{ "Event": { "published": true, "date": "2026-04-13", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-04-13", "timestamp": 1776125724, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "7cab67d6-d76d-4566-afa2-c36ea276a7dc", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1776041721, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776041721, "uuid": "ca476fdd-b985-4552-9d81-9d89cb54bd72", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776041721, "uuid": "c0923f99-5e4f-42b1-9231-4cd43648d9b3", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776041721, "uuid": "696f6b91-23ed-4c3e-a48c-5c7ab5323a2e", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776041721, "uuid": "ca1db252-3d31-478b-b730-ce9ab89794cd", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776041721, "uuid": "cc5633d9-301c-4513-a928-c7b031d3b06c", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1776042559, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776042559, "uuid": "a03f1229-32e2-48a4-82c3-756b4aaab5a4", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776042559, "uuid": "8be823ba-7848-4a73-a9b4-3ec1883906de", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776042559, "uuid": "c82854ca-4219-49b3-b064-7f062067f44f", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776042559, "uuid": "387b003f-2f83-4964-b7f1-63e4da41fd32", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776042559, "uuid": "7bb52bf1-67da-4402-b727-e426cad89ae2", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776043096, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776043096, "uuid": "4f9cae8b-552c-4c4c-9e33-3e307832284b", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776043096, "uuid": "beb06694-c34a-4a8e-afb3-c5077c87dae9", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776043096, "uuid": "07ba7436-304b-4e29-9f6e-dba1db630ad5", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776043096, "uuid": "1dca407b-3c1d-48a4-9c1c-24ba7bb04032", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776043096, "uuid": "cb26f1a9-a9ff-4868-9da1-a0f35e49975d", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776045624, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776045624, "uuid": "11363cce-1554-4e22-9071-6df7be4d8bcc", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776045624, "uuid": "ee98bffd-ad75-459f-afae-6fd154517476", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776045624, "uuid": "bf7a0727-88af-4098-844c-5fdc590349aa", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776045624, "uuid": "d446b9cf-5365-4865-901f-c456060bcc25", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776045624, "uuid": "87374163-7431-4ecf-b207-2bc4a6a7b2c6", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8afe498e-36e1-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776047775, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776047775, "uuid": "9c14af61-23c2-46aa-b975-c1ff45c15602", "comment": "Malware payload", "value": "e5ba5c77287071bb823c23107e9571b1", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776047775, "uuid": "f47bd9af-a0b5-4d01-b268-33f1c27f3bf3", "comment": "Malware payload", "value": "c2569d8726e7f74f8c7b8679350e42979e5259334557316e85fec3cc2d5fb16b", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776047775, "uuid": "a710947b-5930-4ad9-a551-e83a3448a848", "value": "T13333F885FD15971BC7E272FBE788038D3B3A1F6CA7E6321659316E9123C5AE0253A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776047775, "uuid": "dea8a67f-cd3c-4085-b287-309198da8d2f", "value": "1536:kQlapLajBNuYssqXNMrnKaj8tUglxpNG:tlapOss+N+KaTgZNG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776047775, "uuid": "08669a3d-34ef-440d-9166-d570b16d6e5d", "value": 50192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776047775, "uuid": "24b7f35c-60c7-4fa9-b840-931496079b1e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b0224cf-36e1-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776047775, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776047775, "uuid": "ced2b228-8035-4e6c-b99e-425d7a9cd166", "comment": "Malware payload", "value": "78f701b252e945bdeaa180cb9ecdebfb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776047775, "uuid": "1c7cf3a6-3cd9-4a07-908f-06b4d8900650", "comment": "Malware payload", "value": "a5b1aa2f57ad0b184fa69a54ac579bfc4417004e74bdb8bfdce500ea930c8827", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776047775, "uuid": "7f0c8747-91be-42ac-b8b1-bfcd354e2009", "value": "T1F673732AAB21DFBBDC5FCD7305E94502208DA55A02D92B6FB1B0D95CE38AC4F44E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776047775, "uuid": "4b07cf90-c663-4458-b745-c5125283afde", "value": "768:ASOGbJ51oZqeso+/eQDGsxTXawKuF85BXi/wBcaeSeXT34ENIBpz0:vv1vesoORD7Z7ypcanAT3v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776047775, "uuid": "5f96f8c4-16d0-4eb4-89be-3cdc163a2526", "value": 76092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776047775, "uuid": "ebc68a8c-11c3-4737-aad1-b3c2a31971e0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b034026-36e1-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776047775, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776047775, "uuid": "92335895-8469-4cf3-9151-fb2683c9d0ba", "comment": "Malware payload", "value": "f0340815728aa3f1ca552139824f207b", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776047775, "uuid": "35091e83-9eab-49f9-b06a-c686ce0d757a", "comment": "Malware payload", "value": "c28a374366e78132a6a53fa288fa603c881497f2807f9314866369f2b03500e7", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776047775, "uuid": "785f9219-e2d8-4b31-8a6b-9294047073f7", "value": "T15A531B49E9515B19C7E232FFFB99128E33131FACE3EA31258D30AFA023C56D619355", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776047775, "uuid": "c015ee57-b577-499b-8ee7-fe62da9d928e", "value": "1536:HNnUFUUgimS+QttaD73LNIHiQTNkBQYIL5IYGhn2:qFUUgicsakTNkBQYILaZhn2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776047775, "uuid": "c1a882f0-b587-4e70-b20b-7d93f8601c4b", "value": 65464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776047775, "uuid": "b411066e-d178-43fc-9085-d0c1f48526a5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b0dc7b6-36e1-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776047775, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776047775, "uuid": "6571bf26-4ec7-4045-9491-15a201e8ac58", "comment": "Malware payload", "value": "0342f693c43707bb3ca09c6ab48e6e4f", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776047775, "uuid": "4081ce33-419c-40ca-a6fa-a0c78bb6a969", "comment": "Malware payload", "value": "be82c8c77e6e3f64ece7df84511c4dbb60c80244ec03255ab462ff2300180ba9", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776047775, "uuid": "3a239e40-cf12-42f3-aeb7-bdbfcdc5e215", "value": "T166F039EAF00512CF812DEE0420B2CD8C7153C2F062A98E1B6EC9283A80CFF02B821E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776047775, "uuid": "b38930b4-fd5c-4de6-b637-ad820fb086e7", "value": "12:W28aUJ5B5jNITTg7kgkSEJgvnZ35XEvCHQgjKgRO:Wldf5jNIo7kgrEyV52CHpKgk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776047775, "uuid": "9b16d7a1-3d72-440e-8c60-426f96e10ac8", "value": 485, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776047775, "uuid": "b612faae-64bc-486c-a006-452ef5e73a18", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d866475-36e1-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776047779, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776047779, "uuid": "f41fc089-935b-43fa-a04f-a1bcdd0f66d1", "comment": "Malware payload", "value": "73f5212225fae000f9cdb331f63b847c", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776047779, "uuid": "fcc87543-bb35-4e24-939f-3e6261e15f1f", "comment": "Malware payload", "value": "816aeeb87ff5d80be69f457b0b6e350651d0dbd99857fa61dca18fbb4894f612", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776047779, "uuid": "10c983e2-5478-4883-af19-088f6d691f99", "value": "T17D730949E9516B19C6E232FFFB8E128E33535FA8E3F931118D315F6123C5A9B0A751", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776047779, "uuid": "01314e92-20b3-473f-a3c1-ad4421e16cdb", "value": "1536:PFn2k84AVSCFniU3aXT+biuXrLVl0y9M/iRrv812gYe5uG23:Ek8XV/iU3aXT+biE/MMv812g9uG23", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776047779, "uuid": "6db060b4-78c3-4e89-b047-8a102952d271", "value": 78180, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776047779, "uuid": "9a39d4b4-a8de-4b87-b8ce-77bf475546d9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb69a3fd-36e2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776048312, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048312, "uuid": "e5f5cb1b-6733-4221-bd16-d20a3af5e289", "comment": "Malware payload", "value": "e8837605776bf95c40a97d71371c682a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048312, "uuid": "d00eec29-ff8a-4e1f-aa18-e378cbc00128", "comment": "Malware payload", "value": "c02e191211ab121a5b04fb0f5c9b4ab1df8ab11d97c478e5abe07cbe44bf72a9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048312, "uuid": "b88a7437-a991-48b0-8373-fa7e88a73ada", "value": "T1F68533858FEF634C19F11D8E716C987A9B54CB90DE4E87961D0EC386AFC674C63226", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048312, "uuid": "49842ee0-d5bf-4932-b563-bf1669e34126", "value": "24576:62vGBwq/9WXiAbd9bXLqW6XW04oaez+CqTEXmjEOTATAGwBGBRz37CKCY30Q0+j:/qAFbdc7pl+CKZQk4p7CKz3j0+j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776048312, "uuid": "cbc00830-5ac8-46d5-ba10-a45198e19621", "value": 1739052, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048312, "uuid": "8d47120a-d5c5-4892-b919-a14062b24b42", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb6f4226-36e2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776048312, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048312, "uuid": "06ed2af8-3011-4c00-97c7-d93b5bc07e11", "comment": "Malware payload", "value": "81f15dd9d2a733da8f6d6503e41b9bb2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048312, "uuid": "9ea2bb24-99af-4b35-a1d2-d3424ff71af2", "comment": "Malware payload", "value": "b93c618ad50e352fb0af396beacb05064ddced1f932924a6f13aca387145a4dd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048312, "uuid": "2ed3b3bf-3f9b-4068-8cfa-f238d26f1263", "value": "T1937533C065F4F12AE9086E7D8F43886D26BEF1FF35D18E1050D192EB29721E86D475", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048312, "uuid": "d1b0d808-eab8-4555-bd67-8755bd2abeb1", "value": "24576:LtXhU0uQJLUDbKc1haqAqrSJq//H7Tlg7CbGQdVxMor2UzScxY+ethu7vM3N:BBzJ+eqNrSJq/vbXUU2Ex6Gk3N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776048312, "uuid": "17c84cda-5669-42b1-a402-11945984e3e8", "value": 1681924, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048312, "uuid": "951765ce-7137-4ce9-a455-4af344077b2d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb6f649a-36e2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776048312, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048312, "uuid": "c2690fea-c0fd-4e6c-8e69-8bedfdaf7058", "comment": "Malware payload", "value": "ea3d3d4e3edab4092378cab72a935154", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048312, "uuid": "32ce8387-13f9-4235-baca-e7246363d73a", "comment": "Malware payload", "value": "d4cf0ea01fd70016f760020f05890a33934c600030d93574dea316ec68667457", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048312, "uuid": "d7c964c8-e1b5-4d25-abba-557e21ba243f", "value": "T1EB75338EEE9F86D0D4E4D906E4F2EAA544C745368859221EBFFDB1B12D3381B372C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048312, "uuid": "64ce1c32-57ad-4726-b78e-cf8111cd5fda", "value": "49152:p3Ot9aRb6/CYiXBcVxgy4NdcvbKYeo76grkgen:xOt9kSniR8gy4Lcf7tr/k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776048312, "uuid": "09fa082a-ac6c-48b7-8b86-b2e7e11cb5f4", "value": 1693836, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048312, "uuid": "1cbc68a1-b253-4c3e-9f3a-f4d3bda8513a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb7026e0-36e2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776048312, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048312, "uuid": "bbb2dce5-dd8e-4327-a710-6a2fad966430", "comment": "Malware payload", "value": "c100d5cd21ab9cc009e17deecbf675a5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048312, "uuid": "1a008f56-1c9c-49f9-97b5-5cb52dce993c", "comment": "Malware payload", "value": "55b3b302a0f8f5bc70335c27c0eba1b824369c2e62a54411a039b272c61fd303", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048312, "uuid": "61d674d6-8391-4749-a0e6-80c0a61b0554", "value": "T11A9533E6137B2ED56E3A7C9FD8F42A7D36536051182560FC2327473B8EF118ABA18C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048312, "uuid": "58adbac7-7787-447f-a42e-9f25d6e59680", "value": "49152:POci7Gv/fdEzHLBBE1GcCxUxIhj0P3ixEUYyOYyPQLX3WZfGPC:2ci7fNcCxkIj4inNfZLHbPC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776048312, "uuid": "b567df64-3f84-4c94-926d-19b99761ee58", "value": 2013708, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048312, "uuid": "6bd989da-38a4-4513-ba9c-9b66ff23a965", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb802c0c-36e2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776048312, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048312, "uuid": "4d4993b8-0b7a-4ddf-b334-15743b18131d", "comment": "Malware payload", "value": "ccbfd6364949a09707ac10dcc6e2b5ca", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048312, "uuid": "061bac1d-e388-496d-8713-d1061ed5b7e3", "comment": "Malware payload", "value": "6fd31ab9f54c115d69a2a66c8e19b391725b2fb40a764a64cab767b62d0b1eef", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048312, "uuid": "56825a25-c6f4-458d-8182-b1326f725f06", "value": "T11A85339862B66869D9C2327317DF059FCF87CB29E442FB34B423BE7501218DA6D18E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048312, "uuid": "4213f084-b0b6-4dcc-8b39-8bf5ee5ed10c", "value": "49152:HUUBveUVHD9iml1DEb4WPSpk88X1d5z6y9x0LL62U:HUUBRD34UWPF8uv6ygLO2U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776048312, "uuid": "22a68b94-2c92-4973-9828-b3b5307e4ff0", "value": 1749416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048312, "uuid": "d48e4224-8ae9-44a3-a160-269722c5c025", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc32c49f-36e2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776048314, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048314, "uuid": "b1626f21-4772-415f-9e35-97ca790ca890", "comment": "Malware payload", "value": "5d5f9e2e19005d6e32f1ec3fb165da60", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048314, "uuid": "9b2bbe69-060a-40c0-bf40-13cd4bbf7a7d", "comment": "Malware payload", "value": "527c90178ebf72c03c652fa9ff14d9a89d93aa3bbe706f7ef05531e106ffef70", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048314, "uuid": "45443fdc-7941-491b-9179-19ee7b5edb5f", "value": "T1D466F7C1E991D24AC63D6D31EFEAEFD8D2273F315D885A4AC9D8F33E18B214580B55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048314, "uuid": "39b90d59-44ec-4fa0-b504-65c25b000f92", "value": "49152:P56wvvKP8nT71IsnR63fll+ExhTNQwOpx3bEHosdg8u400Jrh1Hxgt5EW:P56wvvKP82snR27bXzRgjEW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776048314, "uuid": "bc100f5a-1b8c-4154-adfe-60da52be8ac3", "value": 6684820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048314, "uuid": "4274a197-153f-4fa0-a68c-043fb0d116b4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d23e2291-36e2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776048324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048324, "uuid": "cbba1100-a911-4269-a20e-311132f37184", "comment": "Malware payload", "value": "55f5e67576509dd85a9bc6ec0d08d930", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048324, "uuid": "dfd9854a-7f36-4bbd-b377-db4aaf0909e8", "comment": "Malware payload", "value": "ec6339d9d46f43579a9e15119625921c3c0889a46d891d8f977244744e91bcac", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048324, "uuid": "637eabb1-72ea-447f-8715-3dfe2c9c9b3a", "value": "T1328533433DF04A6F85B5B4B7D9834C72B66C3AFE4A4A9489CE80CD48EEC75E1160E4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048324, "uuid": "6ff1cce1-01d2-44c5-afa2-75c7b5585f90", "value": "49152:RH4laTtAdC++fVXQBHp+t5J60qHuFjYpoDuJ5BCoR:Yh6gBHpWL/qeYpoi5BCoR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776048324, "uuid": "271f054d-3c28-473e-ad17-d1c321e30371", "value": 1722028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048324, "uuid": "4bb7165a-a2cf-4643-a3d3-30f9893d15c1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d240074b-36e2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776048324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048324, "uuid": "fef648bb-3078-4f68-8aa5-25c4a7bcd64b", "comment": "Malware payload", "value": "20960ce958443d1c294ab621f96ed613", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048324, "uuid": "dabd46ec-dda8-4abb-95cb-a4d1e5dfc30e", "comment": "Malware payload", "value": "6a0086c068d2eee2a45e8fca52d3e5c786a5808aefb2f271b7b536e0358d8e23", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048324, "uuid": "f0bc8e4c-46a2-42cd-98a0-cdf4f9fbb6b4", "value": "T1C085338F1E4386A4DA8E3FF33D89E9517E1326016E35BD5CB842D7186DE8CA4F35A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048324, "uuid": "21d70394-6682-4f13-9b71-69b6f72e83aa", "value": "49152:J5MvtivbS3iM9tDXFyHcTQJjoBbyPUF475f5:uIvbgiMnDFTQtoBbysFY5R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776048324, "uuid": "588f6aff-d992-42f7-871d-8bb30b248077", "value": 1783512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048324, "uuid": "32a89945-433c-4c08-86c3-97f2daf9065e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d240fc5c-36e2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776048324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048324, "uuid": "fcfd43bd-cd2a-4cd7-b42e-5343252cfe85", "comment": "Malware payload", "value": "5a074aef156f613bbd8da0e4a8f7cf00", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048324, "uuid": "ad03673a-2c0e-417a-8d59-5d2e094819cb", "comment": "Malware payload", "value": "702a49a6321b360c3813a1ff245e10cc1ae0d8864c6ab49c417c65e02a4b62aa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048324, "uuid": "5e7f9cba-fe97-4e36-a03e-edef2b707e63", "value": "T136853387CB4260B654DFA3768C488092626F23C3FD335E35771E2C691E7346A389AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048324, "uuid": "6b7ff201-47f7-4e5d-89bc-7269067e9a52", "value": "49152:LGVv04oJ+lZQ4f9StRXXYir5Iv/dmqS9dKr7:wMhka4YtFYo+Ub0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776048324, "uuid": "98e6b074-3f1b-4faa-ba1e-0ade8fdcd148", "value": 1733400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048324, "uuid": "30001ff2-f68a-411e-aadb-ca4d60a4c614", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2417db9-36e2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776048324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048324, "uuid": "0763c376-90b8-4ec6-a254-adc8e7be9595", "comment": "Malware payload", "value": "9847e4b0e6be9b91571fe16a7a84b90a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048324, "uuid": "7ad78b3c-2600-4506-8882-cf095c5d0bfe", "comment": "Malware payload", "value": "f4fd86d7902d10c5454bd1ac7e5fb5d8ef03650497e2cd8d62c6ba0427007b47", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048324, "uuid": "58d7b7fd-bd7a-4e83-bb98-d5b8e81d97ec", "value": "T15485331D7463D10FFA3D7B72194568AE1A70800C6BBDD07172E295CAB1726D0B3EAD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048324, "uuid": "aa22e24f-2bc3-4ba6-9411-77407b816d55", "value": "49152:4yVAXv0stHELBJKe1da12mjbSIQ9mKdYvpRSSso:Z+Xv0lJaNu9mjvpRSXo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776048324, "uuid": "1a88588a-c103-4eff-b42c-f74a8df4c3e7", "value": 