/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776370331, "uuid": "8d8aaccc-39d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.137.25:33356/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776370338, "uuid": "916676f6-39d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.137.155.177:60650/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776370387, "uuid": "aeed846f-39d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://c299jq.pyn6toral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776370724, "uuid": "78028ace-39d1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://dl.armour-inc-down.net/in/?AdGuardPremiump0", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776370749, "uuid": "867475ff-39d1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nh48qkv.pyn6toral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776370868, "uuid": "cdb97617-39d1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.118.240.155:36509/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776371051, "uuid": "3aaf9c45-39d2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://winterwind.pyn6toral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776371358, "uuid": "f1e4ef38-39d2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.148.234:33970/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776371407, "uuid": "0f190229-39d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nbfkdj.wex1miran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776371478, "uuid": "39291ea2-39d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.148.234:33970/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776371601, "uuid": "828f65c1-39d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.89.3:35959/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776371708, "uuid": "c2219219-39d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://njf8.wex1miran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776371778, "uuid": "ec414ef3-39d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.137.25:33356/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776371897, "uuid": "32fc47d3-39d4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67:83/manji.aarch64", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776372071, "uuid": "9a99a3e3-39d4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tdjgv.wex1miran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776372317, "uuid": "2d0ecf56-39d5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.161.100.140:56557/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776372427, "uuid": "6efc5cf7-39d5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://qt774.wex1miran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776372787, "uuid": "45a62d4d-39d6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fabricpayload.wex1miran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776373088, "uuid": "f8a5ea20-39d6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hyper-ch3c.wex1miran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776373451, "uuid": "d11fcee7-39d7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lv32.dax8sovel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776373508, "uuid": "f2fd60f6-39d7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/solingpass/rolly/-/raw/main/4J8576A0E8V3.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776373518, "uuid": "f956d9bd-39d7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.96.99:34271/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776373747, "uuid": "81a27c41-39d8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://c3dar-sync.dax8sovel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776373866, "uuid": "c88e80c2-39d8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.159/nk.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776373927, "uuid": "ecfab6eb-39d8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastefy.app/RuQcMwxX/raw", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776374169, "uuid": "7cfa05b1-39d9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dynmeshex6.dax8sovel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776374412, "uuid": "0dc06431-39da-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.206.215:51491/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776374413, "uuid": "0e42c8df-39da-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.253.145:56653/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776374472, "uuid": "31eb8842-39da-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://d6armypp.dax8sovel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776374834, "uuid": "0959e14d-39db-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hesq.dax8sovel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776375069, "uuid": "95a506ec-39db-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cacpulse.dax8sovel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776375429, "uuid": "6bf9bdd4-39dc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://grandalign.bex5loran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776375791, "uuid": "43df13e7-39dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://retailmicro.bex5loran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776375858, "uuid": "6bb72c36-39dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.206.215:51491/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776376148, "uuid": "18ca5323-39de-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://2vb5.bex5loran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776376448, "uuid": "cb5426a3-39de-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sdkconve.bex5loran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776376576, "uuid": "180b8005-39df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.45.79:47982/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776376748, "uuid": "7e3ee737-39df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mer-corea.bex5loran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776376757, "uuid": "83f8e6f4-39df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.15.169:58470/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776377112, "uuid": "5782315d-39e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lvqpbk.bex5loran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776377466, "uuid": "2a5b661d-39e1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://civillabel.qyx7darem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776377772, "uuid": "e0df8716-39e1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://plasm-spool.qyx7darem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776377962, "uuid": "51f4c8e5-39e2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.45.79:47982/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776378134, "uuid": "b8837eac-39e2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ch3ckp-route.qyx7darem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776378500, "uuid": "928521ea-39e3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://breezscrip.qyx7darem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776378795, "uuid": "427872af-39e4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ancientwav.qyx7darem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776379091, "uuid": "f2a12d90-39e4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://microservisetrue.vip/fwefwe324234234rgeffwehtrwyrhtrhtqwfqwd31443wefefwwfer3232fewwefwefwefqgrqwtherergqefwefqweqfwqf32fefwsda/uploads/EFewefwewFEW342234423234feWEEFWWefewefweffewwefEWF.php?file=333.exe/", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-empty", "colour": "#752700", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776379099, "uuid": "f7960ff4-39e4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.145.70:59506/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776379150, "uuid": "15ebf9ab-39e5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://echo-span.qyx7darem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776379163, "uuid": "1d7befd5-39e5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.114/bot_x86.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776379168, "uuid": "20e1b845-39e5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.114/bot.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776379171, "uuid": "229f2f3f-39e5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.114/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776379171, "uuid": "22cc16f2-39e5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.114/mipsle", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776379174, "uuid": "24689a72-39e5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.114/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776379515, "uuid": "efa02992-39e5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mernexen6.gypsyw0od.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776379640, "uuid": "39eb05e7-39e6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.145.70:59506/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776379867, "uuid": "c188bd56-39e6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://01rx.gypsyw0od.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776380124, "uuid": "5a9abba8-39e7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.11.172.25:46543/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776380172, "uuid": "77698a36-39e7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tridraix5.gypsyw0od.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776380292, "uuid": "be6f3bc8-39e7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.159/spd.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776380533, "uuid": "4e732bf1-39e8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://arkcoreet9.gypsyw0od.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776380833, "uuid": "00ec6315-39e9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://jdqn.gypsyw0od.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776381133, "uuid": "b3c3aa3a-39e9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://abzxcp.gypsyw0od.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776381500, "uuid": "8eed9d15-39ea-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.207.106:54017/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776381608, "uuid": "cf14030c-39ea-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/7774214998/qHmB2YG.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776381622, "uuid": "d7a93d54-39ea-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.99.250:42926/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776381793, "uuid": "3d208d38-39eb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hub0-hinge.nelma-report.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776381848, "uuid": "5e245c24-39eb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/45d5r/databricks-mcp-server/refs/heads/main/databricks_mcp/resources/server_databricks_mcp_1.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776381848, "uuid": "5e246c2a-39eb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/industrialintelligence/homestead/refs/heads/master/images/funitture_icon/Software-3.2-beta.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776381849, "uuid": "5e891d74-39eb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/saramc89mc/personal-website-template/refs/heads/main/src/components/sections/About/personal_template_website_2.