1744640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048324, "uuid": "6edacc94-fc1c-43da-a21d-dabfab0a18ae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d242f3e0-36e2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776048324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048324, "uuid": "d4928e5a-46d8-4e59-9146-548c9558cd0e", "comment": "Malware payload", "value": "d3226430c859078f77fd3ebf050c47b8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048324, "uuid": "d83011a4-5ee1-4ab0-a985-d068acad56bf", "comment": "Malware payload", "value": "4cbe78b05cfc86d720d29be3d1f787510566b5697cc8332a98154b34d2d1e053", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048324, "uuid": "69349efe-f8c0-467a-9784-17f6b3b8a79f", "value": "T1358533A7538E1AD9D4E4D33B3B12B1F557570F30B56A4166A0EC93E6498C4B3ABE8C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048324, "uuid": "2c9fd577-ec98-4daa-86dc-f0731d1359ce", "value": "49152:ff9oTPxeCkg1CW4lV6kFuKvGZtNULzsXF2EqweC:fuL5fr4H4GavyzCF2U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776048324, "uuid": "c72fbcbb-c814-4472-be60-a53bd30cd049", "value": 1863960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048324, "uuid": "8327785b-d134-4e3a-9cc0-e0865c4ec995", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d24ae32f-36e2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776048324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048324, "uuid": "29497f6a-41b4-4743-ac58-9442e7c624bd", "comment": "Malware payload", "value": "dc14369e5bf5743438377931128f3e93", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048324, "uuid": "0f3267ee-7f9a-4c5f-9b5f-ea132df0b21b", "comment": "Malware payload", "value": "a8fbfc293d846bc54921e5034b6f11142219f71c2e9d424571e31e622fb4801c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048324, "uuid": "950493cc-7756-4261-919c-dcecfa4ad7e3", "value": "T1708533DDCD900A1F7F093D3922CCDD8EA225FA35549C2E2CB5A9940BE117E5B32256", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048324, "uuid": "d3817796-fba5-42f3-a4b0-f419ac81bd83", "value": "49152:9a5A0Dav4xbZVsroD8hLSPbWcNNYhwi0bMSx:9au0Dav4VHsroDHVNc4/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776048324, "uuid": "75dc6d76-5800-4e7f-b7d0-3a1bae8252b2", "value": 1804288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048324, "uuid": "3d798f6f-4632-4919-95a1-06871a55ca96", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf8afabe-36ed-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776053017, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776053017, "uuid": "b665c578-648b-4743-ada2-d099277d48d5", "comment": "Malware payload (Mirai)", "value": "0ed2e18dccd04e0e3567d305748f6508", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776053017, "uuid": "0ae58788-43ce-40a0-b6a9-1f9a541b11f0", "comment": "Malware payload (Mirai)", "value": "a8bdc657e98cd6b84ec1185ff178313179b72e13ac8d950c7b00451bf5a6712d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776053017, "uuid": "de724242-7a97-4c5d-8548-c9a2cada2db7", "value": "T179333B4DF783E0F0ED4B0571115BF77E97349E024124DE6EDB98BE62AD32A02B11B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776053017, "uuid": "38715454-9b11-423a-b977-d160d3d69122", "value": "768:vwheNrlqWC9wIhpRflrFWwqTlFNB5azjYvzNeVMU2331ANA0B7RhuqDV98SN+Er:vwQ96FpOzwLMU431ANA0BLBCGr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776053017, "uuid": "ced51cf8-7196-4cdc-ab6c-6c84384e289f", "value": 50476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776053017, "uuid": "4da49caf-fad3-472e-bbc7-67e8680a70b0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5af5f5f-36ed-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776053054, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776053054, "uuid": "c66e982b-67b6-4d45-a883-b7d161b1492c", "comment": "Malware payload (Mirai)", "value": "2519550c1bf5443708a8f48de7c9edb5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776053054, "uuid": "e620843b-000c-4754-828e-753b55014eb3", "comment": "Malware payload (Mirai)", "value": "c447dba3eb12a0d508955447a517b4dccb4f07b8103059aefd8dd187910b079e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776053054, "uuid": "484a43b7-eb2f-466d-aee5-04f53f5c59b2", "value": "T1C823F1F6A7B7B3BDCFE185B027AE4FFCDD2918911B15278B56C36A295CF66042D000", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776053054, "uuid": "3dda035e-acfd-4263-b838-6f8f0c261ac6", "value": "768:SluSRBaqScGBCpk0VDCeTVpFT+KG75h1jbideDKflXPHXhhJCEpYSzKl/T7R2uKN:mREB70Bb5P+t7nhaee/XhqEqlJbi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776053054, "uuid": "ce262b70-8db6-4370-8005-2e451bcf94ca", "value": 47776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776053054, "uuid": "bd0a3678-fcb9-4d77-a12a-c8c372ec3f1a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f9cce21-36ee-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776053178, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776053178, "uuid": "046ff5ad-f273-4282-aede-e3c44533b3c1", "comment": "Malware payload", "value": "d5078770422cf79522dc932cf4c4f240", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776053178, "uuid": "7c429a63-f186-4f5f-b4ea-2e1c6db1df4e", "comment": "Malware payload", "value": "820e84c81f0eadd168961c4764749ff68ba7de2aa4971a3012c87ffa9f2e8ae2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776053178, "uuid": "15b9642a-a44e-482c-bef8-02a9039031d2", "value": "T1FAC39CABB24F1451C82607F41BCB5B9D2E3325019D2B9AE77C6E323E2A369DF58053", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776053178, "uuid": "d720d0d0-749f-485a-9d9e-719239e880ff", "value": "3072:jXGmgEjHTV5LdRlU9+WODKJDdqobEbgiC9AJDiXYPwqF:jXGNkvdRlM+9q0oInC9Axi3qF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776053178, "uuid": "4812de10-445a-4e79-b2a5-6a3f8a259685", "value": 124344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776053178, "uuid": "674abe54-999f-4b04-9ca2-f0c4380dd07c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f965d78-36ee-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776053339, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776053339, "uuid": "88fd049e-59e9-49fe-89ab-92dc5453c726", "comment": "Malware payload", "value": "6ed031cfa668cf28c243e35b38bb66be", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776053339, "uuid": "9dad8cb9-e35f-41d3-9d25-7bf59dccd623", "comment": "Malware payload", "value": "e2921a6fb1258148ada9930f40df18bf4a94dba92003069ec1a7c69ff2da8bd6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776053339, "uuid": "9a7ddc50-f11f-465b-a069-c45fd4948a16", "value": "T1F8E3885A6E228FAEF67C873547F74A20976D23D623E1D684D2ACC1141F6038E541FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776053339, "uuid": "d6e39260-4736-4eac-8942-c53362091978", "value": "3072:3O+qDHvC6+S0OUI425eNjZKcwumdEBfEVy:3Sfz0zIcNYcwumdKfEVy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776053339, "uuid": "0d15c97d-5990-425a-bb20-482acf5a4d3c", "value": 156680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776053339, "uuid": "dbf28357-ce7a-444c-be56-5edf7e90e3c0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ae80430-36ef-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776053653, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776053653, "uuid": "23627243-9a77-4a30-8558-377482a927db", "comment": "Malware payload", "value": "9b4e39b047e5e878bc76164c71763c43", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776053653, "uuid": "ce0668b3-422c-43f2-be58-3787c6478457", "comment": "Malware payload", "value": "0ff01e6c46e19e711401c345c999a38df5441aa87f87232f825ed9ce211fe356", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776053653, "uuid": "3be6a3c3-1e01-4dfb-bb19-c0682b20fc90", "value": "T1AF93E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776053653, "uuid": "f5b565fc-c71c-4e15-9ab5-ed113e642985", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXTIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776053653, "uuid": "1971137f-35e8-4bdc-b522-07676699cfed", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776053653, "uuid": "f9746cf8-883b-4f82-8521-8a5dbcc1bac5", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "296c7997-36f0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776054054, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776054054, "uuid": "fe7c7e9b-c845-4058-994b-397f411db9fb", "comment": "Malware payload (Mirai)", "value": "f69220d3128245fa542e2a1382fc057f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776054054, "uuid": "3e782078-0121-46aa-b28e-1246d62c1628", "comment": "Malware payload (Mirai)", "value": "93ceb6a107f83af0d2b252640e41369c1aee5bd4f93c18ba246e9d365dcb4081", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776054054, "uuid": "669d3cda-78fd-4a96-990a-19805ea8e36e", "value": "T159C30956F8819B12D5D151BAFE0E124E77131B3CE2DE7312AD246B307B8B8BB0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776054054, "uuid": "fda2aedd-a136-4bac-97a0-79ad3ecbeb43", "value": "3072:tIkKYKu/fXKqhawotDDVThSYV3ppZctiYjjlC:tI1pEXVaRtDrSYVfciYvlC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776054054, "uuid": "102e424a-d9bc-4f76-a55e-1b638943e8b7", "value": 129308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776054054, "uuid": "e9863878-ce5e-456a-be76-52af0a0cd052", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50ccfb40-36f1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776054549, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776054549, "uuid": "c9b038ab-9ec6-4d7e-a86b-8d72d6bd9186", "comment": "Malware payload (Mirai)", "value": "f219c955ce82bbe13044bfb8381b4cf1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776054549, "uuid": "e1059bcd-c6d2-4d29-9f9f-3aa5bbeceb97", "comment": "Malware payload (Mirai)", "value": "bff36ed4acdbafe5dde46d2159839efcb33ab941cd568463c0c03d53db2490bc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776054549, "uuid": "640f0271-378e-48bd-a0b3-64d507aa25a8", "value": "T164F3C6169FA10EFBDC6FDD3702A9060235CC954722A43B763674D528F64EA4F4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776054549, "uuid": "d7f4f040-ec52-4981-a1e0-950eb2cbcf8a", "value": "3072:JFnGtX51a1jRnQKGMg2wn5tG4TI+xukAm:JFsXuWKGvjLvIlm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776054549, "uuid": "626555d8-5958-41a4-8ad2-343b6c73116a", "value": 158152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776054549, "uuid": "cb185f18-fae9-43e2-be66-3023257f692b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9dff5222-36f1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776054679, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776054679, "uuid": "03d250fa-264f-49ac-924a-35ac32bf3fc5", "comment": "Malware payload (Mirai)", "value": "242dae61b01c2e77c489d860178eb535", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776054679, "uuid": "03d23436-f46f-4c96-87c7-77db85e11ea4", "comment": "Malware payload (Mirai)", "value": "57a64d5c60be00d3adcc4275abb95bcd69316c6639b4d5e168d6be470176ba85", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776054679, "uuid": "c7bf9a26-e2a8-47d6-ab2d-386450fd92be", "value": "T103F33A69BA0F6C41F2C2C3F9DA8C87E13E1735E3C67A8DB1790252EDDBA39D959405", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776054679, "uuid": "3ee951dc-2c5c-4782-87f6-17eca0358b1d", "value": "1536:KX7D//cneDHabMcgqIN+10Rw4b1X75zdm/Xa3yiIfMpNEn5p5M/LW:kLqgqIRRjR7Ndmva3yvfMpNxq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776054679, "uuid": "20faec82-b68e-4e9d-aff6-a8b715df3e5b", "value": 157544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776054679, "uuid": "7069c0ad-b41a-45c2-98be-76f8cb040449", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c04e656-36f2-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1776054944, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776054944, "uuid": "f3499ac0-be6e-49f0-ba2f-e459d28c8064", "comment": "Malware payload (ConnectWise)", "value": "531a16100c84a543be4d17b81749d80f", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776054944, "uuid": "718d13d4-6d0a-455a-975d-36c8b55e60ec", "comment": "Malware payload (ConnectWise)", "value": "aab0e08defc2c1721490b00c1d63c18c2fb231f03840b826e0e6178116c42603", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776054944, "uuid": "2cb9bc08-0a61-4022-886d-a587955d89b5", "value": "T13E836B43B5D18875E9720E3118B1D9B45A3FBE110E648EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776054944, "uuid": "781133e3-4be6-4bb2-9516-3cfc77eafec7", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776054944, "uuid": "17396a9b-20d1-45b9-b679-b1ee84a92c14", "value": "1536:JoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYp7DJWx:TenkyfPAwiMq0RqRfbaWZJYYpJ4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776054944, "uuid": "31987475-bbb3-4d7a-ace8-e7ef00efa805", "value": 83240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776054944, "uuid": "5854e1fa-4e2b-4ed4-b546-d94493c9bc37", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "481a36ae-36f2-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1776054964, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776054964, "uuid": "4107581a-677c-4253-b99a-2d24d9ef887e", "comment": "Malware payload (ConnectWise)", "value": "0ebbac1070c3582052979e4fb957c8cd", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776054964, "uuid": "720d1376-f754-4a35-9f33-fd1031d064dd", "comment": "Malware payload (ConnectWise)", "value": "b78f0e906f9d9d2ad9e31d5158546b3f4f41fc0f6cbb532b7a0231a862699625", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776054964, "uuid": "a173b79e-7556-45d7-98c8-34c4825d61c6", "value": "T12ED6232523FD441AF8F74B79FD3682E45972BE64CF21C11E9228B90D2A74D8096727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776054964, "uuid": "b0cbd20d-c166-4986-aba7-8ccfda582b73", "value": "196608:pWh0cGw2Wh0cGeWh0cGpWh0cGHWh0cG5Wh0cGeWh0cG7:pWacMWacfWacCWacAWacgWacpWac2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776054964, "uuid": "738c4804-1344-4d5f-b3e8-911f62587c28", "value": 13402112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776054964, "uuid": "46bf1983-53c0-4422-8d3e-88a8640f2338", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea4bfc57-36f2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776055236, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776055236, "uuid": "bf4b077d-cd72-4c6a-9e62-52cfa0ca0cbc", "comment": "Malware payload", "value": "c50c1bcab1cfa39ddfaf9b1eced5685f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776055236, "uuid": "ac1c6496-fb91-4133-bec7-4edbfb537447", "comment": "Malware payload", "value": "1c18f88ee26ec77de3844647f0d6adefff582f46f7b15658b281e7b1e1c67e65", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776055236, "uuid": "61ec4f48-915a-4020-a9f9-97fffe0c4163", "value": "T177A33863CC666F58C628D5B0B0B18F796BA7A96081875FBE1977C3748083D8DF5093", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776055236, "uuid": "98cc3d64-76c3-45cf-9122-66ba6417df1a", "value": "1536:7wOn+VXqG9tACAKPMkN7FwzFInCGmqYMyWZfyXxIZjwkG:wtACPrYFIAqJyWByXKekG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776055236, "uuid": "fd76b199-e056-4eb6-bd80-6c53d47e2884", "value": 105056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776055236, "uuid": "9695f8c9-e8dd-4445-b7e4-e089a4545c8c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff488af1-36f2-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776055271, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776055271, "uuid": "2fa58bf3-d350-4c27-9dfe-c4fc6ffbefa5", "comment": "Malware payload (Mirai)", "value": "cf331ae316b23812a852bafa61fd6c96", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776055271, "uuid": "79bb62d1-9336-4a33-8c14-6621939c7889", "comment": "Malware payload (Mirai)", "value": "df74ad3aa76bed163e0b3bd72dce5e4d390711e149b45d9ea17d150b38732911", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776055271, "uuid": "5fe9238e-b8f5-4d3b-858b-fa60d8007259", "value": "T16DB3F845F8409B17C6C666BBFB4E438D7B2A1758D3FE720399256F30379B85A0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776055271, "uuid": "b84c095f-6471-4a79-9e7a-ef0f9afc1897", "value": "1536:u2uVnPJ86wi4VI8RTUUCvyNOzju+m9wYeFZdmlV9MwywlQ33m3Ds2dgoYakJc+:1u9PJ/4VRwUSi+IxebcNhe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776055271, "uuid": "134b1ab6-a7d0-4e75-a0d6-31ab4a855720", "value": 113184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776055271, "uuid": "2d7b4730-c89c-4943-bd08-430d7295cdab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776055279, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776055279, "uuid": "724fe8a8-ed62-4b6d-ae12-2c2465089c58", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776055279, "uuid": "3cd39b1d-6ac9-4473-a438-eafae4e1dd06", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776055279, "uuid": "bb91a1f2-6d89-469f-8865-86039924c32c", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776055279, "uuid": "1374c938-54fd-433b-9d6b-3b61a04c1792", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776055279, "uuid": "e2ec76b5-60ff-4a2a-b032-8d535d08cf19", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e28c46b5-36f3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776055653, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776055653, "uuid": "416cedca-ffc9-4dec-b54f-58ec28b5476e", "comment": "Malware payload (Mirai)", "value": "16a6b0f6eb18329082aadfd67771ea8a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776055653, "uuid": "cc45b02f-c539-4d7d-a244-c242861e8843", "comment": "Malware payload (Mirai)", "value": "ca2b898ad8c95acbddb45c9eab78fb555594d0213e2ce14ddf57380ff00f2dee", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776055653, "uuid": "a2972682-f47b-4f01-a20d-d25bc0860b57", "value": "T1DE93F749FD416B10D8D635FAFE4F024973934B6CE3FA7201AA245B2123CAA6B0F765", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776055653, "uuid": "dc4c9828-85ac-4186-9906-dca52d9744ee", "value": "1536:YAnwLsWc2zgUdtS0tFbvacgzafVAweBuqKlUI8HiLNRIbT2gZ1YqB:usWsUv5nTacgzafVAwe5YNRIbT2gX1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776055653, "uuid": "174abddf-db78-4926-977d-9d64101c5830", "value": 93316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776055653, "uuid": "78268cef-c1d1-49d3-a15e-3d7f60b8617a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aeb99878-36c8-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776055935, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776055935, "uuid": "6036f977-a472-4bd7-8d57-a04234b59757", "comment": "Malware payload", "value": "cfa4099d42f87a980374026e1cfbe8a9", "object_relation": "md5", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776055935, "uuid": "1932e9d0-2871-4103-9bf1-d6822a451bd7", "comment": "Malware payload", "value": "202055dc11f11bb81e051e7b314e6433399d838676802fac479fe4a2b3924046", "object_relation": "sha256", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776055935, "uuid": "d07f68ad-8b71-47b2-8d76-a761028fa206", "value": "T1E566F112FDC6CA2BDA6780B3E1C68267502A27D9B80AD03F47A02D855D75D4A43D3F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776055935, "uuid": "2a4754b3-41c6-4b98-b13c-7b46d75ff679", "value": "98304:pMXLjtQ5CryByCcMSaiKMAqcoArxoBx8JosjeYHrTg9hRtAdijORhHF1RLQ1eNRd:42LyCcMbhM1d+HjemMjf8iUHySR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776055935, "uuid": "4e6c9fe1-07da-402a-971b-2767a2e4c47a", "value": 7016308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776055935, "uuid": "a47db963-81c1-44d6-924b-94efc7f66733", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4019663-36f4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776056085, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776056085, "uuid": "cb1f7189-d94d-4447-92e8-c9ad5599f9e3", "comment": "Malware payload (Mirai)", "value": "40d692368529c38623793072b8e020b1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776056085, "uuid": "ebc2d683-1526-4f9f-8881-74377102ab68", "comment": "Malware payload (Mirai)", "value": "2b4d8e7bcaf850ead0283268ea0c5500c95e33c16283bba502506025e071928d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776056085, "uuid": "09d6a310-1eee-4c30-b42b-3c927ad01072", "value": "T1C932D80797BBAE97C0D0237302B30751B2A99F827590637FBE051C4A5EA63446C2F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776056085, "uuid": "7e40acb3-8ce9-4a18-8ab9-5297f2182775", "value": "192:c0VM+0OR1CQyMwno5NHHsB0TeebLSBWgsPlkUGrHlaz7IDsOeK:zVMdLxcNHMuTegL2OdnGDoz7IDs8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776056085, "uuid": "cb4cd6a5-38c1-49b3-a940-52df59ce172f", "value": 11612, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776056085, "uuid": "a6a72b1e-11f1-4cca-96bc-1da278c55e9e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39085145-36f6-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776056657, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776056657, "uuid": "45441d88-839c-4356-a285-8c76a6acf7a5", "comment": "Malware payload", "value": "8338dd5615d26eb5a49d6e2fd88cf8f1", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776056657, "uuid": "9899ccdc-8dae-4ace-83eb-29b7857789ef", "comment": "Malware payload", "value": "455134f701f5c75f3228554b32b9a290f43b39b41496f7fbea7af4a6023e0258", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776056657, "uuid": "c098dce7-4098-4470-8000-710d0e625f0a", "value": "T160931A3178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776056657, "uuid": "f5ffe7f6-e91f-4996-8cce-d4ab14ff3a02", "value": "1536:0Byp1tF/uwMmAIa14oXx+IMepeV7tb73WdxCrCitkb5fv2v05xsprCKP1sPyKdt8:08jIL0GitkbFv2v05xsprF1sPyet3y7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776056657, "uuid": "f6ff87a5-2f2b-48b7-92e3-9d23eef8720b", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776056657, "uuid": "681bec1d-52e7-4e1e-96b0-3bf65eb04266", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f29d799-36f7-11f1-bc00-82aee05be84a", "comment": "Malware payload (SVCStealer)", "timestamp": 1776057096, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776057096, "uuid": "a46ff85f-f8c8-42e8-85d3-8548a7623c99", "comment": "Malware payload (SVCStealer)", "value": "a73290853171bdd1abf58ed5a27024dd", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776057096, "uuid": "0390a6e3-b260-4f6d-84a0-38233a47a695", "comment": "Malware payload (SVCStealer)", "value": "9372b977f945b3024129c560096bf216c573dd673cd3564ada3f814a903146a1", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776057096, "uuid": "abcc296e-99be-4759-a443-c4359257e17b", "value": "T11A96339502E145E7F4B7F23E1AA26196D273B8102722C5DF1BA483AE2E5B3F14D36F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776057096, "uuid": "d9992624-7731-41fe-ace5-c4934cd359c3", "value": "dcaf48c1f10b0efa0a4472200f3850ed", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776057096, "uuid": "ee019066-6e0f-470d-b228-3c8ca8548ed8", "value": "196608:GrGtbW897G+x7eovq5XMP6PzFcx97WZHsoqEbRjMFb:N1Fdq1B7wgZHsoqEbpib", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776057096, "uuid": "762f1c99-3650-4bad-82f7-0b93e5562d54", "value": 9388313, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776057096, "uuid": "6753a5b3-30cb-4e3a-8b83-1ede16a598fe", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d526c982-36f7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776057348, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776057348, "uuid": "f9d68108-86de-43a3-b732-4ac94812b6e5", "comment": "Malware payload (Mirai)", "value": "bcebedaf30c2dd4dc041b450e8c76973", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776057348, "uuid": "55a877a1-adfa-440e-8f56-8aad3cf37c3f", "comment": "Malware payload (Mirai)", "value": "3132a9b85061961036c69db8e0d6a0fa406d2fb23d8e6ec3882ba70f847e9b7b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776057348, "uuid": "c00d7fed-309e-4298-8ff1-9faae33fe71b", "value": "T181B30945F8505B17C6C252BBFB4E438D7B2A1768D3FE720399256F20379B96A0E3B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776057348, "uuid": "b6341b4b-f1b4-45ee-9fd3-85e5e77820c4", "value": "1536:WQtUqnn8Pd0z4VJtKT13v/vy6OZ5OZpqrcElOgwywXvqTVFnXYPqmp3j85vR:t/nnxz4JKh3PPnkzmpwR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776057348, "uuid": "f43ef44e-e846-4982-bd95-2b223257dbf2", "value": 117280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776057348, "uuid": "622e57d2-fb5d-4ac1-a459-7bde9517483a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b3897cb-36f8-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776057627, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776057627, "uuid": "863b4a46-962a-45da-877e-b4243d2b0764", "comment": "Malware payload", "value": "8b40042a7d552b05f1cde07b7a3d4fe1", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776057627, "uuid": "dac0e874-674f-43f5-9cdd-2c9356bd50d0", "comment": "Malware payload", "value": "9b4b11921bca8536f47cb9c7a8634e6823029a37bfb442e7c525a1070e84701b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776057627, "uuid": "dfbb84a6-8f5c-4188-9cb8-03dd30663327", "value": "T14A8309327488582A210B428FD267336C70AFDCE2D611E5B6F6F622344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776057627, "uuid": "28a8fb93-4fce-4914-ac38-1968401c051b", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnqWasVN/:XEKltp9txAX/yr2pbqWpVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776057627, "uuid": "62c3ba62-92e0-4f84-b734-606181e61147", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776057627, "uuid": "6167bf41-68fe-4d65-8c8d-318d9f969171", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6589fcb-36f8-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776057806, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776057806, "uuid": "92c7f925-c6fe-467b-9f1c-69cf1d4eeca6", "comment": "Malware payload", "value": "0d198588e9fdf20830d14c9bca90e52e", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch1", "colour": "#61b0da", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776057806, "uuid": "fc722e95-b372-46b7-a21e-ad05887dd5bf", "comment": "Malware payload", "value": "6ab76a423d4b9ca17e959246d9bdb714d0ef13bcafef2b5579520ea353543cb4", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch1", "colour": "#61b0da", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776057806, "uuid": "6dfe02cc-ebc8-46cf-aabb-be43376e0fad", "value": "T1DC03B659D57B02AE340BD4E53BE1778732D0212FD389E81C7FECE5104F46EAA9692B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776057806, "uuid": "4a0580cd-362d-4f16-b40a-8ee4e2cae51c", "value": "768:ofrFlF3ZJFEF3WMZ2m2rfOXuTb+MaQCceIaut2:Q3N2kG2m2iuXPaBIaut2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776057806, "uuid": "46aaa54e-96bf-41e8-a5f7-3d35359412fb", "value": 41372, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776057806, "uuid": "f2a86eeb-036b-4215-97e9-e5ec2178b6d2", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ceda3ed-36f9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776058086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776058086, "uuid": "ad589a87-0d6c-4e72-992b-07aff6f33e0c", "comment": "Malware payload (Mirai)", "value": "3d1716c661f048898228609f2c1737a5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776058086, "uuid": "29e5decc-987f-49c2-9513-b6d45a8948aa", "comment": "Malware payload (Mirai)", "value": "d7e1dc5e919b12a67fb84db7b2cae8c5d857b997b973aa293cff8aa7005c7ac3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776058086, "uuid": "cbf6148f-af85-4d20-bb2b-46840f6e0e19", "value": "T1F1C32905B30C0D47E1633EF43B3B27E193DFDA8121E4E640655FAA8A91B2D32558AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776058086, "uuid": "3cc66058-2f07-4ad8-8884-d66313590d74", "value": "1536:qMUMZ4Ox10MLEKQ777ZLag4RvAnjSLtROj6+cTRq6SyNOZP3dutc:qq4Ox9Q7vZCenCS8aotc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776058086, "uuid": "ea6419e3-2f48-4875-890b-c9e8f3f7b2d2", "value": 121508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776058086, "uuid": "2c9090d9-0c52-4e0f-883d-32fad41c5a84", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "37121196-36fa-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776058371, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776058371, "uuid": "cdb77b60-1fff-4cce-b686-874e82947c75", "comment": "Malware payload", "value": "2f77ed9ba322d2c0fb9190100be09850", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776058371, "uuid": "6f9801f9-888c-45ee-93e2-5b549b3ab725", "comment": "Malware payload", "value": "b16e8fda3d9fae9a68ef6b9150b49748fef2c5e9c5b088cfc9abf83bd70481b4", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776058371, "uuid": "5f535125-a012-4a0f-8acb-87d2ded7e174", "value": "T1CC13A55E917B02AE340BD4E53BD1678732D0712FE749E82DBFECD1500F46DA98A92B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776058371, "uuid": "97efdf30-b8a7-4fcd-8738-5f0d1830cee1", "value": "768:oSrFlF3ZJFEF3WMZ2m2rsrwdLzbfbzCceIaut2:t3N2kG2m2w89bjqIaut2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776058371, "uuid": "4f99fbc4-e19f-406b-9730-e3aafdf4ba20", "value": 41555, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776058371, "uuid": "fb6cac46-d585-4b3e-8548-e15fa0255d32", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0497da9-36fb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776058977, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776058977, "uuid": "deb69533-fc54-45f1-872e-310fc2489ee2", "comment": "Malware payload (Mirai)", "value": "e549f4dd8890830f488976d6ea80f138", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776058977, "uuid": "671fd474-9977-4452-9492-9aa91cccc271", "comment": "Malware payload (Mirai)", "value": "f66e307bf77a60c33e15fdce2dedad80b20f41b6d9174657a329af47715957a0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776058977, "uuid": "bdad00e7-4895-43d1-aea9-f545ecd575be", "value": "T1C5D307C7F900DAF6F80AE33748570906B230FBA509925A373257356FED7A1990477E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776058977, "uuid": "1ce5baf7-5970-40e5-89e9-2a39f321e705", "value": "3072:pYIWHH0JpKySeuthlBk4604iocFOPPZcPhV1jbiBL2eliVH:hKySVtDBkPiW3ZcPEL2vH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776058977, "uuid": "b42b580b-f0ed-4c7c-819e-24a536d9bc19", "value": 140416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776058977, "uuid": "7ef7c4f7-ace1-48bb-8e0a-431db6066122", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b214ba7b-36fb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776059007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776059007, "uuid": "8ce79eaa-95dd-4395-9d24-62b5086605f9", "comment": "Malware payload", "value": "5586714028d9aa280bf50cf3b92e01c8", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776059007, "uuid": "e5edc9f4-fb15-4db5-b066-775c13ca609b", "comment": "Malware payload", "value": "3d9200588854e5ab4e34d4841533a30d26288e7408c720ea841a05da3fd52de5", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776059007, "uuid": "67e7eddf-aaae-4165-8c91-318258ebec6a", "value": "T1DE973379A7646064DBE4C3AC904AE48E9975652B736E9CD3481FF323C5F6FA040B02", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776059007, "uuid": "2d4432cf-2ff0-4fb4-84c7-01a376e435f5", "value": "786432:MutsChHjwreYpqVWkXSsTknO3UqvOqrpoH+WWXATQgyPGXyyJrqPcWB4Jn4IM6o:jtsCQeA6XcO3UqGqq+WnNiyJrqdW6IS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776059007, "uuid": "559107b9-4029-4423-9b90-1c8429ff7fa3", "value": 41380290, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776059007, "uuid": "3c62a449-7e3a-4c10-8858-b199fa2c7b93", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f5f3dff0-3709-11f1-bc00-82aee05be84a", "comment": "Malware payload (SVCStealer)", "timestamp": 1776065134, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776065134, "uuid": "b729670a-18d7-4622-acd6-8da32db228f3", "comment": "Malware payload (SVCStealer)", "value": "e9d5e5ae99fd339f19c475246fdaac66", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776065134, "uuid": "af657ef0-c5ed-407e-a4f8-043ca199f8ee", "comment": "Malware payload (SVCStealer)", "value": "ea05197e0c3bfb7ca461146bcfba417834b97a96d2a24397d745fe0f487e5d59", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776065134, "uuid": "8f05c930-b25b-4f0d-80b5-e7d93b33f055", "value": "T166F36E0A335460F4E17B9278CDA25B46E7B2787A17B1634E437843BA5F33251AE3D3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776065134, "uuid": "5532dd45-adc6-4597-b3b6-b162ceaa3538", "value": "58e55310d66c611cb140f28166224b10", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776065134, "uuid": "e5bf29ee-1bcc-4a7d-9ae2-a6e2fc17a614", "value": "3072:H7nVDG7iPEC7P6Tx5TksYq2KCTzo9I/A++3lJ+56Kpv/f:VG7iPECL6TTTtjE4I/B+7rA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776065134, "uuid": "1333d42f-b6b1-43e8-838e-ed08ffa87c98", "value": 168960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776065134, "uuid": "05867a96-8733-4e39-8589-3972fded5fb3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a8b195a-36c1-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776066953, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776066953, "uuid": "09a855bf-2355-47b4-ac11-26c4b1e02388", "comment": "Malware payload", "value": "3ebf6e5773e041718a6116f9c43b8ed1", "object_relation": "md5", "Tag": [ { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776066953, "uuid": "43303335-aa71-4fd9-b898-e6199885ae45", "comment": "Malware payload", "value": "a8b2ba8d93319a60f3f581021d48e0412c7aea3f6ed7124daf5993dfb17ce264", "object_relation": "sha256", "Tag": [ { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776066953, "uuid": "ee4c0461-fb2b-4e57-8b86-e3b2de7acb65", "value": "T1C7C143D4FDFCF9327C6DB334B2C8918ABAEA7B6E853338087562569E146D448310A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776066953, "uuid": "7b25e990-8dcb-47f3-94d3-2fbbef5f5f89", "value": "96:xowMCySUq9djioY0MpY0RAkoBGKRtdLRQ56b6CrWJ5YBDjagJBhsvCPLfhtI6sHr:ySUq9dWoY0MpY0RAkoBGs5rWPmqABOC8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776066953, "uuid": "bc8ab990-1307-4e70-8194-9feb5dfb44e2", "value": 5727, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776066953, "uuid": "1afcc9b0-8b26-4d7a-990e-b87707ae88a2", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a49662ef-371b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776072729, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776072729, "uuid": "91a3648e-7633-456a-a456-0098b90efe0b", "comment": "Malware payload", "value": "545e9718f68264f953bde1adfaa6ffc3", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776072729, "uuid": "02320d8f-4750-412b-ad76-4b36afe1741a", "comment": "Malware payload", "value": "563e10e9c9b5bf4a307405188de80aa045ca76d9a8d4c363e0fdeaa310a4b6c9", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776072729, "uuid": "9c854023-12dd-47bf-afdd-81b5d0d6f647", "value": "T13F5623A41C5124CAF47466F81FBDA575BEEA73B2CAB04C6161763373190AF690272B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776072729, "uuid": "1010220f-017a-4e13-aa48-aec2a8d67a9d", "value": "12288:Jqxom+l03Lnut6HfKlkZp1TRDHafKDXd3z7xLs:IEQ7uBlWp19Ne", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776072729, "uuid": "2b7f64dc-9401-4a2f-9142-42bde0ef432b", "value": 6271188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776072729, "uuid": "6e02925b-b2c9-4172-a6b0-ad2a0bb793e5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "037a4681-371e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1776073747, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776073747, "uuid": "02202f21-13c2-4d19-8330-235b65bb0dd6", "comment": "Malware payload (Amadey)", "value": "b69d4ee762700b4a3f2189a2d46a1921", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776073747, "uuid": "063d3ef6-37e5-479c-b433-4e88c85e1e66", "comment": "Malware payload (Amadey)", "value": "fd06ae3e73f328efef8e2589a126443f7ab5ef6fee8334cd938005f2b5c907b9", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776073747, "uuid": "2e791f6f-a3a2-4417-8606-f083dd514686", "value": "T1C9557C0BA26141BCD4BBE1789A175A47F775704603709AEB07E446A63F13FE1AEBE3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776073747, "uuid": "f4193610-31ef-418e-8cf4-5b8bbb53473f", "value": "3f175edea93fa7a76a78004d12de2235", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776073747, "uuid": "df855773-6113-43e2-98b3-3d5052975ef1", "value": "24576:drR0NaOy0mK9yCksn6JCc2YkxfUyamitsDw+mLRZDOnW:dkHmiyCkhh2Bamituw+UXB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776073747, "uuid": "ba2c5ce9-8569-4be2-9530-87fd09b86f48", "value": 1282048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776073747, "uuid": "b3793bdd-e503-4700-95ba-45cfbd8a2eb8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7532ef41-310f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776073816, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776073816, "uuid": "cd41812f-5492-47eb-94d2-92795450dbc6", "comment": "Malware payload", "value": "c0c027f09a5433fd43c363fa44f3af13", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776073816, "uuid": "a958bd6b-5698-4058-830b-b0703be3417f", "comment": "Malware payload", "value": "cbaeaa4b58fced59013acfe3eab94e3164d010d8ad39b6797353c6ce411bd84e", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776073816, "uuid": "79345f23-0ba1-4430-b075-cf1a2c6bf985", "value": "T150963323A56449C7D43AE27BA1F216C143D7320AF943D4BAEC917ADC76E27C948C87", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776073816, "uuid": "05ca7c9f-83df-4830-9ed9-f101031467a8", "value": "196608:+Zftl+WEg2XhVXzEzNr18+Pj9Ri70uU+HB/OGUElH6XU8YYlbHXUf:+BZEg23Exr18+Hi7rU+h/PUEl0U8YYlE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776073816, "uuid": "fcb0c42d-e09a-414f-9418-e259a8b33e84", "value": 9439702, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776073816, "uuid": "b69a671f-8347-4f61-bf82-8a3d01d8deb4", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6e33ece-371e-11f1-bc00-82aee05be84a", "comment": "Malware payload (NetSupport)", "timestamp": 1776074052, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776074052, "uuid": "b8eb599f-96d0-4469-9ee9-158ed31441b6", "comment": "Malware payload (NetSupport)", "value": "584e60d7d4feb5545627f3d74fb658fd", "object_relation": "md5", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776074052, "uuid": "eb7616a7-ad57-430c-b25e-0d5433c0270b", "comment": "Malware payload (NetSupport)", "value": "62d487a22c5954809e2f5efd55db70cf8bdbc492bd2b0acc1d6ec75582e5cdce", "object_relation": "sha256", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776074052, "uuid": "76bda9c9-1926-4df8-8d6f-e31f18dfb673", "value": "T140469F16ED6808B9C892A37A887355437E38B400571223E76AD9636C1F637F4937EF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776074052, "uuid": "7b01dbcc-dc6c-4239-9492-23ef29f3fedf", "value": "3271ee162568f50a6810be9b8973807f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776074052, "uuid": "03f75a2e-e4c1-4bd3-aab6-4f7ec73cd704", "value": "49152:EIO7y2N6Z+arWTMCUJchCajeTvj8Qcl9ljRXZvJtFkdesczy3jI9Kp1e94m9bGSg:EIFETQHhL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776074052, "uuid": "68e667dd-3c6a-4f1a-ac7a-6b729b04e917", "value": 