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776381850, "uuid": "5f328305-39eb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/45d5r/databricks-mcp-server/raw/refs/heads/main/databricks_mcp/resources/server_databricks_mcp_1.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776381852, "uuid": "60993779-39eb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/industrialintelligence/homestead_new_backend/refs/heads/master/validator/backend_homestead_new_v1.9-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776381852, "uuid": "60b9b458-39eb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/industrialintelligence/homestead/raw/refs/heads/master/images/funitture_icon/Software-3.2-beta.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776381853, "uuid": "6125b6b8-39eb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/industrialintelligence/homestead_new_backend/raw/refs/heads/master/validator/backend_homestead_new_v1.9-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776381854, "uuid": "617f5462-39eb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/industrialintelligence/willywarriorportfolio/refs/heads/master/fonts/font-awesome-4.7.0/fonts/Software-3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776381854, "uuid": "61d079d8-39eb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/industrialintelligence/willywarriorportfolio/raw/refs/heads/master/fonts/font-awesome-4.7.0/fonts/Software-3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776382748, "uuid": "7663e729-39ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/wndaalol/DoorsScript/refs/heads/main/counterfessed/Script-Doors-v1.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776382748, "uuid": "7689a3e8-39ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/wndaalol/DoorsScript/raw/refs/heads/main/counterfessed/Script-Doors-v1.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776382748, "uuid": "76a4d154-39ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/GTA509FX/scrappe-tout/refs/heads/main/tests/e2e/scrappe-tout-2.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776382748, "uuid": "76aa4c96-39ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://livel-sou.nelma-report.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776382748, "uuid": "76b276aa-39ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/XianLeeX/claude-api/refs/heads/feat/manga-translator-mvp/ui/claude-api-Vespertiliones.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776382749, "uuid": "772e5b13-39ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/invertebratekinanesthesia779/aios-core/raw/refs/heads/main/tests/unit/squad/fixtures/invalid-squad/core-aios-1.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776382749, "uuid": "774bfbf6-39ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/wndaalol/reflectshaders/raw/refs/heads/main/ambulomancy/Software_3.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776382750, "uuid": "77cead6a-39ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/JackFalan/WAS/refs/heads/master/augurship/Software-v1.3-beta.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776382751, "uuid": "7867e2ed-39ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/alecyi/cache-components-granular/raw/refs/heads/main/components/layout/notebook/page/components-cache-granular-v2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776382751, "uuid": "78972fd7-39ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/GTA509FX/scrappe-tout/raw/refs/heads/main/tests/e2e/scrappe-tout-2.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776382752, "uuid": "79013e04-39ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/JackFalan/happyview/raw/refs/heads/master/yow/Software_v2.0-beta.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776382752, "uuid": "790746d2-39ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/billydagreat/vps-git/raw/refs/heads/main/ansible/roles/watchdog/templates/git_vps_3.0-beta.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776382753, "uuid": "797ea3c1-39ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/invertebratekinanesthesia779/aios-core/refs/heads/main/tests/unit/squad/fixtures/invalid-squad/core-aios-1.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776382754, "uuid": "7a5c46e2-39ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/wndaalol/SlapBattlesGlove/raw/refs/heads/main/backsword/Glove_Battles_Slap_v3.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776382754, "uuid": "7a5c7f7f-39ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/wndaalol/DandyWorldHubUpdate/raw/refs/heads/main/duodenocholecystostomy/Dandy_World_Hub_Update_3.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776382755, "uuid": "7ac63bbf-39ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/wndaalol/reflectshaders/refs/heads/main/ambulomancy/Software_3.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776382756, "uuid": "7b6552f0-39ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/alecyi/cache-components-granular/refs/heads/main/components/layout/notebook/page/components-cache-granular-v2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776382756, "uuid": "7b67616b-39ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/wndaalol/DandyWorldHubUpdate/refs/heads/main/duodenocholecystostomy/Dandy_World_Hub_Update_3.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776382757, "uuid": "7bd47434-39ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/JackFalan/happyview/refs/heads/master/yow/Software_v2.0-beta.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776382757, "uuid": "7be31995-39ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/saramc89mc/personal-website-template/raw/refs/heads/main/src/components/sections/About/personal_template_website_2.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776382757, "uuid": "7c04c46d-39ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/XianLeeX/claude-api/raw/refs/heads/feat/manga-translator-mvp/ui/claude-api-Vespertiliones.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776382757, "uuid": "7c3313e2-39ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/billydagreat/vps-git/refs/heads/main/ansible/roles/watchdog/templates/git_vps_3.0-beta.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776382758, "uuid": "7c7c5cb5-39ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/wndaalol/AssSlapBattle/raw/refs/heads/main/ontosophy/Battle_Ass_Slap_v2.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776382758, "uuid": "7c7d0cd7-39ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/sandro-beep/Discord-Message-Forwarder/raw/refs/heads/main/septuplication/Discord-Forwarder-Message-v2.8-beta.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776382758, "uuid": "7c99ee17-39ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Jesusnnc/MTProxy/refs/heads/main/angiosporous/Proxy_MT_v2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776382758, "uuid": "7cabf722-39ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://meta-5har.nelma-report.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776382758, "uuid": "7cb29042-39ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/wndaalol/SlapBattlesGlove/refs/heads/main/backsword/Glove_Battles_Slap_v3.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776382758, "uuid": "7cb2b16b-39ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/wndaalol/lara-weeb/raw/refs/heads/main/bootstrap/cache/lara_weeb_3.9-alpha.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776382758, "uuid": "7cb33324-39ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Jesusnnc/MTProxy/raw/refs/heads/main/angiosporous/Proxy_MT_v2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776382758, "uuid": "7cb84601-39ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tal-forgeal.nelma-report.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776382758, "uuid": "7cd25a7f-39ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/wndaalol/AssSlapBattle/refs/heads/main/ontosophy/Battle_Ass_Slap_v2.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776382758, "uuid": "7cd482bc-39ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/sandro-beep/Discord-Message-Forwarder/refs/heads/main/septuplication/Discord-Forwarder-Message-v2.8-beta.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776382758, "uuid": "7cd7418e-39ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/wndaalol/lara-weeb/refs/heads/main/bootstrap/cache/lara_weeb_3.9-alpha.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776382759, "uuid": "7cfdea4a-39ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.11.172.25:46543/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776382759, "uuid": "7d7360a9-39ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.198.222:51903/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776383649, "uuid": "8fb5ce7c-39ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://30urtlmu.nelma-report.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776383654, "uuid": "92797f96-39ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://va11-route.nelma-report.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776383654, "uuid": "929b8c5c-39ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/JackFalan/WAS/raw/refs/heads/master/augurship/Software-v1.3-beta.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776383654, "uuid": "929d4029-39ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://opt1-phase.dredg8asman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776383660, "uuid": "96334fca-39ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://174.34.242.49:40798/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776383661, "uuid": "968a919d-39ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.207.106:54017/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776383661, "uuid": "96e4085e-39ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.6.82:45474/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776383663, "uuid": "982df1e9-39ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.6.82:45474/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776383665, "uuid": "99717fb9-39ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.78.29:59508/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776383768, "uuid": "d69a8bb0-39ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Itzmesultan01/eventpipe/refs/heads/main/src/formats/Software_2.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776383768, "uuid": "d6c77379-39ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Naveenkm007/smart-tutor/refs/heads/main/src/contexts/tutor_smart_v1.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776383768, "uuid": "d6d28e09-39ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Naveenkm007/smart-tutor/raw/refs/heads/main/src/contexts/tutor_smart_v1.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776383769, "uuid": "d6e4954a-39ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Tursin-xD/Thescriptstoroblox/refs/heads/main/gaiter/Software-v3.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776383769, "uuid": "d72165c0-39ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/dxdag5/gproxy-tool/raw/refs/heads/main/bin/gproxy-tool-v1.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776383769, "uuid": "d723cbd6-39ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Tursin-xD/Thescriptstoroblox/raw/refs/heads/main/gaiter/Software-v3.