5556246, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776074052, "uuid": "a739a35c-e4ea-4193-a178-ca9275936bc8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "292d6474-3726-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776077246, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077246, "uuid": "af5f1539-5796-4530-9b7a-a1ed444bd415", "comment": "Malware payload", "value": "d757076123e8109580e4de1645c82248", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077246, "uuid": "193581e0-6994-46ef-b449-3b98f4a9f72d", "comment": "Malware payload", "value": "9c3e1d0a53e49ee445dfdba3f438a5ab091d04ddbfa522cf564606e81dc5dea3", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776077246, "uuid": "e1b24488-bc4a-41de-b2fa-447f304e3b0b", "value": "T10BF23A2B21EA20110913A15D778777A4713522A3FB8285F63DED8074AFE7D92EB335", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776077246, "uuid": "3a829dd7-7b3f-4a24-a209-8667f36abbaf", "value": "768:4DSlf60pY9JKkRTQmVGIEGJ07u7v684izeTggOll8:+Uf60pYbKkRyIEGJ07kSVlOll8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776077246, "uuid": "2144fc87-984d-48dd-90fc-4b46b0f925c4", "value": 36477, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776077246, "uuid": "1800ab94-f7fa-4ef7-ad17-1a98e950fcbd", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d5c7c19-3726-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776077307, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077307, "uuid": "9504b11a-27d0-4f1c-bb03-1f545ba620b1", "comment": "Malware payload", "value": "45067acb8b3a758922380d91f17c8e46", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077307, "uuid": "aa8bf820-07d5-4f45-980c-e251d7dd7363", "comment": "Malware payload", "value": "3d4bdf9ee2be938c326061fe26dbe38e06d0417afb5efbe145daf34ff694c3bd", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776077307, "uuid": "77ca0ca2-2af1-46ed-a92b-d2445a495475", "value": "T11A03A659C27B029E3407D4F53BE1279732D0216FE749E82CBFECD1504F46EA99A92B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776077307, "uuid": "bff9da13-fbe4-4811-9303-41891d991c2f", "value": "768:oPrFlF3ZJFEF3WMZ2m2roU7AEBhsZTO5CceIaut2:i3N2kG2m2Uc1LsZdIaut2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776077307, "uuid": "258f59cc-df3d-4995-9a68-109ea4977955", "value": 41347, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776077307, "uuid": "2c216f69-81ba-4a85-8dfd-a514c44b7596", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc436d9e-3726-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776077600, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077600, "uuid": "499cf453-c7b6-4fe3-a376-90e6d4839b3f", "comment": "Malware payload", "value": "5f503099ce36a7713054293d4775dbd7", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077600, "uuid": "78e1f781-ac16-4a5c-adb6-fd1990ef5d60", "comment": "Malware payload", "value": "c6bb385b64c8caea34807fc11887aee00dfdef4526aa11652efca21a6dd802f3", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776077600, "uuid": "ada769d1-156b-4b82-9e09-153e024c996d", "value": "T14E21A2CD3D38A437469ADD5D3183C9255784DDEC5437A7107A4FA82B93F210178A77", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776077600, "uuid": "dd171e27-aa8c-4631-b782-2269cfad733e", "value": "12:FM9K2ukjXMoDIGIap7rsmnZ5Sdcosv1vmQe/pNCIREfOnYwnMeREkXonxXvO0OIi:yqopcg/Ic3vRw/3vZsnVDZCf9F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776077600, "uuid": "cb0213a0-7837-4b3c-8ce0-0f6d4345b694", "value": 1204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776077600, "uuid": "8e445308-73eb-4a40-ad96-8e5a3dd13198", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb9f7a73-3728-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776078431, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776078431, "uuid": "756a1c1c-d966-47a0-8111-0bf99509af19", "comment": "Malware payload", "value": "a471467cb0e65ca0ed14e1ae5de8e091", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776078431, "uuid": "01b9e915-86f5-4887-b934-6fbe58ce595c", "comment": "Malware payload", "value": "70e963d55c7ba6b51176f21ccbf0a6d9f5326d6c98f0aba0e578bd31e16829fd", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776078431, "uuid": "51448b56-9664-48ed-bd63-6e96530190df", "value": "T19F562332DC543D02EA6543B668ED0DA9F7E5FDC24CB29822EB225327E44CEDC05995", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776078431, "uuid": "a61d8380-3a6e-4c4b-9328-e56c78f4b1bf", "value": "12288:BKXd/0VMkoCvJLA3eFuObcJ0wzehmVPVOLmmz:ajume0JUWUL/z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776078431, "uuid": "3e310d17-a8a3-4ace-9ac3-fb1170b570d4", "value": 6271188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776078431, "uuid": "01588803-3dfb-48d0-9f20-4c42591c4492", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73cf618a-3729-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776078660, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776078660, "uuid": "d82999d2-954b-406b-8a74-0280a58f3bbb", "comment": "Malware payload", "value": "b87ecfca742851851bb6ffb870a1a496", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776078660, "uuid": "32220ff1-4e9b-479d-9a27-252bb41cf2ad", "comment": "Malware payload", "value": "cd08161e298d498cc5e74e36d47e0294ae8ac0b24090b6ceec81c8c3d39c320b", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776078660, "uuid": "242fb70d-ee30-46b8-a15c-9c24dfb0568b", "value": "T125F2865AC177038C340BD4B52BA1778732907127E64AE82DBFDDE1144F46EE996E2F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776078660, "uuid": "f1aaab5c-545d-4813-9198-d4e2fdc8a80c", "value": "768:olrFlF3ZJFEF3WMZ2m2rBQ2dvYCceIaut2:s3N2kG2m2Fv5Iaut2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776078660, "uuid": "73690186-f5f4-4727-8706-e33f492920fb", "value": 35181, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776078660, "uuid": "91959c98-5d46-4aef-9fbf-317d30aba5a1", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a44a0ced-372a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776079170, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776079170, "uuid": "ee5a0a31-c0cb-4b2b-9837-28b135c7a178", "comment": "Malware payload", "value": "8f173b1d0740408d5ca14689adf95156", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776079170, "uuid": "faadcc11-d5c7-4923-a09e-70fff1c3029e", "comment": "Malware payload", "value": "47170790d3a9d679eae9a4831a8d9631770a42aa912c83b28ddb77b923b37fbf", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776079170, "uuid": "9b18f528-30e8-4be2-894d-db3daa9c90bc", "value": "T19D24CFBC14426D9916AFE64BFDF857C11AEF4D014B0C6AC6F59078A4EB0B0CDB76A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776079170, "uuid": "bb4ba973-3e61-497b-b231-440dc0b8089a", "value": "6144:vJ7/ymgPA3HU2V928VES9afavuK9ZVKj4P8WD1XM8Sd:vBvPkjgkKJK6ZDJMzd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776079170, "uuid": "3aac97bc-fcce-4886-8159-d5f09f5267bc", "value": 223316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776079170, "uuid": "a11c38c8-0577-45f1-919d-487a258fcf21", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f7eb94ac-372a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776079311, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776079311, "uuid": "2bfeeb6c-63b6-43d0-bc8d-ef5dd7912e85", "comment": "Malware payload", "value": "e6a199b0f7c76f387f238fe85d48e365", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776079311, "uuid": "a02c6d0d-945d-4d17-9a37-c659e2c5b13c", "comment": "Malware payload", "value": "739187611d87067d8d019271c6b3cda73bd1e2c430ee379d7cdc76ee7959ee29", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776079311, "uuid": "5421f42f-f38c-49cd-a6f1-2870022b2162", "value": "T11E34BC093E622D7D7EDFF56178213D1F713D642C1E9069088F56FCEA04BA87DE4852", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776079311, "uuid": "91470946-f692-483c-b04e-037a0213ac7e", "value": "6144:QcJzOQAce5z2h2cJZ5lmpT0ZRyTidwjYWy+hFDb/gdb8xDYi7:QcRzFkcLXmI0TWyYWycDb/giCc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776079311, "uuid": "600eae2b-bd87-4376-ae2e-4e02dc7509ee", "value": 239691, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776079311, "uuid": "38987812-9d1c-4d20-b3cc-cfc4b7ef8626", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "87beafac-0dc9-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776082511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776082511, "uuid": "17cc616a-039a-46d2-a15a-00345421a5bb", "comment": "Malware payload (Mirai)", "value": "907e108379a367dd4507ec57daa02370", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776082511, "uuid": "4fa752e5-c4e7-4a68-8d08-6f26317f8c0a", "comment": "Malware payload (Mirai)", "value": "043681008988394ea1995fd1e88cc50b281ab0a8120cac5178ea8c1df4930040", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776082511, "uuid": "386ce942-f684-4870-a55a-3dcdb026769a", "value": "T1A8C31BCABC858F10D5D665BAFE0E618D33134B78E3FA7103CE149B29278AC5B0A3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776082511, "uuid": "06b02ede-3ceb-4eb8-9093-99168b0f3638", "value": "3072:mI2wShxZcG8aE6gfXVp/43VLJ0mpxe2xDslxW68oFAlmjg2NF51n4:fGrUVp/43VLJ08eOs3W68oalUgUF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776082511, "uuid": "2c3185f2-2554-4119-94eb-62a053895088", "value": 120356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776082511, "uuid": "e3c0b7ae-f7b0-49ab-a35d-b1b66fee2ba7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d6b7420-3733-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776082810, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776082810, "uuid": "3a739f75-7163-4f0e-af78-b61efa22a822", "comment": "Malware payload", "value": "a29da715b28cdb0681240f52621dca73", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776082810, "uuid": "c4d0b435-41d3-4eef-967b-156ece0be7db", "comment": "Malware payload", "value": "d1b3ee1eebe0ce3208cd78f58bca2bef129a27c5860413949a43a7d74a20b188", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776082810, "uuid": "2ee16c63-3833-4548-bc46-328a023c2be8", "value": "T189D4234B013370F937EEB8F5F5CEC140E97A2525A572AE4A45F0B2412ACD981E6D63", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776082810, "uuid": "be281bbc-ee10-417e-a44b-36f6b219d423", "value": "12288:iNnUBKuMS+JTEehFsM2rt78manxnS4/zURG0M1gQLsN3Z9BsIpNcCjUOnZrg:iNnCK1SJeo7wV1gQAVsI2GW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776082810, "uuid": "0ddb4071-fda8-4dac-b2ec-a5311b21dd10", "value": 646720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776082810, "uuid": "c797bcad-085b-418d-bb9c-df4e42e91517", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "efbcd4af-3734-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776083592, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776083592, "uuid": "4ed4f925-495d-4983-beb0-78e97c74d5f8", "comment": "Malware payload", "value": "65ddc53db705479e1e64a2d2bfec04e7", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776083592, "uuid": "2d0fdc58-1c07-4a71-b95a-c13f4606f14e", "comment": "Malware payload", "value": "cdcaf925f97e40db1f113e798ab75f0f4c29420034a213d083949b6b74e9e712", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776083592, "uuid": "cfd52184-673d-454c-9b06-61bfec7b0309", "value": "T1CBB59E5393EC41E4F0774A7488698716EEF1BC250B74A6DF0285F61E2F33AC25A767", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776083592, "uuid": "d25ff736-e630-43c1-a765-860aae148281", "value": "74a352b7be38be736b4f1e0d51b66e8c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776083592, "uuid": "530743b7-791f-44cd-ad02-427f5d3f458d", "value": "24576:RTVGQGQatHHJKFqKeB1vc4ZcVsof9gctPAPtEGH5AQoV6FaTv8:NcQxeHJKFqKevv7m9gctYPbH51a78", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776083592, "uuid": "9a4a88f3-9e4a-4edd-9f66-ad4fbe862259", "value": 2397064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776083592, "uuid": "54b4582a-3a39-40b1-8329-e9f75a0045e5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f159cda1-3734-11f1-bc00-82aee05be84a", "comment": "Malware payload (DarkVisionRAT)", "timestamp": 1776083595, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776083595, "uuid": "2aadff0b-2eb8-415e-b1df-135d68036e0e", "comment": "Malware payload (DarkVisionRAT)", "value": "196a4f96bcee91d47ab98e0b4001f94c", "object_relation": "md5", "Tag": [ { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776083595, "uuid": "e41c3ac0-3e4e-4108-a769-c98aea120ec7", "comment": "Malware payload (DarkVisionRAT)", "value": "803fe54cb469b3a6789503e1c4bdc4906123f12c7b53e1debd878be0fd80db3a", "object_relation": "sha256", "Tag": [ { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776083595, "uuid": "0d5af2da-9738-460e-8ede-7f3bb4c9be6d", "value": "T1BB853186F603ED4BE3C8E8349825DA76526637BE97F348B9BC5CB5D8F21A5533014E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776083595, "uuid": "75545b6a-0861-41c4-8ba9-496fb4dfcc22", "value": "ba97054af11f5f97ddc31afd102f128f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776083595, "uuid": "57378d7f-7b74-4335-888d-0d1361eca0ec", "value": "12288:FtkzATNQQVOw2iGbNiDYY3YQqLWQc0qpb0qD0xc:fkzwlKbNiDYY3YJLnq2qDF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776083595, "uuid": "e994cac4-af74-4101-87f2-4053c809409a", "value": 1857024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776083595, "uuid": "0210e374-031b-4f99-b239-341f63e445e0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ec2baf0-3736-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776084127, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776084127, "uuid": "980f056c-e74f-470e-be82-1439f3cfb540", "comment": "Malware payload", "value": "27e9def766a2c37653d446141c302088", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776084127, "uuid": "17586c5f-04a1-476d-9179-5c511e87c08c", "comment": "Malware payload", "value": "1be5d7ecc54005badf1cc4bd6503bd8771e74fb2ad5cf6de3f690316224e2f21", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776084127, "uuid": "e3efee90-8b7c-4498-943b-727c5f05745b", "value": "T11B746B55B6A408F9E967823CC9A34A06D7F2BC560770EBCF03A046965F277D09E3E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776084127, "uuid": "c2e105ad-0aef-4f91-9733-5dcf2ae5b717", "value": "c59b379fe0b813ba434c2a225c8fce49", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776084127, "uuid": "ce754cc2-efe2-49a2-a075-d7dc634c5b1a", "value": "6144:rdnTQIGOEzuYzN9NcvgY+MFbnHTfXDt12CKNNHQB/ay:rz/2cFHFbnHj72tFQha", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776084127, "uuid": "bc9363dc-3ea0-4faf-8be8-20ca55b78791", "value": 347136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776084127, "uuid": "fb132cb0-1bab-453d-a6d8-a286040d0fca", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f02fbf6-3736-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776084128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776084128, "uuid": "5c4b091f-1702-4baa-8676-a8e6faa22116", "comment": "Malware payload", "value": "5192561d6639ec163fe8fa48ee0f4e25", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776084128, "uuid": "30c511dd-b89c-4d83-b0af-92fea68c4d19", "comment": "Malware payload", "value": "addadf460d1ef9a500f288cb6ea8fae28e00bf30c9f028fdb53d5060cea6b20b", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776084128, "uuid": "fab50a87-0277-4a15-97b7-49c1ddd14567", "value": "T15DA5E40D401487DCC97EC13684CF219EA010362C567C6FBEB5A66EB05E79BD43EE1A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776084128, "uuid": "45b212af-c8af-4794-8bbf-e83c7be377e6", "value": "929600d6844bcbb35be39d144f6e744c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776084128, "uuid": "4be05407-a50a-4bcb-a14c-3daccb7f7972", "value": "24576:YXIsHUhKq0mYSw0JfQ/27SfDTmcH1fCItikF2G8Pu5Rw+AP:YYw/wBK5dlE6B8kw+q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776084128, "uuid": "f5a57113-b637-4dc4-8a57-f5b154e2f3da", "value": 2167296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776084128, "uuid": "b22413d6-5c40-4239-8f26-09ec9ae7362a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f49626a-3736-11f1-bc00-82aee05be84a", "comment": "Malware payload (Smoke Loader)", "timestamp": 1776084128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776084128, "uuid": "1967658b-79b0-40b5-b26e-80c7800c496c", "comment": "Malware payload (Smoke Loader)", "value": "8b95940c6c587fc4aac994ef9951de2b", "object_relation": "md5", "Tag": [ { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776084128, "uuid": "8d9d9940-3467-4731-920c-c8f97d16eec9", "comment": "Malware payload (Smoke Loader)", "value": "5323a56106f3cb80ef4e78a438e366957b16d41460b874f9cde9c11c7f0015ef", "object_relation": "sha256", "Tag": [ { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776084128, "uuid": "c2e260f8-ef9a-44a8-9ece-5c37a9053238", "value": "T1B8A56C0BAC9509FAC46AA73588B616917B70FC490B3233D72E90BA783F727E05E357", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776084128, "uuid": "0cc366de-56a2-4da8-9f04-00ac3cfa1871", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776084128, "uuid": "30665899-eba7-42ff-90e0-ef1a81979b12", "value": "24576:a4qE4EP0CjRrTHigkfq1s7+3u+311Ld3hheleh2KmMqm27IcS:a4q/80C5THigVS7+3u+31q+2Ib", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776084128, "uuid": "61b52c28-dca9-4702-9263-85b68c2fa7e3", "value": 2132112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776084128, "uuid": "70c753fb-94cd-45f0-b1dc-b87b937b7645", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b88ebf5-3738-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776084927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776084927, "uuid": "008d80d2-8947-4844-96b6-c3d556573fb0", "comment": "Malware payload (Mirai)", "value": "20e2ef94729a0585cfc4949d136d594a", "object_relation": "md5", "Tag": [ { "name": "176-65-139-25", "colour": "#7645b7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776084927, "uuid": "0d5cb39d-7bb5-4123-87ec-4c4ca3baa7bf", "comment": "Malware payload (Mirai)", "value": "2284556a1692fcd26b7e8f248304a6ce3c45c3fc4fd648ff3ab938704121c964", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-25", "colour": "#7645b7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776084927, "uuid": "538773a1-3ef1-4858-9ca6-a9506b80897b", "value": "T1D0042A45AA404B13C0D627BAF6DF42463333EB5497EB73069528AFB43F867AE4F126", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776084927, "uuid": "fbaee150-6eff-4d00-bfda-ad17b29ad1ab", "value": "3072:mcq5CdNijqyXgMcmavNZzG2mJUXeB6F+g3vR+oiM/RF+1guC:NqMdgqyQvmavNZzG2m0Z+g3JniM/RA1Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776084927, "uuid": "ab15a789-e29a-4b92-9b85-e8b6eabb2182", "value": 183902, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776084927, "uuid": "a8e85644-9cdf-4958-b802-c99fccdf964f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f541367b-3739-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776085749, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776085749, "uuid": "ef18f135-9322-4fd8-a4a5-9d3be1096f3c", "comment": "Malware payload", "value": "47e4bd8f8aa09fcdd3aaaae8656acbb1", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776085749, "uuid": "efc93cc0-9b55-4eb9-ac87-1358d9e87dd6", "comment": "Malware payload", "value": "60d54e63622e49921750f1720ed2e1ab52fe12e37412b5a4bf8e7d85defdef11", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776085749, "uuid": "25985ce1-24f5-449d-b15e-97ec375692cf", "value": "T12B07F76F14DA9E6197EE96C544B23F183374B6112C17292BB6FD34EB8A713B42C82F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776085749, "uuid": "cb0b927d-ff3a-4466-b713-c88c3442324a", "value": "49152:8UixbItdTrJoFVPMvXGdqMoAf+OwlDSjoBbwnO4UMK54L2wtISZqPrkn5DHp4ucK:7iBI/JoFdMPGr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776085749, "uuid": "5ad213ba-46db-43a2-a7d6-f537a0bc5920", "value": 17189029, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776085749, "uuid": "38690cbb-1d05-41fa-8c55-db19412415e9", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f7557a40-3739-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776085752, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776085752, "uuid": "ce5d567d-0400-4d9e-8793-02849710d8a6", "comment": "Malware payload", "value": "07841f50726bec82552b6904200078cf", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776085752, "uuid": "c3fdeafb-2b91-48b9-9138-2633ba18830d", "comment": "Malware payload", "value": "1402525a184dc3be39daed0db0bbd21f1aa008dc8d9b283565efcafde96486a7", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776085752, "uuid": "ba58be77-928f-4070-9e23-b17475bc5564", "value": "T1C2A537E288B0FF17B7661D1873745E691018153B0FDB0209B8BEDBC67683DAA346F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776085752, "uuid": "77f0710c-1feb-4a77-95dc-efcf46e49aa5", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFTx:m0eF4xaDjDONijDG8ZxFTx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776085752, "uuid": "2c6b3113-3f6b-493d-920b-2befc61e0279", "value": 2152312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776085752, "uuid": "886c86a4-bf20-4f65-8720-da12f74d77b1", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8720d522-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776085993, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776085993, "uuid": "ac9f6a7d-9a7b-48ad-ab06-b7554547652d", "comment": "Malware payload", "value": "b3ee84f41b7f82459b2c5a3c2c4b4ec5", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776085993, "uuid": "b8028c64-eea7-45f1-a082-8edf381c5bee", "comment": "Malware payload", "value": "b42a7af2bb90504067d0574abce06fc1b1becc880d17677de998f1c821fda347", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776085993, "uuid": "c1961e76-0d07-4f3f-bf0c-aca613e2798e", "value": "T19541B5EFE4169338CE43467401AA6C9DDF12E63B65029050FA8C4D45BF109B5F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776085993, "uuid": "8e243e88-da84-42bb-bbff-1c75912ba504", "value": "48:w22kMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:AkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776085993, "uuid": "775cdd55-a7f0-4a9e-9735-4713e0ae3632", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776085993, "uuid": "a048d03c-9402-48bc-9191-50bcfb25d0ae", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a804765e-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086049, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086049, "uuid": "22dc020c-de60-4e2c-809e-fc59d00e7816", "comment": "Malware payload", "value": "06e33441219ffa249f762af5276dc369", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086049, "uuid": "393a75ac-5c77-46ea-9a0c-5e3b094984c6", "comment": "Malware payload", "value": "ac81fd6a3c0db10cb2458ae230842f16b5500e65bf1e41c65b2c8e51a866cfbe", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086049, "uuid": "5e390577-c7bc-4ae6-b84d-8f9d6d8c7a76", "value": "T1C0C27D52BEA4E17867CF330776F4F9D24438BBB2A08DAA0C60DE54C117D8BE0E66C5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086049, "uuid": "3e9906ba-a1aa-46f8-98f5-b222ff5e264d", "value": "384:m33CrvXmUZvWbKeFuXvFr6FO8j1zx4RlkUGHvSuxVJZ0uu0n:mCDZ+hENr6c8jMRSBlftn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086049, "uuid": "10b337f4-affa-4bb0-8a4c-352d65923529", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086049, "uuid": "773a32b6-e0ff-4d09-bd91-1eaa0011be78", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a80c2840-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086049, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086049, "uuid": "bcb37d35-1fb7-446e-b362-c502f465bc01", "comment": "Malware payload", "value": "dbd961b43889d964599c17a962821835", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086049, "uuid": "58518add-585e-4fd1-9b08-3c2fc2ad82d4", "comment": "Malware payload", "value": "d3093968a1733a518c8c63d25a7aee8d2a8fc426ab1fdabeb6ae39d3b841c716", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086049, "uuid": "b6b0aa3e-6310-4b68-9b3f-ae2ba7f08483", "value": "T16BC27D62BE94E07897CF730776F4F8A258347BB2A08E690CA1DE44C157D8BE0B67C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086049, "uuid": "e4f5dabf-f3f2-4c49-a581-5bb285fdb51b", "value": "384:/3CrVI8XAmfCBzkyQMynaKC3hrwMemj/kAgTk3yiUNLYGX:qrZwmqJkyQM8MLFjDgTynU1Y2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086049, "uuid": "6f9886cd-a7c4-4943-8e1a-abc12a7b2c02", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086049, "uuid": "ce44651f-d773-4b6e-a6c7-125e55d83209", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a8279c03-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086049, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086049, "uuid": "c33b3005-8b22-4bf3-ba6a-d79413bd0efb", "comment": "Malware payload", "value": "e030cea965fa24a0333329f02e6097a6", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086049, "uuid": "91501788-8211-42b3-a9a1-f3b5c694fc28", "comment": "Malware payload", "value": "c7c3f03be566d40b05293eb47069275ed543a91b19bae7e940f45a588dce3c56", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086049, "uuid": "2c4b9915-f87e-44d4-b2b1-66d93d5d1f21", "value": "T16DC27DA1BE95F0B45BCF331776F4F8924538BBB2909DA90C60DE949113DDBD0EA2C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086049, "uuid": "85ece6e4-8f64-4920-9d90-b693a4b7f871", "value": "384:f3C7vg3l13FQJwOhemAt+JQvU1uf51InfFjl9XrKGj5qJExqj:K7vSP1QWEjO/afFjDXrZqWIj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086049, "uuid": "c8bc8671-d99c-4423-8459-30f12f4106cd", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086049, "uuid": "cd631498-05ae-4d6d-91b9-8fba10c8f34f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9fe99f4-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086052, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086052, "uuid": "0cba34d6-62f8-464b-89f5-760719a3c4b3", "comment": "Malware payload", "value": "86ef8a1af0abc1eec178cfac21ffe2cb", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086052, "uuid": "7cbdb03c-7071-4bae-a197-916bdb1b4fed", "comment": "Malware payload", "value": "5d1ab0e2c79bc6961934479397c7a1eaa96cba562c3f7aaef7897484668e4213", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086052, "uuid": "9f613220-2255-4f2f-a781-fda4fdfd917f", "value": "T13FC26DA27E54E0B557CF730776F4F8968434BB72908DA50CA1DE54C227D8FD0A63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086052, "uuid": "0dc6d284-ef30-4f39-9f31-fc6e5e01f42a", "value": "384:lL3C+yPAP2QIFS3WqAK+Jec45VpPNyOmvYde+jb9BOZZ+cLDfh+wn2b:ExIP2n/qvUR0pE8HOG6DZHn2b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086052, "uuid": "1e15bc4a-79bc-4e22-9d75-7047e3fbf142", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086052, "uuid": "0ac777fb-7fb3-4e1f-8763-bb89fd7d9c3f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad2cce67-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086057, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086057, "uuid": "7dae14d8-4264-4a0d-b312-e4d147ae27ba", "comment": "Malware payload", "value": "876c6a6562f50e30ea74ca465f5419d3", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086057, "uuid": "f892e1ec-c17c-4d8b-be97-6c42cf9e7730", "comment": "Malware payload", "value": "e9a95b9d37c0bff00de8abbae2f58c446b08acad34917e5c96a260f0105cff2c", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086057, "uuid": "64238c5b-1125-42a3-8848-de318311573f", "value": "T140C28E62BEA4E0B457CF370776F0F8958938BBB1908E690C61DE94D153DCAE0E63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086057, "uuid": "8f14608c-6709-474b-b0d3-c8da80735682", "value": "384:E3CzTB4C8Ad//vMMc4lDPVySb1foXuC0fsaupx1G0BBaycGyJmr2Ak:LOC8Ad/ML4lDP91cv0Ux1JRtm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086057, "uuid": "cbd70568-c550-4953-97d5-49993d3ca0df", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086057, "uuid": "027033de-e1a2-43b3-842e-aec99ac1aa8c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad5aca59-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086058, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086058, "uuid": "5fc13c96-4a88-478b-9bcb-5d05c02ca840", "comment": "Malware payload", "value": "cd4e709b8b532f2089ebe0b44689dfea", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086058, "uuid": "04e89820-d827-46df-aadc-79ddd7fbc13c", "comment": "Malware payload", "value": "60775b3ed3a3c0f299dadfb1e2b52e04bcdc9a38d44e4bdd7298832c2f31607c", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086058, "uuid": "8157d90f-e351-4756-a7d8-0329a443aa40", "value": "T12FC27D62BE54E1B857CF37077AF4F9A64538ABB1A09D694C60DE84C113DCBE0A63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086058, "uuid": "b160f224-6ef0-461d-b216-f262e2fe2227", "value": "384:v3C+mEXU+QeyVt+wPHp+3ImajBDtYeUpXa6M:a4k+a+baHYv9a6M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086058, "uuid": "19c64e57-4831-4290-9e68-80e07673121b", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086058, "uuid": "61a64c17-12a3-45bf-8d70-49ada5e2313c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0f01e54-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086064, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086064, "uuid": "3682ca7b-83f9-467c-a715-2d2a1f6de216", "comment": "Malware payload", "value": "b14a18c7cd166dc77f044c9ea2d043b7", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086064, "uuid": "3b4f6ee1-87e7-4422-bd0e-8e83f9380b54", "comment": "Malware payload", "value": "64b003b36789597286d92aeb6c3976dbd4f758f7a3bfcbef5b89bee776582ea2", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086064, "uuid": "259c5614-2002-41ea-83c6-25ed992d9744", "value": "T105C28E517EA4F0B467CF330776F4F8928838BBB1A09DA90D65DE54C523DCAD0A63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086064, "uuid": "48af1006-ea9e-454b-9721-f3fa6af65adf", "value": "384:o3CdLYpvKbjavU4xk+sZ3RbezqHU9ESKsLDIJV7udDc205eSaH+nguK:XdLmvfk+8YZdL0JV7KY205FaHiK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086064, "uuid": "f38c206e-3a1f-4825-97b2-ed4894707e46", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086064, "uuid": "2846af45-58a4-446b-8332-52abf61efe98", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b50a88ce-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086071, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086071, "uuid": "b67a3c0d-b6fa-431f-b9f3-6486bac0a19e", "comment": "Malware payload", "value": "69d68e791b26a5ece8636b3dbd8e4e53", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086071, "uuid": "91366a54-89cd-40fb-b205-0473bf1e4e65", "comment": "Malware payload", "value": "d7a5718c525d6ec9c9a22cfb2b070cbaa6d62869d7db684ef147070acc9f5a8d", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086071, "uuid": "71dccf90-6a0e-4571-9f8f-fbaa29df2b05", "value": "T1DEC27D61BE55E1B86BCF330B7BF4F8D25534B772A09D650CA0DA44C127D8FE0A62C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086071, "uuid": "77b97357-38ba-4cb1-8416-1493bd134e9d", "value": "384:K+3ChZoAdvxHth3PnCZF/FNF46jqqypV7Abz2sNL:KVhZoAzHDKZZPW6SS2g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086071, "uuid": "8f56a951-0d06-4af7-b51b-e3c92564816f", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086071, "uuid": "88d1cf7a-c3f6-490a-84d2-a3f574deec45", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b50b84ad-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086071, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086071, "uuid": "d6b8fc91-d44d-42c7-a920-94de0e79e950", "comment": "Malware payload", "value": "d77b6a77bc66f9fa20e0f6eb8d80b877", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086071, "uuid": "4e554b4e-ec64-4dd7-b290-1559e5a41fde", "comment": "Malware payload", "value": "589e51cf3b9774da549c1f38603678c36778a0eca5c56e9f1a290eaa4632d7f3", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086071, "uuid": "d3ba3c80-4ba5-4df5-81e0-58a14fe64bad", "value": "T1D0C27C527E54E1B45BCF370776F4F8A658386B76A08D690C61DE84C163DCFE0E52C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086071, "uuid": "b591b18e-acaf-4631-b396-baac892e19d3", "value": "384:bN3CDpQpyOfgEkromLycl8CJl87f+XHaKdbF6PlRzWXkw2cZvERd3S:boDWyAgft/nJlECHLdp6PlpUsi4S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086071, "uuid": "72532d0c-ecff-4779-8d92-31e1ab34ec33", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086071, "uuid": "b5ddcb24-2a9a-4bb8-9165-a7d648c9efd7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7718f98-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086075, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086075, "uuid": "ae1b78f9-8f76-49dc-800a-f8ca7a10c7c8", "comment": "Malware payload", "value": "f6b1e842915be28df1d56e1d8337391a", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086075, "uuid": "1e6b9737-dd46-466c-a0e5-b2f92a8621cb", "comment": "Malware payload", "value": "3504e6243d39bb201cf0fb1ecfa2309eb108314fc249ea24fdccf2eedc1ae3ea", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086075, "uuid": "ec977bb0-7f5e-4d88-b26f-c087dd18fece", "value": "T17FC27B627E94E0B497CF370B76F0F8968534BBB1A09D690C50EE54C163DDAE0AA3C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086075, "uuid": "cab97b40-8a15-43aa-932a-c20ceb24f7ab", "value": "384:d3CUm3jeoEOmDJ70q56IYnKqz2DOAuKzDQdmch08DnfQWm2gw:47fEOmDJ7f51YnfKD19zDohbD4Wm25", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086075, "uuid": "4591d343-ba3c-4736-b48e-53e77fa2833e", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086075, "uuid": "e39a98b4-2b37-4919-9088-94c5cac1cfe6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7734ca4-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086075, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086075, "uuid": "87940c84-97cb-4471-9886-0b49d07b2650", "comment": "Malware payload", "value": "1c017548568a3672c08b0574e8a59e92", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086075, "uuid": "78fd20cd-a21c-4d39-81f2-346d36f0026e", "comment": "Malware payload", "value": "c0b6ec2b9d6d355796db0465e24285961d90c35c82c63745379fc3c861a5e737", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086075, "uuid": "08db4ebc-5819-4122-8ae8-8a9906c979eb", "value": "T11CC28E62BE68F4745BCF330B7AF0F8924434BBB6909D650864DE548163DCFE0A63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086075, "uuid": "6c70f7ed-784e-4364-bb6c-a6e85686c328", "value": "384:s3CiC2pa/LM+9r9d1FRhXxe4+1nI+PL8lbxNpKEK2ca:z35TFHSIg2XpKEKU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086075, "uuid": "b16e66b6-5a6d-4a30-937e-cf804ae0e2b5", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086075, "uuid": "538b43a3-2938-4e98-84ad-1418185454ae", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba02cdae-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086079, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086079, "uuid": "614944c5-04fd-4dfe-bf98-eefa7389c187", "comment": "Malware payload", "value": "3198c1e200b1ffbe3a14de0b167739eb", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086079, "uuid": "9c7e6a0c-234d-4645-8bc6-990bb43850ec", "comment": "Malware payload", "value": "4aff7b1a337a2d2be83f7643d7238c6e1f3eb93b3f7bf9bb99687c4fab7a0fff", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086079, "uuid": "617e1f05-e353-44bf-b075-f55c887b3516", "value": "T17DC26D627E94E07497CF771776F4F8D289387BB2909DA90C61DA90C117DCBE0A63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086079, "uuid": "e8587dca-5997-4196-a07a-4b2098aab891", "value": "384:sB3C4rzsuks+8JuD5CF7roLYhe8zXxzYUJKbMXpH2VkUs:zSzDJuDoJoIxiqx2ls", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086079, "uuid": "493b9740-9d02-44b0-9e70-c16241e3281e", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086079, "uuid": "3e019e84-008d-43d1-8272-4952eddb6b44", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc272fea-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086082, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086082, "uuid": "4f269b14-b604-45b2-adef-0fccf1cd96cb", "comment": "Malware payload", "value": "d1db2f0f1a705e0ee3f2b803a27c59e3", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086082, "uuid": "98a67a49-44ef-442e-aaf4-f6745d7d73c2", "comment": "Malware payload", "value": "ec8d7955a5262d00bbe2ecc8f37e765e7077778d4e6502d0f7161c3deb489dbe", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086082, "uuid": "a329a318-3b43-491f-9653-345544285e37", "value": "T1F4C27C62BEA4F1B85ACF371776F4F89685747B71908D690CA0EA44C623DCBE0F62C0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086082, "uuid": "e3f0f60f-d3de-4705-947d-528c248e9e06", "value": "768:cvJKo9+uw21y9jcJqFmj3BO7bexf4ZeDJ:cB2p212cJ+mQexf44d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086082, "uuid": "6e5f1511-1de8-4b3c-b1ad-e1cf6d500378", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086082, "uuid": "18d5f7ad-c1bb-47e2-bd24-ef4a1af85a0e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc38d4b2-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086083, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086083, "uuid": "5a077317-f902-44d8-8546-f7d69b3cbc04", "comment": "Malware payload", "value": "82c6349bdd1175492897a4c001ce1c9b", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086083, "uuid": "e79190a8-a90a-455d-ac85-5a213affa96a", "comment": "Malware payload", "value": "c64927f1ecb2a982054eb0198414c056865cad2fef34df494f8b5716867c3873", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086083, "uuid": "145f30f3-6861-46ae-9db8-22ee4b789195", "value": "T1C3C28D62BE94F0B89BCF37177AF4F8924534BBB1908DA90C61DA45C117DCAE0BA3C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086083, "uuid": "13f58b71-ed80-46cf-8d15-5892a2acd990", "value": "384:bA3C2ISX3krGWdR+h4ZQd1xQ7d6qT59ERhtYIhj+:bPQVWiJ1xydr59Edj+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086083, "uuid": "425b4a27-2227-4e9a-8e17-c6f4a15b347e", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086083, "uuid": "471d8d0e-e80e-4f0d-851c-827c76fd4ede", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc6240cf-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086083, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086083, "uuid": "e1daa34e-e4a9-40ae-af8e-d3cb82863463", "comment": "Malware payload", "value": "42e03d6e8218c76e00aebf09c9c29d1f", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086083, "uuid": "e0fc66c3-6cbd-42a5-a137-ad37f5758ae9", "comment": "Malware payload", "value": "0910f1fa8cd3b9d46c19edd824eabf8e382e5e444dc4be8f2dc69df2d0e6ff1d", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086083, "uuid": "1b8b7ef4-2e9f-47b9-bca5-10d60f543ed7", "value": "T12EC26D967E54E07867CF330B76F0F8A64538BB72A09E690D64DA84C117DDBE0E53C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086083, "uuid": "dc165ab0-0d19-4e9b-a9b5-6334aab79121", "value": "384:E3ClGszicD2ztHPLJvHzFmvyFGm9TD8LPG8SpdptYXywFJFrGHD:Ld4tHPLJvHqyFGm9UjSpdPxwF7r+D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086083, "uuid": "2342fdab-a95f-4b76-9b1f-a7fd249b7710", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086083, "uuid": "8dd02fb2-ca0a-4b85-bc54-8187363708ab", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd0c9e25-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086084, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086084, "uuid": "11051152-d197-4fcd-9767-680d54aedc59", "comment": "Malware