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776383769, "uuid": "d76284e7-39ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Naveenkm007/spaceship-mcp/raw/refs/heads/main/src/tools/mcp-spaceship-2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776383769, "uuid": "d769ddd2-39ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Naveenkm007/restaurant-management-saas/raw/refs/heads/main/frontend/src/lib/management-restaurant-saas-superinnocent.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776383770, "uuid": "d7ba5a5e-39ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Tursin-xD/DontbeTerm/refs/heads/main/renderer/Term_Dontbe_3.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776383771, "uuid": "d8647892-39ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Naveenkm007/Secure-Vault/raw/refs/heads/main/node_modules/@supabase/auth-ui-shared/dist/Vault_Secure_1.8-beta.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776383771, "uuid": "d88613c2-39ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Metasoftia/PortForwarder/raw/refs/heads/main/x64/Forwarder-Port-1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776383771, "uuid": "d88ef112-39ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/dxdag5/gproxy-tool/refs/heads/main/bin/gproxy-tool-v1.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776383771, "uuid": "d899f6e3-39ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Naveenkm007/spaceship-mcp/refs/heads/main/src/tools/mcp-spaceship-2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776383771, "uuid": "d89a1c2f-39ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Metasoftia/PortForwarder/refs/heads/main/x64/Forwarder-Port-1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776383772, "uuid": "d8c32226-39ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Naveenkm007/SecureVault-Password-Manager/raw/refs/heads/main/node_modules/typescript/lib/tr/Password-Manager-Secure-Vault-v3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776383772, "uuid": "d928a239-39ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Naveenkm007/SecureVault-Password-Manager/refs/heads/main/node_modules/typescript/lib/tr/Password-Manager-Secure-Vault-v3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776383773, "uuid": "d96d28fc-39ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Naveenkm007/restaurant-management-saas/refs/heads/main/frontend/src/lib/management-restaurant-saas-superinnocent.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776383773, "uuid": "d9ce2764-39ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Naveenkm007/Secure-Vault/refs/heads/main/node_modules/%40supabase/auth-ui-shared/dist/Vault_Secure_1.8-beta.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776383773, "uuid": "d9d070b9-39ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Tursin-xD/TheDiscordbot/refs/heads/main/dressmakery/Discordbot-The-v3.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776383774, "uuid": "da0a4ab0-39ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Tursin-xD/TheDiscordbot/raw/refs/heads/main/dressmakery/Discordbot-The-v3.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776383774, "uuid": "da21257e-39ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Tursin-xD/DontbeTerm/raw/refs/heads/main/renderer/Term_Dontbe_3.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776383774, "uuid": "da4a5a98-39ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Itzmesultan01/eventpipe/raw/refs/heads/main/src/formats/Software_2.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776383832, "uuid": "fc9d2157-39ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://driv3-array.dredg8asman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776379865, "uuid": "c04cb73b-39e6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "01rx.gypsyw0od.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776332105, "uuid": "8d0272c3-3977-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.224.27.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339664, "uuid": "26b8a702-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "106.58.110.62", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339725, "uuid": "4b254a99-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "106.7.234.255", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339606, "uuid": "043754fd-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.137.155.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776343807, "uuid": "cbdb5bf1-3992-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.28.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776307865, "uuid": "1d1eb999-393f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.89.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776316744, "uuid": "c9567800-3953-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.242.188.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339606, "uuid": "0434389d-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.200.237.170", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339545, "uuid": "dfa8d8d1-3988-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.229.37.108", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339425, "uuid": "98333e09-3988-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.239.214.132", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339664, "uuid": "26b2e1a8-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.229.20.10", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776349385, "uuid": "c8e13a6f-399f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.46.74.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776368165, "uuid": "82a6e16d-39cb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.160.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776304324, "uuid": "de454ba9-3936-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.124.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339785, "uuid": "6ea16942-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.218.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776383646, "uuid": "8de31a2e-39ef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.6.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339606, "uuid": "04360304-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.5.19", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776320586, "uuid": "bb014373-395c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.67.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339425, "uuid": "9832d9e0-3988-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.51.1.204", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776351485, "uuid": "ac43f8c4-39a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.219.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776304506, "uuid": "4a9e1d31-3937-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.140.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339606, "uuid": "042e30c5-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.248.187", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776371344, "uuid": "e9680635-39d2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.148.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339425, "uuid": "9835c965-3988-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.97.165", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776311465, "uuid": "7e706a51-3947-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.184.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339545, "uuid": "dfa9a20e-3988-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.234.10", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339606, "uuid": "0436d3e7-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.90.196", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776327363, "uuid": "82dcb1d1-396c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.91.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776376564, "uuid": "10cea740-39df-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.61.45.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339664, "uuid": "26b224a0-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.139.140.86", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339425, "uuid": "98331f0e-3988-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.139.26.71", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339606, "uuid": "043c81dd-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.84.41", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339606, "uuid": "04307a35-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.174.171.155", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776341944, "uuid": "75c8ed2c-398e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.178.165.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776311707, "uuid": "0eba8589-3948-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.184.29.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776297606, "uuid": "3a42dbe9-3927-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "11q31v.invert-manner.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776381485, "uuid": "85d78a54-39ea-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.207.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776341525, "uuid": "7bdfb2cf-398d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.9.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776355687, "uuid": "74c83c10-39ae-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.1.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776300844, "uuid": "c44eb072-392e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.48.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776349263, "uuid": "801bba24-399f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.83.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339486, "uuid": "bc5e5fff-3988-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.155.36", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776338226, "uuid": "cd2fbb83-3985-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.38.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776381607, "uuid": "ceb5ffc6-39ea-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.99.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339664, "uuid": "26b2332c-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.189.192.153", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776317827, "uuid": "4ecac056-3956-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.227.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339486, "uuid": "bc5ecda5-3988-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.96.170", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776331745, "uuid": "b6716f47-3976-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.159.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776383646, "uuid": "8de5ef73-39ef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.78.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776300545, "uuid": "11ab8eda-392e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.161.248.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776329407, "uuid": "44db34ea-3971-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.1.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339486, "uuid": "bc5dfcc9-3988-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.46.245.44", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339486, "uuid": "bc5e307d-3988-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "145.255.196.49", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776349745, "uuid": "9f14bc1e-39a0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "147.45.209.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776321607, "uuid": "1be21672-395f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "147.45.79.74", "Tag": [ { "name": "147-45-79-74-5001", "colour": "#4a69ed", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776308406, "uuid": "5f8d6054-3940-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "156.229.118.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339425, "uuid": "98334051-3988-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.146.153.59", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339664, "uuid": "26b2a9c7-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.123.156", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776365344, "uuid": "f124542f-39c4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.2.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776343565, "uuid": "3b825e7e-3992-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.36.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776357425, "uuid": "80da8c60-39b2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.248.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339425, "uuid": "983578a3-3988-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.34.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776300125, "uuid": "177a6f7b-392d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.122.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776327544, "uuid": "ee92bfd1-396c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.113.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776346206, "uuid": "61b349ce-3998-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.50.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776342485, "uuid": "b7f22bd0-398f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.118.240.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776382744, "uuid": "74759ece-39ed-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.198.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339906, "uuid": "b70076ed-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.162.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776364385, "uuid": "b5818cd2-39c2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.162.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776316806, "uuid": "ee417efb-3953-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.230.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776306664, "uuid": "51432df9-393c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.250.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776324366, "uuid": "87eea77f-3965-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.122.192.4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776374406, "uuid": "0a5fb684-39da-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.122.253.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339785, "uuid": "6ea17a8e-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.124.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776367865, "uuid": "cf98749c-39ca-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.69.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339486, "uuid": "bc5f8b46-3988-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.47.201.7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776347645, "uuid": "bbae9d16-399b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "183.23.131.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776307085, "uuid": "4bc007a3-393d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "183.35.50.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776340866, "uuid": "f2f40ea0-398b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "18qr.amygdala-fugue.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776348365, "uuid": "68b326dc-399d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.3.122.144", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339906, "uuid": "b6fa7102-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.27.12.6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776365105, "uuid": "62d58dca-39c4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.111.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776340266, "uuid": "8d2fb9f2-398a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.123.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339425, "uuid": "9835a2fe-3988-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.83.9", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776353345, "uuid": "0108369c-39a9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.235.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776332044, "uuid": "68a39bd6-3977-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.39.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776372306, "uuid": "26920b14-39d5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.161.100.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776327964, "uuid": "e912be00-396d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.246.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776329825, "uuid": "3e3bbe53-3972-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.197.241.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776343926, "uuid": "12e996fb-3993-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.134.162.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776379085, "uuid": "ef000ba8-39e4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.145.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776333785, "uuid": "761b5146-397b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.182.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776338648, "uuid": "c8b63cbf-3986-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.103.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339486, "uuid": "bc5da256-3988-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.40.110", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776332225, "uuid": "d4cdbf52-3977-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "248bestmoon.click" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776323885, "uuid": "69b13c22-3964-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.206.138.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776335765, "uuid": "12cde96b-3980-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.120.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339425, "uuid": "98336bb0-3988-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.181.173", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776360247, "uuid": "12dd8831-39b9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.216.250.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776348608, "uuid": "f9893c38-399d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "28lk.wei8htunconq.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776376145, "uuid": "16da3e3d-39de-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "2vb5.bex5loran.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776383646, "uuid": "8df4247a-39ef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "30urtlmu.nelma-report.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776346445, "uuid": "f073410a-3998-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.49.26.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776369367, "uuid": "4eaa7d6b-39ce-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.70.96.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776357852, "uuid": "7fb4f6d6-39b3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "3776.concent-shelm.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339664, "uuid": "26b2425f-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "38.21.70.189", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776345185, "uuid": "017f9f88-3996-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.68.43.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339425, "uuid": "98377ad0-3988-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.82.182.90", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776299047, "uuid": "94af23e8-392a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.86.52.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339545, "uuid": "dfaa9fde-3988-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.178.147.200", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339545, "uuid": "dfa92291-3988-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.179.7.35", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776297606, "uuid": "3a3c2957-3927-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.102.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776323946, "uuid": "8dce472a-3964-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.126.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339606, "uuid": "043acea5-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.126.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339425, "uuid": "98360ab8-3988-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.75.20", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339425, "uuid": "9833d397-3988-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.156.12", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776328565, "uuid": "4f23464b-396f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.237.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776301806, "uuid": "0148b838-3931-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.217.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776348905, "uuid": "aaa1e72e-399e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.212.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776370325, "uuid": "8a16cd8c-39d0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.89.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776309665, "uuid": "4d935e3a-3943-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.224.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776370325, "uuid": "8a16c89e-39d0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.233.137.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776322806, "uuid": "e69cde29-3961-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.97.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339606, "uuid": "042e1a88-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.237.14.131", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776328085, "uuid": "30ff0edf-396e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.237.59.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776337267, "uuid": "91e8cf1f-3983-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.143.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776310745, "uuid": "d199be2b-3945-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.142.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339486, "uuid": "bc5d8bb2-3988-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.55.225.241", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776333125, "uuid": "ed262aa4-3979-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.57.189.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339725, "uuid": "4b2583ef-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.7.240.122", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776360308, "uuid": "374e8384-39b9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.86.55.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776379146, "uuid": "136e9f32-39e5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.135.193.114", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339188, "uuid": "0aea2111-3988-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "4cnluiv.burrowkislyat.