payload", "value": "ef0fe08192a965c4679ee56bdd703090", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086084, "uuid": "742f34fc-0562-4b2e-9837-d22dbd048e9a", "comment": "Malware payload", "value": "de1c5c2442d472d3929a4ae78f38860a03723a49df4655d1e7cbd2725badd353", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086084, "uuid": "411f9f08-ab18-4705-b0f7-fb6e18cbe771", "value": "T144C27BA1BEA4E0B567CF370B76F0F8929534BBB1904DA90C60D954C157D8BE0F63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086084, "uuid": "f35d5e26-234e-4d06-a1d5-06eade0fd526", "value": "384:s3CMvnOlduF+KUhLy4iyzu4eXoQrgBQH1/H0+Kv4vMMEIqkEcHr5JV:zMPOldjKOyiHcbrkWH0+KwEMEDkXrfV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086084, "uuid": "5880b53e-a88e-414f-b7e7-ae03ec1d6027", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086084, "uuid": "e7d1c13e-75e8-45ae-b95f-85f699ca1d7d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bda3afda-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086085, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086085, "uuid": "e882af1b-3e47-4182-8fa0-c8772a2b781f", "comment": "Malware payload", "value": "5522f3fd15b2221e0d0730660537b5e1", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086085, "uuid": "5a49e7b3-8a87-4e33-afe5-78be739f23f2", "comment": "Malware payload", "value": "bac92e65b5c8889656a6105362e4409737ee4c65c9907693eca22769a35ffbee", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086085, "uuid": "6cd7095d-b521-4a59-a63b-bf2c4e00757b", "value": "T141C28DA27E54E0B897CF330776F4F8D69538BB75908D690861EE94C217DCBE0A53C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086085, "uuid": "a44730dd-8a99-4430-9862-c466fe33b8a1", "value": "384:sw3CI3uB4il6O4DKq8Mga5/KivfQ397jgbAGAFCG5jwEMXm0a:i6uB4VfKkgGnU94HAMva", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086085, "uuid": "f73e9b65-81b4-47ca-bc19-85b662c4e5f0", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086085, "uuid": "db464ad4-4abf-4808-86a3-a7afa78605df", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bdb0536c-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086085, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086085, "uuid": "9494d8d8-1480-49a7-aeb6-51a81a363772", "comment": "Malware payload", "value": "ebc321d16247d2aad55a047b9c14c011", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086085, "uuid": "54ead282-c494-4982-9af3-cb7118de329c", "comment": "Malware payload", "value": "fea3fca0c9e2c462edd1dad5458c4ae3008417431aaafe01c7010bdd4befda5d", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086085, "uuid": "81ae3c7f-d6e3-4e97-8ff3-7ee5e201d6da", "value": "T119C28D627E98E0B45BCF77077AF0F89649357BB1A08E650C61DA84C123DDBD0E63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086085, "uuid": "b71b12a2-e029-45cf-bd75-2c2cee49da95", "value": "384:i3C4fETwpL2PYJenpjCIB3QfORWIirVJqxrA:RyETwAQ8npmWRWIirLqe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086085, "uuid": "f6660a61-57f3-48c4-a999-9498832c53ec", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086085, "uuid": "78f468f9-1efc-4964-abde-ea86e827dc8a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf1fa37d-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086087, "uuid": "252aaf5d-e3a9-463d-abc6-6eb06e917588", "comment": "Malware payload", "value": "65637ebf77d7c2f423cd85362281c034", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086087, "uuid": "16d7f0da-67fb-43be-86ab-237ba9b0046b", "comment": "Malware payload", "value": "8a27c74f6d5556f76e7c18e1a8395feac542523a1383b300adb01d170c7f5884", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086087, "uuid": "77f48e5e-d5f3-4ee5-92fd-17be5f022d95", "value": "T1BBC27CA27E54F1B8A7CF721B77F0F8925534BBB1909D690C61DA848117DCFE0E62C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086087, "uuid": "ee2e8cb1-66ce-464c-9c24-2399c929a1c5", "value": "384:g3CTEhUBXMu3HKVIVcVE6G5zdt/WGYZBWg0AYl:v2UBcu3PME6Gt/WGYSvPl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086087, "uuid": "a1895d04-8bc1-4c01-a78d-fa3d6c2c1b43", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086087, "uuid": "3cfc60cb-7377-4390-905c-11e011854e53", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c295491f-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086093, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086093, "uuid": "e1dc5045-7ae7-409f-8350-56460d2f84da", "comment": "Malware payload", "value": "b756e819be244d51ef4dcb37f2560c2f", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086093, "uuid": "56e92e8a-2ad4-4209-b45a-56f74d488d0c", "comment": "Malware payload", "value": "81801315b40d4501fab18ca5e936fc763d2aa6d59ed8beb82e3fc1e8b5fb9ae9", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086093, "uuid": "de458e20-49e2-4833-9cf8-c94089f63252", "value": "T1C5C27C62BD58E0B856CF370776F4F8D289347BB6904DA90DA0DE94C117DCBE0EA2C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086093, "uuid": "4c451039-9c65-4199-92b5-cd9fbe090044", "value": "384:u33C2PDzdjuZWhBcTBBToaEfIZcTwY2NNmkDwUVROmM/D7+w:uC2P9juZyBcTHoaQMcT8NmkFVM/D7+w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086093, "uuid": "5d4971b6-24e4-4101-9e38-d9ad5c8f1d0b", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086093, "uuid": "dcd520c2-ab02-4c11-a13d-04061e111694", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c2a6a34d-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086093, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086093, "uuid": "6c20042f-9964-407e-a9d2-2a7fd321d764", "comment": "Malware payload", "value": "6949a0f29d4ac80796bdfbd1b9c61d66", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086093, "uuid": "6a40ab15-cc25-49f5-a556-335491d3a363", "comment": "Malware payload", "value": "9a4b148bfb9359615b0b103ebcc5be2c17da99a6824861b250d200c58c5ef211", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086093, "uuid": "f4b68a4c-a010-48f1-8a3f-63cd9838cbe5", "value": "T137C26CA27E94E0B867CF770776F4F8924534BBB1A08DA90CA0DA94C117DCFD0AA3C5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086093, "uuid": "9502b65d-c28c-43dd-a54c-58ead16c4fde", "value": "384:L3CWSH8hn7uxUQvhSrCehxYbiRJMUs3Fx9PheN/S1u4pomLsNG+CKMWD:eWSw7uxUEh7N+RJix95eNmtLghf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086093, "uuid": "ae810f45-340c-40bd-bd11-1ed2f7ec98fb", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086093, "uuid": "7f5e0eee-a09d-4c82-966e-86c2fc61637c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3ffc8fd-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086096, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086096, "uuid": "167d3e17-9938-49f8-a5af-0f8988114999", "comment": "Malware payload", "value": "9d8a8613d0827defc2a9d71fb78fe243", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086096, "uuid": "f42e6f47-23cb-4de2-bf3b-10dcfcf7beed", "comment": "Malware payload", "value": "ef808dcb674839580a487f4fa03bf586e379a78b629027bdca47c40ddc9f369b", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086096, "uuid": "4791a766-fbbf-426e-a060-0e269c39019f", "value": "T19DC26B617E54F47897CF371B66F4F8928438ABB2A05D694C60EE44C123DCBE0B63C5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086096, "uuid": "a1525d73-50ad-449a-b818-446db69d8a91", "value": "384:E3Cq1H9b3obYmNEooqPkfK6u5csI+1GVWM3esxbHjxXrlZfLvlg:Lq1HjmNEon16u5csP1GVSsxr9rlRtg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086096, "uuid": "88bbda82-c886-4e10-a806-d19ad8a1a94a", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086096, "uuid": "1ec2bffc-e997-4898-bdce-04c8f5dffc50", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c40897bb-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086096, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086096, "uuid": "5ad4d932-892c-4966-af90-81129acfe636", "comment": "Malware payload", "value": "829882c5807b27342253042a190e2e2b", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086096, "uuid": "ed0a2c80-8d4e-4c7e-8c2a-56ffbd4dcf14", "comment": "Malware payload", "value": "37873e9adecfb14f72169c53608f6af11966758c93643bf66d3c88eb52dbcce4", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086096, "uuid": "a02289aa-8a7c-4181-a9df-c8557107566d", "value": "T1FCC27D617EA4E0B45BCF370776F4F8A649347BB6A08E651C60DE50C213DCBE0B62C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086096, "uuid": "3970296f-f8d4-4713-a8e3-1f43b27ed7e3", "value": "768:J1zThh/H0NB7pMC5g/1zGuMiSNAch9JZAa:JthhH0NB7wzGxdB5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086096, "uuid": "d1c4ca52-ba94-44a8-a599-148591a8f445", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086096, "uuid": "34042b59-a1d1-48cf-81c8-35a8fa9ae98e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c42cfed6-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086096, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086096, "uuid": "47149bf4-9060-4556-a951-1f48c31b49ae", "comment": "Malware payload", "value": "52f6e65ba35effc21f9e673f805232b4", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086096, "uuid": "e825a4bd-5a95-4af0-befc-043600717475", "comment": "Malware payload", "value": "5528c443a65fc1f7cc68795cc0750cb7ba628432f6716ebadb25ec7460c3296d", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086096, "uuid": "df72c7ef-aba7-4074-9fea-2eab7fa67a1e", "value": "T143C28C527E98E0B45BCF771777F4F8A245347BB2A08DA90C60DA509117DCBE0EA3C5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086096, "uuid": "454a7a39-8d81-43d3-b9e2-39427becbe3a", "value": "384:re3C1ZqwM8hmy2TPBMDJDvjt8fCqgKYqSEqyPqs6ldOtiYk8TpQaM0uciPP2E2Y:r1Kw3t2ud58fCfEq8voFYSaM0uHXd2Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086096, "uuid": "8527bf4a-6502-4656-a530-bb6eab96742a", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086096, "uuid": "bd7bda2a-7bf6-4cc2-92cc-4932d98ba4d8", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5dea945-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086099, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086099, "uuid": "da6f10db-e3b2-4fb8-b678-e69e764b8659", "comment": "Malware payload", "value": "b82f630176111eb23896f722a2f7673e", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086099, "uuid": "4917432f-241d-4d82-ac2f-64242c877bc5", "comment": "Malware payload", "value": "6d46b856bd3347381b166be36516ee62b59988782b7a5afceab9b490cca227c8", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086099, "uuid": "61fb4cf3-34f3-444c-bed1-993f96642079", "value": "T197C27D52BE54E0B897CF370776B4F8928834B7B6A09D690C60DE94C117DCEE0E63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086099, "uuid": "69980872-bb98-4ff5-ac2b-098979e40038", "value": "384:Z3CCXDCCls4G6tVO2hqrZCHWPMOlgtT6pD+Rk3Oi8kxX7fiY:MCGCA6nOeqrU2Pjl06pDdd8kxX7T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086099, "uuid": "02ecd30a-7988-45bd-a0c5-59acbbfa0b48", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086099, "uuid": "a343e734-6f27-42b8-8f2e-6d28b6e3dc5f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6ae67f3-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086100, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086100, "uuid": "4b11ebe7-a208-453d-83f6-f593e70e22e8", "comment": "Malware payload", "value": "bbb89b2f652547bf1afe48a0ab383560", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086100, "uuid": "b9979f98-7b97-4b78-9ddc-2fdfe01f61d6", "comment": "Malware payload", "value": "29a45f77da759e27992427f90ff59fa8ef10f202fa30fd1d80263ab872ba3031", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086100, "uuid": "d067ae94-7893-4c58-be90-ff30fc0e04bd", "value": "T15BC28C62BE54E1B85BCF370B7AF4F89285387BB2A09D650860EE44C157DDED0E63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086100, "uuid": "1487b6cd-e75c-4f1a-bdf7-04a0401d2351", "value": "384:R3CXGriwKrZgD/FaixbhvJo1riMuSPzvdkuXuk0jACIC:kX4hIwbxW9R7ik+9IC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086100, "uuid": "365b5a1a-74c5-4283-813f-e34d2dfbf164", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086100, "uuid": "a57932a4-3e5f-48ac-950a-5d9eeda12ac7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca96d8f8-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086107, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086107, "uuid": "ad76694a-47b1-4167-9776-3f03e6621e57", "comment": "Malware payload", "value": "e2a01c2c07fd06037b42d56b2343a68e", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086107, "uuid": "451a19f9-8fa4-403e-a407-bdd28d261381", "comment": "Malware payload", "value": "7be2337571000e733b95b54867d5e4d0a71f3c5c6f6181423122f905e4cdd9c2", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086107, "uuid": "e7919665-e09e-40ba-9853-f4d428adc730", "value": "T11BC27D62BE98E0785BCF370776F4F89645386BB5908E690CA1EE50C117DDFE0A62C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086107, "uuid": "48b33db5-a8ed-4d1f-a36a-bd6b64abe5a1", "value": "384:s3CvcMoNbZUmBleKrGiLO9Rx8BQVxd/uI6UoGTfIkU:z0M0bZdn+9R9fd/uIbdIP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086107, "uuid": "b79a8305-8f1a-4c66-ac0a-3b956cdfd455", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086107, "uuid": "ed62f14c-1a4b-4c84-ab1a-45ae3307ec38", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cab83ec4-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086107, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086107, "uuid": "c38d9dc6-3e6e-4f11-9db2-1b7cc28626bc", "comment": "Malware payload", "value": "c7c0fe3ee8a204cbcd41e9e9eb4165e5", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086107, "uuid": "a67578cc-6923-4a9e-91ea-cb625ea96f52", "comment": "Malware payload", "value": "80d212fe338d1a70f790f6a5ff5b68503d121f2eedb7e7b26d1dc4a8714e1612", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086107, "uuid": "b3187364-5e40-4a34-a221-97a0424de8f8", "value": "T1EFC28D62BE54F4B497CF33077AF4F8A24534BBB2A08D694CA0DE80C157D9BE0A63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086107, "uuid": "c6dc31da-5a0d-4082-bbf3-b321e16017b1", "value": "384:o93C3rL5jNyuaSgIrUVEEfi5hjU0I+7JTO6pjzByRUwzc8Md:oYbtj99SHi5hFIYJiAQRUac8Md", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086107, "uuid": "37a88482-e7e6-4d64-883d-950757d9051d", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086107, "uuid": "27d07b73-3036-484c-bd68-241a6abdb89a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb409131-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086108, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086108, "uuid": "548b9b3f-a200-476d-94a4-8992f0e25d46", "comment": "Malware payload", "value": "dc73c623afc727c260b49238de7b4a8f", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086108, "uuid": "54784ff2-3c1c-465e-857b-64e1e97d6c96", "comment": "Malware payload", "value": "d7ead03611b3de830c09de450bfc9ceed5716ec5c0155713d65643d4b0404a35", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086108, "uuid": "05a1fa23-6fd5-478f-8ead-89462c7b2687", "value": "T1F7C28D627E54F0B857CF331777B4F9924538ABB2A08EA94C60DE448153D8BE0E63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086108, "uuid": "1bfc1da2-6c89-41b6-903b-9f6004cdcb30", "value": "384:o3CkasJRjT/Go07KKL8Xkdj8Ivst9AiYdQA8z22yRDGgi8XxWs0XMl3:XkaeQ4UPEkiYL8z8t3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086108, "uuid": "4263198a-f766-4f6f-9217-105a6bf3acb4", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086108, "uuid": "be39b736-6c53-4b31-970b-1a84b1018897", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc8d4c6d-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086110, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086110, "uuid": "7357aa20-91ee-4233-afd0-70fdf7a5e8c7", "comment": "Malware payload", "value": "386de35a486b46b26443068172476eab", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086110, "uuid": "1dc12893-67aa-49eb-85cf-8ca04dc4e160", "comment": "Malware payload", "value": "620677cf9e998625ba3568b9e0f348cc4e8c7a318ff85b1f2a4613aa67357f8a", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086110, "uuid": "b7ac5cab-fd0b-484c-8c1d-70b862c92f2a", "value": "T151C28D61BEA4E0B897CF370776F4F8914938BB72A08E6908A4DE54C117DCBE4E53C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086110, "uuid": "a68cf5b5-d4fc-4a01-b88c-453d95006cf2", "value": "384:Vf3CpolsYzsoa6pyCXR+HvwoFEEFC21m0Ebb8d56c3+IJApOdDxpy:VKpkzAib+HvwoC5rhbgdEcOupq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086110, "uuid": "262098f6-8da0-4c33-b84f-8c3da583ebf9", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086110, "uuid": "db8c2c25-39b8-4852-b683-412800ba98ed", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce77786e-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086113, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086113, "uuid": "00ac1abb-b13a-46a5-b143-087326c12307", "comment": "Malware payload", "value": "7783c568bd08379da75b00865d86fa54", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086113, "uuid": "2de44c41-0a4a-4401-a5c2-ba3eadf95600", "comment": "Malware payload", "value": "25a81de72fd1123798828b42558885a70ae32a00dc323ce52d2f43ef1ab1c487", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086113, "uuid": "7f2b5256-5ea0-43f0-9f1e-1708854368b1", "value": "T13BC27D62BE64E0B86BCF770B67F4F8A249387BB5A09DA90C50DE54C117DCAD0E63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086113, "uuid": "7771efd1-78c7-4aa9-84de-f66e46629d8b", "value": "384:V3CQkBQlavY1CyNfb049QyfQMIwKMrpwwm7yEviauC0Ervf2ygySQiuFzIZ2:wQOQla0NzYyftI4twoE6gdrvdTAuFUZ2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086113, "uuid": "59fdf8f6-d9a0-48c3-b895-3a449ed00084", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086113, "uuid": "d91e8835-e976-4a3e-8cd8-e095eacb6b79", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cf85a30a-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086115, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086115, "uuid": "d67edd84-14c2-44a6-938a-aac4dc3f082a", "comment": "Malware payload", "value": "6e588e5f4b4938c9ad470a9b6352d183", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086115, "uuid": "0b4b5b6c-51b1-4e8f-8f53-68858fb058e5", "comment": "Malware payload", "value": "c27f06f5080a64e537503e3e247d25e86fe5fc88487b778f22f19592d0d29956", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086115, "uuid": "6e6eedfe-0e2e-4e91-b2a3-c6c86f2e9a34", "value": "T1E0C28E627E54E07857CF370776F4F8A64938BBB6908D690CA0EE54C127DCEE0E62C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086115, "uuid": "d7a80093-ba56-4314-8be8-80a01c343b8b", "value": "768:kPamepXjOD7VpEAPdp+batQ6xST6G7fRBo:kTeVj+7D7n+4QQy6Gt2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086115, "uuid": "26a5c148-49fa-432d-8ae9-3ac875817c08", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086115, "uuid": "2a9f95c4-8e03-4b0a-95fc-f5fa5633b938", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d00c2360-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086116, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086116, "uuid": "0a5114f8-48b0-4212-a88d-1127b4e79442", "comment": "Malware payload", "value": "7698fdd414d6f814c368dd553bd9c8db", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086116, "uuid": "6bebbaa2-3423-4026-91b9-362383ef8341", "comment": "Malware