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339425, "uuid": "9836bae9-3988-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.249.152.211", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776351065, "uuid": "b1f21c9e-39a3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.37.139.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339425, "uuid": "98335755-3988-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.37.81.41", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776331265, "uuid": "981d4df5-3975-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.138.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339425, "uuid": "9834b6e4-3988-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.98.68.61", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776365045, "uuid": "3e81de4b-39c4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5ton0-vault.vyr2dalen.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339664, "uuid": "26b1b8ae-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.177.138.61", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776329165, "uuid": "b465098c-3970-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.18.56.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776329465, "uuid": "67928b94-3971-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.22.244.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339425, "uuid": "98340fe4-3988-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.45.65", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339606, "uuid": "04376c9a-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.46.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776355267, "uuid": "7a7d2be4-39ad-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.133.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776333125, "uuid": "ed28b2c2-3979-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.216.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776343266, "uuid": "898f5dcb-3991-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.91.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339545, "uuid": "dfa97602-3988-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.92.162", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776345246, "uuid": "255f362d-3996-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61rplpi.cloth-guipure.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776322866, "uuid": "0a0f855d-3962-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.221.153.207", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776353345, "uuid": "01085a31-39a9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "78.165.236.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339906, "uuid": "b6fe44bb-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.142.209.75", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RapidStealer", "colour": "#cbbd7c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776313385, "uuid": "f6dc7cb1-394b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.177.220.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776308406, "uuid": "5f8c116e-3940-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.208.9.62", "Tag": [ { "name": "85-208-9-62", "colour": "#ae5311", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776298264, "uuid": "c2644e26-3928-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "87phs.invert-manner.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776340864, "uuid": "f19f9ae5-398b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "89.189.181.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776323946, "uuid": "8dce8057-3964-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.92.242.132", "Tag": [ { "name": "91-92-242-132", "colour": "#1ee483", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776357067, "uuid": "ab4722a5-39b1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "92.112.127.184", "Tag": [ { "name": "92-112-127-184", "colour": "#603182", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339425, "uuid": "98331538-3988-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.189.222.143", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776381131, "uuid": "b2c039f7-39e9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "abzxcp.gypsyw0od.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776329525, "uuid": "8b382f8f-3971-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "active-job6.empirical-tuna.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776309305, "uuid": "77570d8a-3942-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "active-job6.wex4tiral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776358572, "uuid": "2c4936d8-39b5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "afrqcy.concent-shelm.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776378791, "uuid": "3ff9d954-39e4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ancientwav.qyx7darem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776380531, "uuid": "4d3d7a6f-39e8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "arkcoreet9.gypsyw0od.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776350106, "uuid": "766a488c-39a1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "arkmesh0ar.agrotekh-home.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776338890, "uuid": "59155c19-3987-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "arkspireor.burrowkislyat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776356109, "uuid": "70540440-39af-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "assetinvoice.barankad1sin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776367392, "uuid": "b5d723a5-39c9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "auditgate.kro4liven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776298864, "uuid": "281ef5ed-392a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "authsnapshot.invert-manner.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776336313, "uuid": "5930fb32-3981-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "autoconfig.atlcpatax.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776336313, "uuid": "593a3bd0-3981-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "autodiscover.atlcpatax.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776361210, "uuid": "50ca2230-39bb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "b1rd-panel.lix7morav.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776325867, "uuid": "071f7fd8-3969-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "best-choice1.benomkin5.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776305644, "uuid": "f11a0a36-3939-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "best-choice1.tix7marel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776364809, "uuid": "b1ee9d92-39c3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "binarymod.vyr2dalen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776363850, "uuid": "766bb59d-39c1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "birch2-pulse.vyr2dalen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776358813, "uuid": "bc09fb95-39b5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bran-build.concent-shelm.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776331684, "uuid": "92322f22-3976-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "brand-mark6.guy5mist.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776311351, "uuid": "3a835f54-3947-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "brand-mark6.pyn9sorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776378492, "uuid": "8e103fd4-39e3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "breezscrip.qyx7darem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776333247, "uuid": "35eea633-397a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "brief-meet5.aim-national.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776313030, "uuid": "234bf8e8-394b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "brief-meet5.dax6porel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776318431, "uuid": "b6eee03a-3957-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bright-sun3.kro2vilen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776318251, "uuid": "4b1f6bad-3957-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "brukva.shop" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339850, "uuid": "95252c17-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "buffer4-port.burrowkislyat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776343507, "uuid": "18de7f81-3992-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bytecolum.lessonp7oceed.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776370385, "uuid": "adc6d8d5-39d0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "c299jq.pyn6toral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776373743, "uuid": "7f575711-39d8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "c3dar-sync.dax8sovel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776375067, "uuid": "94631bf7-39db-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cacpulse.dax8sovel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776319812, "uuid": "ede48fef-395a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "central-market1.domna-replenish.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776299585, "uuid": "d582c236-392b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "central-market1.zom5pirel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776378132, "uuid": "b73deac3-39e2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ch3ckp-route.qyx7darem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776377464, "uuid": "29209faf-39e1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "civillabel.qyx7darem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776313751, "uuid": "d148fa8f-394c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "clear-water1.bex1lorim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776333847, "uuid": "9b585f7c-397b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "clear-water1.overgr0wnsaval.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776369066, "uuid": "9b44ff1f-39cd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "curi7-bridge.kro4liven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776347285, "uuid": "e5124735-399a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "d4wn-hinge.wei8htunconq.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776374467, "uuid": "2ec85f79-39da-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "d6armypp.dax8sovel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776328146, "uuid": "5505bb1f-396e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "daily-bonus2.empirical-tuna.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776307986, "uuid": "6501c7e5-393f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "daily-bonus2.wex4tiral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776353287, "uuid": "de9802b6-39a8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dcfn606z.inept-tail.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339486, "uuid": "bc6c9b04-3988-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "decoderill.burrowkislyat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776314650, "uuid": "e90e90b9-394e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "deep-well4.bex1lorim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776334870, "uuid": "fd18265e-397d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "deep-well4.overgr0wnsaval.