payload", "value": "d9cb25c70934869b9f174bf1013018d63749a746862557f73bc81c7f59c0a4ec", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086116, "uuid": "4eff8fb9-7a08-43b7-b32a-384da5520d10", "value": "T12EC27C627E98F0B857CF7607BAF4F8964434BBB2A08DA90C60DA44C153DCFE0A93D1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086116, "uuid": "cfad37d5-b5d2-4855-a645-0c93ec5e1665", "value": "384:q3CUmOQKg0t0gtSsQvsMC2bisBHEsuljTtNzlOdW+h3gOq+WwA7+Z:5tvatAvCuiWXW3t35+Kr+Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086116, "uuid": "685bbbc9-9e01-419f-8702-ecaca58bb8fc", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086116, "uuid": "b768da55-1a3f-4b53-b762-73c41112d26e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d07d974e-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086117, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086117, "uuid": "39854095-0183-4b44-a55c-1cc74d37568c", "comment": "Malware payload", "value": "af624d55c20210cc7ee3e4e0b2f764fe", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086117, "uuid": "3d92faa2-b066-468d-8ac2-410ca26c93b5", "comment": "Malware payload", "value": "d6c71de00c9d5b7383e60968fcc74ebb2b5e468350fa9b601a434ace5f02ea96", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086117, "uuid": "459f5427-0dc5-4db4-807d-d5b682dc16c6", "value": "T1CBC25CA17DA4F078ABCF770776F0F89649387BB6A09DA90C61DE44C113DCBE0A66C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086117, "uuid": "31c51b81-ef81-44a7-8d31-571f6ea0d82c", "value": "384:s3CCcNjD0yGrF4zoSJgk1AUH0ZoAkWsjqBsOCoRYLfRB3NLQTq5UtWh9M:zjVnz1v14ZolWsuBsOCUkRB3NLORWh9M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086117, "uuid": "2018e0ad-1265-4c49-9764-35bf919ecb43", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086117, "uuid": "66f449eb-ddf8-4677-bdd0-6a42d2c2e154", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d25505eb-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086120, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086120, "uuid": "07ba3e10-a5a8-4f6f-9e5c-7b0cdd8d6c2c", "comment": "Malware payload", "value": "f68c42585649257924e5065d861cbaef", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086120, "uuid": "6579e1af-23b5-4cd1-8e06-a02e4a42faa5", "comment": "Malware payload", "value": "1993843d6669694f0e2fe3028f02a50da50036e3671bd3347e5d2b322a346ef5", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086120, "uuid": "a6cd90a6-da4d-44e7-8fa8-f7e06892c319", "value": "T1A0C28C627E94E0B5A7CF770B7AB0F8A249347B72904D690D60DA50D113DDFE0B63C0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086120, "uuid": "839ee962-f912-4dd6-a1f2-f208e9deac4b", "value": "384:w3Cu+8egqmGazAKfI7xBZzMG4irt+KvInE6Kr+g:/w7qzazAKfIFBRBrt+kInfg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086120, "uuid": "e0c97d8f-2240-4775-aa50-1807546c5f47", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086120, "uuid": "87521b2f-6e1b-4513-a260-1efa79989896", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d3beca48-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086122, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086122, "uuid": "431d3dc5-49f9-4c58-bf9b-b9a649e7759a", "comment": "Malware payload", "value": "3419d4f002d3b2e902c3242d4f677a97", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086122, "uuid": "f14c4057-3f8b-498e-ac49-2f07a31f149f", "comment": "Malware payload", "value": "fdb6ccecf74ab22503c28d97af098230eefa0bc44d1d158133e692502936c575", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086122, "uuid": "24847a68-485b-4d23-9005-644152189a8a", "value": "T1F6C28D61BE98E0785BCF33077BF4F8968538B7B1908D690C60DA949117D9BE0F62C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086122, "uuid": "6c9783a4-8718-49cc-8ee4-ae07b8e33371", "value": "384:w3C26+noaQincR/c6nrwa/CPQXAnchk9MLnCsVjFbx4xjezSbda:/2600R3v/TXa4nRYxa+k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086122, "uuid": "48ce3809-b574-4512-a562-f3fdd3847f64", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086122, "uuid": "d9de89d1-be69-4eb4-8520-fce8b82550d5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d4a768e0-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086124, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086124, "uuid": "73330410-dc00-40c8-a510-ecdc9747ab01", "comment": "Malware payload", "value": "4210bd27548591d5a748c95a06db0f07", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086124, "uuid": "b48e0564-78cd-4dee-9775-a55b08568917", "comment": "Malware payload", "value": "6522af8a022b150fa17b7403fe0a069f7c134351a416ff8cd0a84be2a3bec323", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086124, "uuid": "bb30d523-5b93-4170-9051-64d9a8ad2e63", "value": "T12BC27EA2BEA4E07467CF370B76F4F8A65538BBB1908DA509A0D940C157DDFE0B63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086124, "uuid": "44ee0741-1b41-4fc4-aaff-764ba98d9f04", "value": "384:s3CW4PG3GiQsTXIWVH3GVzFIxfigyEYN0iBbRgQS93XgGERw4:zW0UTTVWVzFIyEYmi5m/3wGb4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086124, "uuid": "68222b0f-d6d7-4fbc-8a1d-86b60005f042", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086124, "uuid": "0a0544af-6cbc-4c15-aba7-34c3623ff4a8", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5175423-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086124, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086124, "uuid": "f33397c3-3941-4bef-b86f-f44badf5a444", "comment": "Malware payload", "value": "fc6d2d728f75c3c7819feb0669479cf3", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086124, "uuid": "65bb4bcd-4e56-4aee-9c1b-c40579fae09e", "comment": "Malware payload", "value": "14fb85cacd3f9ebf4825e4280cfbea2d4a128689ec6b28979747dba5d76ac1b3", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086124, "uuid": "1b882845-695a-46e6-8fc9-23b01c26eb09", "value": "T16AC27DA17E54E5B857DF370776F4F8928538BBB2A08DA90C60EE448163DCBE0E53C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086124, "uuid": "c0e70ee7-d0ad-4888-a7c8-c794dc026e8c", "value": "384:7n3CfX1yUv+h9gFnJswkOlXswDnFeSr6Qv3HHBylXgKYTP6UA85jsFD:ufQh9Q4OSCFpr93QlXgK4i+541", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086124, "uuid": "e7584aad-c731-410a-a4e2-358ca5e42806", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086124, "uuid": "b0de82cc-405e-4bae-ae86-bf46b4ff2609", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d7069654-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086128, "uuid": "0d3a2025-53e7-4ab8-bc5a-8bba86d0c1ce", "comment": "Malware payload", "value": "8e821e689f83e5376088327ae2e48c86", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086128, "uuid": "cda7509f-6437-45a5-8407-133d61e8cfb8", "comment": "Malware payload", "value": "d00f7fad50e4b441c90b408ec899f961be454856f65884cc2e4321da13726782", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086128, "uuid": "3d358ea0-fadd-4306-94f8-ca137c0619b0", "value": "T1E5C2AE62BE58F0B8A7CF771776F4F89285387BB5A08D650C60DA44C127DDBD0EA381", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086128, "uuid": "e2b1dc8d-4752-4284-85bb-4d25520efe5c", "value": "384:P3CsaU5v2b98nr89SHKmFVhizl4+OAJw+N+1fG9VHV1wQPdzTZwL:672qmHhc4+/5HZ6L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086128, "uuid": "55e7ce4f-24fc-43b0-95f3-8b37eb35d8dc", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086128, "uuid": "5b9228d8-557d-4099-a500-a3baf9722ea1", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d825f913-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086129, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086129, "uuid": "ea253bb9-5886-49af-bbb0-7bddd39e5611", "comment": "Malware payload", "value": "d8586b37dc0333508fd40f73fb21132f", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086129, "uuid": "8110aac5-d380-41db-8ee1-045b2f8e7f8f", "comment": "Malware payload", "value": "2eb8a6aadcf84d46bd0abb67b138e59118430b4f891f009f002665f90e21dd5a", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086129, "uuid": "481aa0b6-5bb9-478f-862b-3c2a37613db3", "value": "T100C27D61BEA4F0B857CF731777F4F8A28934BB76A09D690C60DE54C153D8AD0A63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086129, "uuid": "d1b05037-c86e-4b85-8d03-8b9593ab3905", "value": "384:k3CpoIdwbJm0PgIHdSv6F2N3eoR9cCs4YTfG2xOKqUG5BRF:rpomqdSvaJNkKqUCn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086129, "uuid": "11f0f6ee-7f10-460f-a711-d7a13c72b4b5", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086129, "uuid": "65243052-f09d-4720-90e8-2e2db87637f7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de2dda53-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086140, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086140, "uuid": "a2e0f88b-0865-4944-9ffa-48122a230eaa", "comment": "Malware payload", "value": "3c62fb08be03997012b34dbec92c52a8", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086140, "uuid": "8f600e71-bba6-475f-8631-bffeb3bd8fb7", "comment": "Malware payload", "value": "4cf1fee168d58f512c33b37ed46d39c6aceedb310818eaaacd7ed871bb434f2a", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086140, "uuid": "b381d21d-ea1b-4fcd-9191-18b7f7be9bb4", "value": "T13CC27CA1BEA8A17867CF375776F4F8D249347B72A04D690CA0DE84C153DDFE0A62C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086140, "uuid": "9603970c-7ce5-4057-9031-095d1d6c1bd0", "value": "384:L3Cptn9U04wZliF7SNSboyEakJ3ry4rg6EhxTVRnBgcKmlSGny:eLnC+SF7DoUU3rHgtXRvKmlSGny", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086140, "uuid": "362e05d9-a6aa-47c6-8d22-7c5042fe3218", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086140, "uuid": "1c1b5c96-f06e-4e3e-8493-f3921c7ec3a7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1116985-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086144, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086144, "uuid": "dcbd2241-df9b-4613-9853-2de4d595a1c2", "comment": "Malware payload", "value": "b934a95778e5468099e7f373dcda2760", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086144, "uuid": "479c631e-5d13-4e3f-ba96-93fbde0d0dc1", "comment": "Malware payload", "value": "ce764cefb9dc91a4d0386a1de7a52c3c4914e3a94a58f7626d881f254051573d", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086144, "uuid": "ff4c0fa4-c1f1-4f48-b93c-7d28df983153", "value": "T109C26C617E58E0B457CF370776F4F8928538BBB1A04EA90DA4DE44C253DDBD0A63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086144, "uuid": "1525da05-1cf8-4171-beb9-8a4d1e84d93d", "value": "384:I3CBgfP2zfi8xXyQKWxIOH9SjB23itE7+ww2SVcL+P50Umk:3DvXrxbwQJSKW5vv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086144, "uuid": "4943167e-5488-45d7-bf0c-bfd0a1fdff3d", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086144, "uuid": "08f17fc6-cbd1-451c-be82-7d62eb184462", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1e42741-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086146, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086146, "uuid": "fdf9b2e6-0818-438e-a863-71d859127cce", "comment": "Malware payload", "value": "48967e59621dedb90b21b4c169fb8d2a", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086146, "uuid": "ae71f46e-6c48-4cf3-8551-c34d45738469", "comment": "Malware payload", "value": "bebd5bfe50af5aef91598fe4ed8c6bfe4bc16db3ede7a72e3ae15217aeb66063", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086146, "uuid": "dc1d183e-a909-4679-abca-e2c76f11d097", "value": "T103C28E62BD98E1B46BCF331776B4F8964538BBB1909D690C60DE44C263DCBE0E63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086146, "uuid": "dc3fff23-78fd-4222-9667-0333176352aa", "value": "384:D3C4jZazCwzzXh+62Uo+WQmuzRpQq3tJdqW4I8Kd8/vjP5sM:2OZazCwHNxWQm+pxrqW4+8DP5sM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086146, "uuid": "692d59a8-273d-4caf-8359-13ae0e5753f3", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086146, "uuid": "8fb757a8-cc01-4bcd-974e-8d49d2d0056b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e35ef6bd-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086148, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086148, "uuid": "bbe9420b-25ef-43ec-9040-bccc710efc90", "comment": "Malware payload", "value": "c61014ffef9e35aab977abcbcaef1253", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086148, "uuid": "894257bf-f95a-4108-a3e9-011021193628", "comment": "Malware payload", "value": "a5fd3226df95cca8e75b75b150bfc1a1f2cff39f369a16ff29ff525728d5cee6", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086148, "uuid": "fda1f36d-f128-4642-8044-61a56484de15", "value": "T1C0C27DA1BE54E1B8A6CF371776F4F8A255387B72A08E690C60DE45C113DDFE0A63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086148, "uuid": "313cd5c1-95fe-447b-8c9b-e94161329808", "value": "384:9m3CuI3yBVg9jsrLs0C12jJ2QTTpyyFvVdpro8Qqmfgmr8GZRlx0:LgGsrw0w2jJlyyF3pjufgmr3ZRlx0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086148, "uuid": "546b2b54-c864-453a-b0b8-5706595de2cf", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086148, "uuid": "ed2a9fbf-6e92-4cf0-80d9-03ba1c783de9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e509cb92-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086151, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086151, "uuid": "752276aa-5a0a-4d68-b227-7571e4dcedba", "comment": "Malware payload", "value": "438b1c6bcb0c8ee165cb7ee63027bdd3", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086151, "uuid": "202661b3-c077-4e1e-858b-7f67b0e327af", "comment": "Malware payload", "value": "957e17ce6a010223beea7004e0badd07f7f4be66dbe3927309dd0a03edb9969b", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086151, "uuid": "b62a166c-2bc2-4907-ba19-5620576917b6", "value": "T1D1C29E61BE94E0B85BCF330776F4F89249387B76909EA90C61DA54C213DDFE0AA3C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086151, "uuid": "16bdc226-015a-49cb-b627-ef33aae11149", "value": "384:sG3CjJoQdQxC/csenliKcxX8bGMaZP0NyWaShnNGYrgPu+fq2fyBM4r:s9jJ+Cknw1GbGMaZAVaShDgP5fpnW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086151, "uuid": "520c2b56-030b-4099-908f-af97f9bdf783", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086151, "uuid": "98c77195-47eb-43d3-b80e-fa381ea7724e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e78517b6-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086155, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086155, "uuid": "4db3871c-ae7b-457b-9807-3d7c52cdf0c9", "comment": "Malware payload", "value": "231687b06dca11d7188743085881b42d", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086155, "uuid": "c77ccf39-e797-498d-bb93-2a730ab3152f", "comment": "Malware payload", "value": "7190dde70158c67f10fd24e8bc999be7661afb7fdcf0fb62c39c4e7e911b5e09", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086155, "uuid": "2b41d9b3-7621-44d5-a5b9-7665d06237fb", "value": "T162C27D52BE54B0B457CF370B76F4F8928934BB75A08DA90CA1DE50C257D9BE0E53C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086155, "uuid": "a2a0cf34-a560-4d24-845c-7615d7f98776", "value": "384:O3CQZI+CH4pX8TUjdH+LmaoEdo/rjXrqvM8efe2YRBLXBL6zDp:ljH4pX8w5eL4EdoPuoeLRRX90", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086155, "uuid": "aff220a9-2ed4-4a2f-8ea1-d586fd8f512f", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086155, "uuid": "ab46cf2d-6048-4372-b529-684575cb7e1e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e831c7de-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086156, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086156, "uuid": "1b1e3897-d323-40b4-b6e7-6725d1c8adce", "comment": "Malware payload", "value": "cd2c6fa492cc0768c9db17572dc9e448", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086156, "uuid": "7add2ee7-8b35-4ce3-ad72-9aa0ed6c6c47", "comment": "Malware payload", "value": "e02b2fa24b03444ebbffa9f651708caacdc1d7fe78d1ef9a05ef9670bf18ab37", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086156, "uuid": "c9b21696-38ce-44eb-ad80-66f97cbd99dd", "value": "T1C4C27D627E94E0B45BCE731776F4F8A29934BB75908EA90C50DE84C117DCBE0EA7C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086156, "uuid": "3daf6d16-7dcc-451d-96ae-4edf4ce0ebc6", "value": "384:VxA3CjCbXk6OSjTu9VQ7RVRaO4Pkt3MSffmSH4Tx8zMl0d8:VxP/SjTMVQ1rv4w7VYTxJ48", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086156, "uuid": "5c2bbdd9-1cbf-442d-aea6-05a81086d210", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086156, "uuid": "8e2387cb-4ac1-42b9-bf58-02587ae3a6b1", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9183673-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086158, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086158, "uuid": "dc15788b-5027-4620-bc67-0b6cca037403", "comment": "Malware payload", "value": "b70c1b603bb4a307c122942d3766bdad", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086158, "uuid": "7ca726bc-b553-4665-ac03-9d67df891ad4", "comment": "Malware payload", "value": "e6097ee1f47fbe8700c04aa50412da4576fb8d11822abeb305c145a51692e19b", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086158, "uuid": "19dfebb1-4e6e-4405-93c4-caa34a57aa11", "value": "T11AC27CA2BE64E4B49BCF331776F4F8D28538ABB5A08DA50C60DA54C217DCBE0B53D1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086158, "uuid": "3ba0fb38-be63-4580-b1c4-b3de371e9bc3", "value": "384:N53CQmIu/jnvZh8j7vPpWfB2pZ2W78F2+aqbx6+5IiCCSDFk29w:uQ1uzvZhU75RpZ2W784+aqbx6YnCz+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086158, "uuid": "7f550675-736e-4f9c-b627-72be8f1778fd", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086158, "uuid": "5274865f-caf4-4ed3-aa10-b82ce989b47e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9cd6f59-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086159, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086159, "uuid": "d6f5bb3d-a0e1-480c-b927-10bee776b20d", "comment": "Malware payload", "value": "522211d9b6b74665cb38df9db2fbc307", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086159, "uuid": "2000f8ff-daca-4fb2-a9ae-5945eae97b04", "comment": "Malware payload", "value": "dc85b1d2b4342c43896dfad188b7aa07ffb291f2af7910532f2c6d1f6ce04f81", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086159, "uuid": "ad63da2f-0635-4816-aba8-16e48fba7c1b", "value": "T1ECC27D627E54E1B8A7CF330776F4F8969438BB72A08E691CA0DA44C153DDFD0E62C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086159, "uuid": "a39af2d8-35cd-4470-a784-26fb829256a2", "value": "384:T3CK/+wxyd96bK7wxhs9AlX588SszHJUtje91TAPcs2:GVw1Q9kJ8wzHJOje91Tkc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086159, "uuid": "e2690e83-c141-45de-b33e-cb78f9530350", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086159, "uuid": "44e149e1-e4f6-4098-8d0d-cfccaa9b4efd", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec48eb4d-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086163, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086163, "uuid": "a590786c-2609-42a8-8668-8b78b3267211", "comment": "Malware payload", "value": "47593a7d70f1ef5b6b1f122eb8f9a959", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086163, "uuid": "3f867388-b986-4777-b6d5-cbe993db919d", "comment": "Malware payload", "value": "80ed2ce245d6c02aecad7b8ecf6fb5e92bc9fd1ca061e5c2751983a2b5bea90c", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086163, "uuid": "afa7a229-02a6-45df-97c1-90908a494c8e", "value": "T115C28C91BE98F0B567CF370776F4F99654387BB1A08D661C60DE44C223D9AE0B63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086163, "uuid": "e5174d36-c031-480a-928c-f6b10b36a80e", "value": "384:/3CO3Ndqbfg0q4Ofg1V+l1CLbgyFjCag/nkPA99a7Nkhy/tQ2KEVepWQCd:q8NkRLO2O1CLbgyokPAncv/FQCd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086163, "uuid": "b9bc01e4-5c1d-4356-9eb0-6b03502034cc", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086163, "uuid": "6a3cd301-c459-4e6a-a6ab-5763e57033da", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ecb21b00-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086164, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086164, "uuid": "2f2c3251-bf12-47d9-be21-d840962a0a87", "comment": "Malware payload", "value": "2e507e303132e008e28d8c24b2908027", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086164, "uuid": "7a37fe25-d333-431f-b35b-7a988f6e92c2", "comment": "Malware