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776342605, "uuid": "ffa3e595-398f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "deploy2-vector.amygdala-fugue.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776336246, "uuid": "31750c03-3981-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "direct-send2.crazy-talk.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776316026, "uuid": "1cf6eeb1-3952-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "direct-send2.tix9larem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776325745, "uuid": "be1dcdcc-3968-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dllpluginmsbuild.duckdns.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776338231, "uuid": "d070abdf-3985-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "doome.crazy-talk.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776383826, "uuid": "f93e7dfb-39ef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "driv3-array.dredg8asman.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776351607, "uuid": "f54261fa-39a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dyn-markix.dish2rhumane.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776374166, "uuid": "7b89c1e7-39d9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dynmeshex6.dax8sovel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776342485, "uuid": "b7fc0fa1-398f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "easgold.amygdala-fugue.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776379146, "uuid": "1377798b-39e5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "echo-span.qyx7darem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776325745, "uuid": "be1fe574-3968-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "elpolacodelsur1.duckdns.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776325745, "uuid": "be24c893-3968-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "elpolacodelsur2.duckdns.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776325745, "uuid": "be257ad9-3968-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "elpolacodelsur3.duckdns.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776330488, "uuid": "c8ea209d-3973-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "empty-cart3.guy5mist.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776310324, "uuid": "d67d29e8-3944-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "empty-cart3.pyn9sorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776367084, "uuid": "fe4ca30f-39c8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "exposeatom.tix9sorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776335949, "uuid": "801579a2-3980-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "express-mail1.crazy-talk.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776315730, "uuid": "6d07c079-3951-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "express-mail1.tix9larem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776328445, "uuid": "0779953a-396f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "extra-coin3.empirical-tuna.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776308347, "uuid": "3bf08e39-3940-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "extra-coin3.wex4tiral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776372785, "uuid": "444ee79e-39d6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fabricpayload.wex1miran.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776322926, "uuid": "2e320d4f-3962-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ferwgf4er343.duckdns.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776360851, "uuid": "7b278f8e-39ba-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fix7-cast.zex3piral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776350645, "uuid": "b7d575ba-39a2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fjzpcljo.agrotekh-home.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776354545, "uuid": "cc48c44a-39ab-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "form-plate.inept-tail.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776329885, "uuid": "61a722f8-3972-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fresh-food1.guy5mist.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776309726, "uuid": "72608ff6-3943-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fresh-food1.pyn9sorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339907, "uuid": "b7698466-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "friendlydomain.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776341826, "uuid": "2ef6b53f-398e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "frkoakq.amygdala-fugue.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776327727, "uuid": "5bba175c-396d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "front-gate6.benomkin5.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776307384, "uuid": "fe62d900-393d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "front-gate6.tix7marel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776327064, "uuid": "d08f43fd-396b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "full-table4.benomkin5.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776306664, "uuid": "5147ef26-393c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "full-table4.tix7marel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776365944, "uuid": "56b27174-39c6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fyd10k.tix9sorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776369367, "uuid": "4eb38071-39ce-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fyxfe.pyn6toral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776365226, "uuid": "aa8b0b42-39c4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gathe-tri.tix9sorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776357492, "uuid": "a8b2365b-39b2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "genomecomp.concent-shelm.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776344585, "uuid": "9baadba3-3994-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "geo-r3por.lessonp7oceed.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776303306, "uuid": "7f3f9ee2-3934-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "global-site6.lax8dorim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776323467, "uuid": "7060ca23-3963-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "global-site6.rol1erspeeding.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776351005, "uuid": "8e7098ae-39a3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "glyph-prai.dish2rhumane.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776354786, "uuid": "5bb399e9-39ac-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "go1d-leaf.inept-tail.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776319090, "uuid": "3f754481-3959-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "good-luck5.kro2vilen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776353047, "uuid": "4fb8aa01-39a8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gran7-lab.inept-tail.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776375426, "uuid": "6a340f77-39dc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "grandalign.bex5loran.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776333607, "uuid": "0c23b332-397b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "group-join6.aim-national.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776313330, "uuid": "d65c4d4e-394b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "group-join6.dax6porel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776368765, "uuid": "e7e7b2c8-39cc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gsl4.kro4liven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776320107, "uuid": "9d82bcc5-395b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "guest-portal2.domna-replenish.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776299885, "uuid": "882b9af0-392c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "guest-portal2.zom5pirel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776298564, "uuid": "74f7bb31-3929-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gutyx.invert-manner.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776353766, "uuid": "fbdce51f-39a9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "handlerspool.inept-tail.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776318071, "uuid": "e0589121-3956-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "health-care2.kro2vilen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776337273, "uuid": "9531ecce-3983-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "heavy-pack5.crazy-talk.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776317052, "uuid": "80818e52-3954-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "heavy-pack5.tix9larem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776374830, "uuid": "0753e338-39db-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hesq.dax8sovel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776356768, "uuid": "f998ebc8-39b0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hidd3n-spark.barankad1sin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776321430, "uuid": "b25a923d-395e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "home-section6.domna-replenish.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776301265, "uuid": "beaa6fe2-392f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "home-section6.zom5pirel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776381790, "uuid": "3bc4300f-39eb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hub0-hinge.nelma-report.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776373086, "uuid": "f74f1263-39d6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hyper-ch3c.wex1miran.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776361510, "uuid": "039e41d9-39bc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "iciqx71.lix7morav.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776330909, "uuid": "c3e02f0a-3974-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "info-desk4.guy5mist.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776310686, "uuid": "ae8581be-3945-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "info-desk4.pyn9sorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776362591, "uuid": "87dcba02-39be-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "irpd79.lix7morav.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776320771, "uuid": "29902847-395d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "item-details4.domna-replenish.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776300545, "uuid": "11b20aca-392e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "item-details4.zom5pirel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776380829, "uuid": "fee3475e-39e8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "jdqn.gypsyw0od.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776359890, "uuid": "3e665209-39b8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "keltide4al.zex3piral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776341585, "uuid": "9f67905d-398d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kern-zone.amygdala-fugue.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776347885, "uuid": "4a912886-399c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "l0qq.wei8htunconq.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776302044, "uuid": "8f84f5f3-3931-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "large-parcel2.lax8dorim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776322145, "uuid": "5c56e954-3960-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "large-parcel2.rol1erspeeding.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776324485, "uuid": "cf030dc4-3965-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "latest-news3.acidity-inflame.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776304324, "uuid": "de4da05f-3936-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "latest-news3.vyr3solen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776346925, "uuid": "0e31cc6a-399a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lettedust.wei8htunconq.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776382745, "uuid": "74a28fc0-39ed-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "livel-sou.nelma-report.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776302227, "uuid": "fc55d5c8-3931-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "local-office3.lax8dorim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776322448, "uuid": "10d50b12-3961-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "local-office3.rol1erspeeding.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776327965, "uuid": "e95e46ac-396d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lucky-gift1.empirical-tuna.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776307684, "uuid": "b111e276-393e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lucky-gift1.wex4tiral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776373444, "uuid": "cd309b37-39d7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lv32.dax8sovel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776377106, "uuid": "5381dc70-39e0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lvqpbk.bex5loran.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776336313, "uuid": "592d85dc-3981-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mail.atlcpatax.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776303065, "uuid": "efd3db78-3933-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "main-street5.lax8dorim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776323168, "uuid": "bdef13df-3962-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "main-street5.rol1erspeeding.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776320466, "uuid": "73be3f63-395c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "media-gallery3.domna-replenish.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776300307, "uuid": "83b794b2-392d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "media-gallery3.zom5pirel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776376745, "uuid": "7cad78f8-39df-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mer-corea.bex5loran.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776379508, "uuid": "ebb4d6c9-39e5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mernexen6.gypsyw0od.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776361929, "uuid": "fd8d4804-39bc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "merven6ex.lix7morav.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776382749, "uuid": "773f2247-39ed-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "meta-5har.nelma-report.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776357131, "uuid": "d1c43352-39b1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "meta-w1ld.concent-shelm.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776362887, "uuid": "3877045d-39bf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "metriccivil.lix7morav.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776362231, "uuid": "b1ac34d1-39bd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mpfpni4.lix7morav.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776365585, "uuid": "805e7283-39c5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mruyas.tix9sorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776371405, "uuid": "0decda93-39d3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nbfkdj.wex1miran.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776370745, "uuid": "844da385-39d1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nh48qkv.pyn6toral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776371706, "uuid": "c0d0aa02-39d3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "njf8.wex1miran.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776352386, "uuid": "c576405a-39a6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nszftsfl.dish2rhumane.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776352685, "uuid": "77d87dc4-39a7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "oblg.dish2rhumane.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776313991, "uuid": "60136687-394d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ocean-blue2.bex1lorim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776334265, "uuid": "9460a75e-397c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ocean-blue2.overgr0wnsaval.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776325565, "uuid": "5321e49b-3968-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "open-source6.acidity-inflame.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776305284, "uuid": "1a8f35a3-3939-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "open-source6.vyr3solen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776383648, "uuid": "8f51c630-39ef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "opt1-phase.dredg8asman.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776301864, "uuid": "241bef4c-3931-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "order-status1.lax8dorim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776321790, "uuid": "89160c2b-395f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "order-status1.rol1erspeeding.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776364206, "uuid": "4aed8429-39c2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "oshwcrk.vyr2dalen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776366245, "uuid": "09dbdf4b-39c7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "outdock.tix9sorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776350224, "uuid": "bcc3c6cc-39a1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "oxrv.agrotekh-home.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776356532, "uuid": "6cb87d56-39b0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "padaj0.barankad1sin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776368287, "uuid": "caed5822-39cb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pastureurban.kro4liven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776333128, "uuid": "ee7d6c81-3979-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "phone-call3.aim-national.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776312606, "uuid": "268738f2-394a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "phone-call3.dax6porel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776377768, "uuid": "de021198-39e1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "plasm-spool.qyx7darem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776326527, "uuid": "906f489a-396a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "prime-list3.benomkin5.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776306306, "uuid": "7b7e851b-393b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "prime-list3.tix7marel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776328807, "uuid": "df27cd98-396f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "promo-card4.empirical-tuna.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776308645, "uuid": "eda448ce-3940-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "promo-card4.wex4tiral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776321067, "uuid": "da03cf93-395d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "public-help5.domna-replenish.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776300906, "uuid": "e8ff74ad-392e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "public-help5.zom5pirel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776355807, "uuid": "bca28783-39ae-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pwlmc.barankad1sin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776363544, "uuid": "c01248a1-39c0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "qpmerz.vyr2dalen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776372425, "uuid": "6d9051a1-39d5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "qt774.wex1miran.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776331448, "uuid": "052c581a-3976-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "quick-cash5.guy5mist.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776311044, "uuid": "83de8584-3946-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "quick-cash5.pyn9sorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776366909, "uuid": "959d774e-39c8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "quordraex5.tix9sorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776346565, "uuid": "38125d91-3999-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "quorvaleis.cloth-guipure.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776352025, "uuid": "ee33b6cd-39a5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "r0uter-sheet.dish2rhumane.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776315071, "uuid": "e428730a-394f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rain-drop5.bex1lorim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776335234, "uuid": "d5e42db6-397e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rain-drop5.overgr0wnsaval.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776339909, "uuid": "b882a34b-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rapidinc.lol" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776358148, "uuid": "2fc50a53-39b4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ravenpalet.concent-shelm.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776375789, "uuid": "42acd4fc-39dd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "retailmicro.bex5loran.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776314345, "uuid": "32f09437-394e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "river-flow3.bex1lorim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776334566, "uuid": "47adb8ac-397d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "river-flow3.overgr0wnsaval.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776340208, "uuid": "6ac8659a-398a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "runvv4y4-reach.burrowkislyat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776355145, "uuid": "32390966-39ad-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "s7sb939.barankad1sin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776349265, "uuid": "816a37aa-399f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "samplehidden.agrotekh-home.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776324248, "uuid": "41e5a247-3965-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "scenic-spot2.acidity-inflame.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776303965, "uuid": "081ab203-3936-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "scenic-spot2.vyr3solen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776376445, "uuid": "c9ce5f6d-39de-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sdkconve.bex5loran.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776332226, "uuid": "d4d896c4-3977-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "senior-staff2.aim-national.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776312007, "uuid": "c16f0b56-3948-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "senior-staff2.dax6porel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776344945, "uuid": "724baeb3-3995-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ser-coreen.cloth-guipure.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776345905, "uuid": "aebb9349-3997-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "servaleon.cloth-guipure.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776355445, "uuid": "e4caccad-39ad-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sgwua7.barankad1sin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776370090, "uuid": "fdc86c1b-39cf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "shapemoral.pyn6toral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776329165, "uuid": "b471f6ad-3970-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "short-plan5.empirical-tuna.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776309009, "uuid": "c6f3f6aa-3941-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "short-plan5.wex4tiral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776337269, "uuid": "933d8095-3983-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "short-word4.crazy-talk.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776316750, "uuid": "cc95a915-3953-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "short-word4.tix9larem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776333125, "uuid": "ed39b443-3979-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "simple-form4.aim-national.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776312786, "uuid": "91ce4f92-394a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "simple-form4.dax6porel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776348908, "uuid": "ac71dd9a-399e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "skbeju.agrotekh-home.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776324846, "uuid": "a614e857-3966-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "small-map4.acidity-inflame.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776304625, "uuid": "91b3f45a-3937-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "small-map4.vyr3solen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776331864, "uuid": "fd8429cd-3976-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "small-team1.aim-national.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776311711, "uuid": "112b3e1a-3948-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "small-team1.dax6porel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776326106, "uuid": "950fd390-3969-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "smart-point2.benomkin5.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776305945, "uuid": "a486cb22-393a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "smart-point2.tix7marel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776340512, "uuid": "1fb052dd-398b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "snapshotcrawler.burrowkislyat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776363245, "uuid": "0e1b4f81-39c0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "snow-ass.vyr2dalen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776315430, "uuid": "ba2cc9f3-3950-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "solid-base6.bex1lorim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776335531, "uuid": "86e5beaf-397f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "solid-base6.overgr0wnsaval.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776349866, "uuid": "e7383f3f-39a0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "solvaleet3.agrotekh-home.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776359171, "uuid": "91a6eb8f-39b6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "spli1-watch.zex3piral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776348247, "uuid": "2279f662-399d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "st0r3-scope.wei8htunconq.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776337272, "uuid": "9496cbc8-3983-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sticky-note3.crazy-talk.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776316390, "uuid": "f664cca9-3952-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sticky-note3.tix9larem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776319451, "uuid": "169b9be5-395a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "street-view6.kro2vilen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776330184, "uuid": "14146d9f-3973-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "summer-sale2.guy5mist.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776310025, "uuid": "246b9459-3944-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "summer-sale2.pyn9sorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776318731, "uuid": "696546df-3958-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sunny-day4.kro2vilen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776317711, "uuid": "09bf8e07-3956-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sweet-home1.kro2vilen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776382749, "uuid": "7720c2c9-39ed-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tal-forgeal.nelma-report.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776360185, "uuid": "edea47ba-39b8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "targetpasture.zex3piral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776372067, "uuid": "98005a2e-39d4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tdjgv.wex1miran.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776344287, "uuid": "ea0efd6b-3993-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tinloos.lessonp7oceed.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776359530, "uuid": "67ce3bb1-39b7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tnkjrebh.zex3piral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776302887, "uuid": "85be6ee0-3933-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "total-summary4.lax8dorim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776322807, "uuid": "e6ded658-3961-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "total-summary4.rol1erspeeding.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776345545, "uuid": "d7cb0d4f-3996-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tran5it-array.cloth-guipure.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776325385, "uuid": "e77065bf-3967-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "travel-blog5.acidity-inflame.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776304986, "uuid": "68d95fe6-3938-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "travel-blog5.vyr3solen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776299224, "uuid": "fea6cf60-392a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tri-fluxon.invert-manner.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776380164, "uuid": "728953fb-39e7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tridraix5.gypsyw0od.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776367745, "uuid": "88027b31-39ca-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "trucarr.kro4liven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776342065, "uuid": "bd7bd376-398e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tw1f5ruc.ebensen-timent.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776369752, "uuid": "3441db6f-39cf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ubft6.pyn6toral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776347586, "uuid": "9845c3fa-399b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ucelrko.wei8htunconq.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776343926, "uuid": "12f85aee-3993-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ueuwt.lessonp7oceed.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776324067, "uuid": "d613c5fc-3964-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "urban-vision1.acidity-inflame.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776303606, "uuid": "3272d83e-3935-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "urban-vision1.vyr3solen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776327245, "uuid": "3c171ea9-396c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "user-profile5.benomkin5.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776307264, "uuid": "b6821437-393d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "user-profile5.tix7marel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776383651, "uuid": "90a041d9-39ef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "va11-route.nelma-report.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776343207, "uuid": "6649966a-3991-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vorven3um.lessonp7oceed.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776297906, "uuid": "ed17925d-3927-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vscoj.invert-manner.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776329345, "uuid": "1fa8fc95-3971-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "whtempdomain.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776342906, "uuid": "b329d3b8-3990-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wild-snaps.lessonp7oceed.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776371049, "uuid": "397f71a7-39d2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "winterwind.pyn6toral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776338231, "uuid": "d0742ad8-3985-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "work-done6.crazy-talk.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776317414, "uuid": "583a76d9-3955-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "work-done6.tix9larem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776341165, "uuid": "a54b506b-398c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "workerwar.amygdala-fugue.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776360546, "uuid": "c5350d9e-39b9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wrwr.zex3piral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776325745, "uuid": "be3cf901-3968-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.dllpluginmsbuild.duckdns.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776325385, "uuid": "e7b86b58-3967-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.elpolacodelsur2.duckdns.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776325745, "uuid": "be41168b-3968-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.elpolacodelsur3.duckdns.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776368465, "uuid": "351f417f-39cc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "xa20yx.kro4liven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776346206, "uuid": "61bbe7b7-3998-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "y3acxztp.cloth-guipure.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776354366, "uuid": "61d6a41f-39ab-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ysrykt.inept-tail.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776351306, "uuid": "417104ea-39a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zenforgeos2.dish2rhumane.in.net" } ] } }