payload", "value": "d8c9d7c06b0fd4998cdf755b78ce71435c756bf202c26aebf60fbc8751e41388", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086164, "uuid": "2b169370-43b0-4838-8687-e7c3a9db53eb", "value": "T18CC28D62BE64E17457CF770776F4F89259347BB6A08DAA0C61EE44C113DCBE0A63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086164, "uuid": "6c3cf5f4-42a1-4e2f-9d3b-cfc9bd173471", "value": "384:v3C7CwADQgzNTfNEZW2p7ODpNYELsY6Y95yKGzj9na5NiMOKT1ynJUv:auwARkW2l60ysYN5yKG/e7O4snav", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086164, "uuid": "f8e9e4c8-283c-4499-96cb-d2b5767525ef", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086164, "uuid": "f6f4f638-71de-4e07-8717-c85eca9fe82a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eec66079-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086167, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086167, "uuid": "fc65a169-da07-4458-af3c-e62ec36f02e1", "comment": "Malware payload", "value": "4c261f9087b48d05050921ebca6cdf78", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086167, "uuid": "33884fff-68fb-420e-b2d9-6e2c8e35882a", "comment": "Malware payload", "value": "122a45ba2761a1db850b6c580634ae507a58878de6406a71fec200f3975f201f", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086167, "uuid": "2a9b0f9b-82ff-416a-9ffc-e411fd8ab001", "value": "T169C27C62BEA4F07857CF370776F4F99644386BB5A08DAA4C61DE44C123DDBE0E92C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086167, "uuid": "abd7b473-e3a4-40a2-99cf-4c30eef5492d", "value": "384:03CBa32j+VNKliO16J3Wft68wWx1kFpz4tZ37hTTY1LbTs:743rVNKljFftTfGz4tZlTTwfs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086167, "uuid": "60331b98-041f-4c8a-9bb5-9446c5b7bf94", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086167, "uuid": "6fc3cfce-2180-49d6-81e0-713ad654b6ef", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f3149ff2-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086175, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086175, "uuid": "4976d7d0-9ecf-4d82-b600-33dd74688247", "comment": "Malware payload", "value": "c441a8153ae1f3923ae5d5dbc31a18d6", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086175, "uuid": "00220321-cdec-4151-815e-2fa672caf2b0", "comment": "Malware payload", "value": "1f8aac28de6540c8bb18273160877050077b99f73673bb422985a610d49386de", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086175, "uuid": "c450cf8f-63d5-4e5b-8b7a-3a09ecbe9127", "value": "T13DC28DA27E54E0B467CF37077AF4F89689387BB1908D690C61DE94C257DCBE0E6381", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086175, "uuid": "17bf2fa3-765b-4459-b6d3-ec39ffb95a28", "value": "384:s3CmFJb1au2ADONs7W4rbvjEmLN21BeOQv/Dsdrbfs:zmFJb8XsIWxngt1BrQIpLs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086175, "uuid": "d12e955f-628d-4f23-ac83-a2fb9feeb77d", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086175, "uuid": "88de53a6-64e3-4d0a-88cb-3fb90810b703", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f326c78b-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086175, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086175, "uuid": "aeab2197-7212-46ab-9602-814b3dfc6703", "comment": "Malware payload", "value": "604a10536150387204c948699c02ff72", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086175, "uuid": "9f317727-6fe0-4347-a74c-922d723151e2", "comment": "Malware payload", "value": "4edc3eb9493235809cfe333dc33e7c8ee5eff2be146b4e78b1f8eb2dcb771046", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086175, "uuid": "0bc95886-1fcd-4176-96bc-3d3df726ef9f", "value": "T1F7C27D51BE98E0B467CF361777F4F8964938BBB6A08D690CA0DA908117D8FE0B63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086175, "uuid": "481db88d-1724-4e21-a739-27d7695f1dbe", "value": "384:v3Cec4JesbPTk5Z1lcqYooG3UumXLhFNp6M:aecEokc3gvNoM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086175, "uuid": "e97f193f-8525-4ae3-ae3a-36fd844417ca", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086175, "uuid": "7f636121-7b77-4a2b-8d19-07e0979019ab", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f435b9e7-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086176, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086176, "uuid": "9f5aa105-bbc6-4e7f-985d-061c69b858ba", "comment": "Malware payload", "value": "232cf76f9708ef6fc14df0f8a995c8d2", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086176, "uuid": "f8b53f3b-90b7-425b-b942-54cb38527603", "comment": "Malware payload", "value": "ee2d71d4892c758b426acb9806a405a231be673dd36f42f3645a6e1e019d0c90", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086176, "uuid": "c1ea1da0-59f4-4c42-9e65-00be2d4d207f", "value": "T18EC28DA1BE54E0B867CF37177BF4F89645346BB2A08DA50C61EA84C153D9BE0E63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086176, "uuid": "32aa57fc-690e-47d9-bcf6-b8ec5251aa57", "value": "384:Z3CsCWRmh+tgLk4jdQDSEOtlqkChpBtMlcxlINEA1vHQ6:MAzu9ZQD/lMlKINDH1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086176, "uuid": "c6168fba-26e5-49dc-ad1f-085a321c4187", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086176, "uuid": "c1c13f62-74d4-4d9a-bdd7-4799d2a8ba39", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa807908-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086187, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086187, "uuid": "6ed060ca-b8a2-4229-92a9-3020182e6309", "comment": "Malware payload", "value": "bbe0faf4010a83a38202e7a1afc193db", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086187, "uuid": "fa7b0a7f-6b29-4c04-8de5-5f499db6a1ab", "comment": "Malware payload", "value": "d3a0f0383d387b855d74563f3a8f6f4dc034aa32ecfaabb564c9c491f321d27c", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086187, "uuid": "19844f5c-67ce-4773-b519-c9435e33fc73", "value": "T18CC29E62BE94F1B467CF371776F4F8A24534BBB6A08D660CA1DE84C213DDAE0A63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086187, "uuid": "c677a8f0-e01b-4511-89ce-d1d648744fcb", "value": "384:q3CYQ65ZrSbOJzUYxU8oUF8HaxbAmrSphSOFkezv2fIDvgXqID:5YQ6Dm6hDdH61mupcWzvWIDMD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086187, "uuid": "437cbfb2-e4e7-4c9b-95f9-6e2689ae1dda", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086187, "uuid": "72977dde-e01b-4cf6-8166-815aa0469c2c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd547bbb-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086192, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086192, "uuid": "b106896c-3920-449a-92d3-c780e9beba7c", "comment": "Malware payload", "value": "336a47d25f65f3829a08336ee567187b", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086192, "uuid": "0a363254-a163-429e-a2e6-ee8db5f6737d", "comment": "Malware payload", "value": "99cc849da33c63f9b8f04b0fb36633e1b7034f111caaa74a05362db5a508a741", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086192, "uuid": "835bb34b-f688-4bcc-a762-40d9a2637c5b", "value": "T17CC27B617E94E0B8ABCF330776F4F8924574BB72A09D690C61DE95C213DCBE0A63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086192, "uuid": "d48445d7-2344-475b-a9f4-4ca6fe79db5f", "value": "768:1Go6hPEI9Ps+Mz75pX8JVcVwfNf3Y/z2YctK+B:1bUPV9PsPb8IOFfOnU5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086192, "uuid": "5699f3e2-c03d-468c-a276-218d21bdfdb3", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086192, "uuid": "28ffaa55-ddae-44a4-8e92-64297298279b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fda8d939-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086192, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086192, "uuid": "4fffbbd6-594a-4b54-9e7f-643dd61995c2", "comment": "Malware payload", "value": "5b7df56d904574b8b8615ccedfdc786e", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086192, "uuid": "27833cd1-9a13-419a-a8eb-8667f48cd04c", "comment": "Malware payload", "value": "cd28a78de802ffc08f94ebb29aedc26d8bef90e527bae7f4db47db94164df030", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086192, "uuid": "db8bbd04-9c7a-4946-b3c6-498955a45313", "value": "T108C26D617E94E0B8ABCF370777F4F89645347BB1A05DA90CA0DE948263D9BE0B53C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086192, "uuid": "11a292b5-899f-4fc4-8dc0-bf8265dc70ad", "value": "384:B3ClwSRC75d+jVrLiPOjuJsf7euNYPHffu9Azu7OcGavAHure/oVey:Ulvw75d+ZX9uKjevHf26u7Mavbre/oMy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086192, "uuid": "86104233-9b3f-4a97-9eef-14f167f7dee6", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086192, "uuid": "ca16006c-be9b-4649-93a8-fecab84a65a1", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fdbae579-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086192, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086192, "uuid": "d924a3f1-a3cc-466a-a21b-7b9116353ca0", "comment": "Malware payload", "value": "4fecd04ecee6073b5e851ce288775959", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086192, "uuid": "ffa9f47d-d615-44dd-aa38-bf777886bb59", "comment": "Malware payload", "value": "d1bf501635595c6734e3945b9a2596ff97c4ffd837934e84ddfb5f4b3aec0b3b", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086192, "uuid": "0413bf91-a613-4da8-9b3f-c785f5b4dbde", "value": "T105C28D62BE94E0B897CF37077AB4F8958538BB71908D690C61EE548163DCEE0F63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086192, "uuid": "7eafda9d-89ce-4826-9b59-86b84aa1aa28", "value": "384:ua3Cc6J7/EfPrA2m9y01q9eXOKXbl7RNkqFyQpT+WptpDA:gc68rA2ay01q4+KdAwpjA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086192, "uuid": "6bb7328a-fa5d-4545-906a-f91e9363ccc7", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086192, "uuid": "e4834ad8-b4ec-41af-98cb-3d56d96a1f72", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00f2c1cb-373b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086198, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086198, "uuid": "6fa7b083-f8e0-4b87-9126-035fe31b5d98", "comment": "Malware payload", "value": "639041ca47ee59ba96a15afe4815bcf7", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086198, "uuid": "e4252236-475f-433c-8b02-f1519477fa68", "comment": "Malware payload", "value": "c04fafc84b21ed3bb3b139bc126bd7de9bbb850a2b2f63083f45febd7665f76b", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086198, "uuid": "b6931490-123a-4db9-8e20-3faf3c2b0cb2", "value": "T1B1C27C62BE94E1B467CF370776F4F8A285387BB5908D690860DE94C127DCFE0A63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086198, "uuid": "2ebdda29-e287-4991-82c0-f1e8f2c0e4f5", "value": "384:A3Cdd0z+BnFKyPWhCjODoXRPyKBEkIItTXA3BM1vu9kWhAH5L6dXY:PszhfhCKDSpS22eu9kWhE965Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086198, "uuid": "3d9418d0-c6e6-40af-89e3-815f3d9860e3", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086198, "uuid": "a13d6202-8d6b-4add-bf48-179e07e2473b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02b2648c-373b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086201, "uuid": "481f97e5-2b9d-4127-887a-fc1ef643e288", "comment": "Malware payload", "value": "fdee469f6566a068055692b9e5059abb", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086201, "uuid": "f047409f-a5aa-4337-9b91-eabede7cbfdd", "comment": "Malware payload", "value": "c8838a88e2928a341ee8bcb2efe05dab009ddd79fdc716c126811bb524f9b926", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086201, "uuid": "0bf9be73-9cde-4553-9e7e-57d1d87a997f", "value": "T1C7C27C617E94E0B467CF770776F4F8A65438BB71A08D690CA1EE84C123D8BE0B53C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086201, "uuid": "3ed0887e-091c-434c-a7ce-555425a3fa58", "value": "384:k3CDvicQGXEZkkomytTWAQnryUhNB4Wnfqa0JLvbJBmYus9BD:rj+cEZ5jyNQn9hH4Wnya0fbuy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086201, "uuid": "697c9dab-b433-4fc2-9b9a-ccf3026c22ac", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086201, "uuid": "9d5d32bc-fb1e-417f-afb8-3446d6e0a389", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "03efe598-373b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086203, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086203, "uuid": "a5eb954c-be42-4dab-96b4-2a7cafd9166f", "comment": "Malware payload", "value": "be75d4e4dfa66ea32153571cdfbdcaa7", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086203, "uuid": "0051a8fc-9c5b-4fda-96e5-56bf5fa01365", "comment": "Malware payload", "value": "622d5a541ab662b9d1d00e96f5447c205cc31a8e799136b9ffc6cd1f2d90e8f8", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086203, "uuid": "d9de9304-1a03-4647-ae25-463aac4ea46b", "value": "T1B3C27CA17E54F0B4A7CF371B76F4F89644347BB2A09D690C60DA91C127DCAE1E62C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086203, "uuid": "4b899bbe-8286-4518-948f-e3c053c504b0", "value": "384:d3CDnprMrgAXK0Yrlh6+bzqUKi1ghLaxnK+qb2W663kc:4DnZ+6Rx33K4g4xGw8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086203, "uuid": "a077a65b-85c8-4bbc-b838-346ee9f5aa59", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086203, "uuid": "ffadd290-a290-4a68-9f44-194b844babde", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0406e444-373b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086203, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086203, "uuid": "d44dccc0-2011-40c1-bffb-1cfd0626e2e8", "comment": "Malware payload", "value": "36fe36a70bced1c41c6461af1f441544", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086203, "uuid": "df0e05d9-df88-46ba-b6df-59a56621c0b2", "comment": "Malware payload", "value": "e41d3ac2b375f7ec8aa5a49fa3b824eb02d668a01abdbbea8b16ec5f0290b779", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086203, "uuid": "81bb611f-bfc6-4581-84f1-f98b0dbd4f36", "value": "T17BC28F61BE94E0795BCF371B76F5F89285387BB2A08D690C60EE448127DCBE0B53C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086203, "uuid": "e3462a22-79b3-4a7a-86ea-d58c8e1aa9a6", "value": "384:T3ClcuZgt0/wi+Td07Sipmuu42O9ZZt1rA+uoa4uXAPlI:Glc8+0/wddQp84B9ZZnwoa4G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086203, "uuid": "1869ffa1-e2d4-4eb5-892f-f676a5676879", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086203, "uuid": "c4b3094e-f963-47cf-86a1-0c29f87a42af", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "041b96c0-373b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086203, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086203, "uuid": "8d0010e1-bb70-4801-82b0-3eebb2a49265", "comment": "Malware payload", "value": "aa068312eeaaa0be242d790bef3a4f6f", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086203, "uuid": "eb7a59e1-11c6-438a-b542-a47f7bc1f487", "comment": "Malware payload", "value": "460b5b03c3e2ca4f8b30437cdee49389461262c0ccd6c9468161eb62d74d1256", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086203, "uuid": "51fe670e-4d91-4c4d-b4b7-70c49edfd41a", "value": "T1E1C26B62BE64E0B4A7CF370776F4F8D28434BB72909DAA0C61D944C117D8EE4B63C5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086203, "uuid": "1a14d45a-3d44-4ba3-b54d-080baf2737df", "value": "384:S3C2isC+5qLOU+SzP/IbN+XaOsADWjV1eYVixAhZIbr:B4qLN/qoXdsVCYg0Cbr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086203, "uuid": "2607d008-9e88-4f1b-a5b9-6533ab4b8351", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086203, "uuid": "cbd320c2-286c-4bcb-b440-05946e7aba7a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "044ee1a5-373b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086204, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086204, "uuid": "024038cc-82eb-475a-b363-fe13e4b3b21d", "comment": "Malware payload", "value": "ad22441cab51e4149d36e87191678cc0", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086204, "uuid": "e82e7784-ba99-4c50-bda8-9be247182894", "comment": "Malware payload", "value": "389588baeced09b3e3388c75e52d2cd3157688f614cb5f3c9837985771035c19", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086204, "uuid": "89fc8f2b-2314-4474-b4ff-21d7a631ea09", "value": "T104C28D92BE94E0B857CF730BBAF0F9D645346BB5A08D690C61DE54C117DCAE0E63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086204, "uuid": "2bdadec0-3982-409e-b661-5e1efca31e76", "value": "384:D3CF85uel/6B0TmDHJU3fzKk5L79fnC/1uQIHUlS/0pMJBdO4Q:2dB0wHC3fzKkZJkAQEQS/6Mk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086204, "uuid": "09a3697a-c9e6-4a8c-8545-1b5efd6eade3", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086204, "uuid": "4719244f-12a2-4a08-87c9-93b0547b7a57", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05b2f1ec-373b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086206, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086206, "uuid": "7f7fb171-159b-4741-8fad-55be1d7858f3", "comment": "Malware payload", "value": "0b5808db6c97cffdd3e6ce5ac993b130", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086206, "uuid": "cfafd253-0ade-41e7-9b94-ba54b0afe8eb", "comment": "Malware payload", "value": "b569508e1f88e2dc45d37594023d98235254bfefdfc80ea72885bf721d5c4802", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086206, "uuid": "93c6a9af-abac-43b1-999b-7c82dbd57d41", "value": "T1ECC27DA17E58F0B56BCE330776F4F8924578BBB2A08EA50D60DE44C117DDAE0E53C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086206, "uuid": "91efa869-c65f-4204-b0b1-ceb69e9c9dc4", "value": "384:pB3C/oNIoQJMWrS7DJ+8Q58V/ZfSc8iN7vErfiFlgvYWD9EvdPRZMe2ct3oZ:pU/MQJbrSghsZf9vELQ/vdPRz0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086206, "uuid": "2eeedc1f-6868-4353-a3a8-f39d554368fd", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086206, "uuid": "73e3fef6-2664-471b-b227-f0963f2dee4a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08b7c79a-373b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086211, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086211, "uuid": "54cc794d-0563-4ffc-a08d-716005c5fd4c", "comment": "Malware payload", "value": "537943f407f1a6babaea12b155216bc2", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086211, "uuid": "28a8676e-ae65-4d9e-9819-6893aaf98a41", "comment": "Malware payload", "value": "e0a51f5284c20702e2bc124e6cc016bb6fe758319bf4a39ce01ef30637ebfcf8", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086211, "uuid": "8248b519-e5f8-413a-96e1-98c6767cc918", "value": "T12DC27B667E54F0B867CF321776F4F89188346BB2A08D690C60DE949227DDED0E63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086211, "uuid": "80b79a68-9809-4888-b607-90f6457ac6e5", "value": "384:o3C1GoAr4Lc5hkiiF5bXiKsKFPCjLpVRrQYU5mCeJtgrFl0BGirCFUt:X1Gb4Lcb1WbXSZFVpUJezMBmCit", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086211, "uuid": "cdc46407-eea0-4cfe-a4a1-1b836f7ae82f", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086211, "uuid": "968fb781-2b56-495a-af2d-88a916d39421", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08e00809-373b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086211, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086211, "uuid": "e8aa6df0-ea38-418e-9ef9-293860488a3e", "comment": "Malware payload", "value": "b693f35d82ea92f1168e4780cebbe5e3", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086211, "uuid": "f107b072-5d43-419a-9608-502c9cb034e5", "comment": "Malware payload", "value": "d9b9eeb949230e70d29dbaf360358dde5074dd9761c03309c5d29976bb6889f5", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086211, "uuid": "87fdf1c0-2082-4870-a6c8-7f05db49543a", "value": "T117C28F627E58F1B89BCF770B76F4F8969838BB72A08D650C60DE54C113D9AE0E63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086211, "uuid": "85585edb-1713-44c7-a636-f3688efa7177", "value": "768:2t1OXnwUHXJqi4oe5URFO+bj+UYipFD4RrqhR:2twXnbZqlURF7j+YV48v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086211, "uuid": "2033ccee-34ab-4de4-b173-d4917f8a1f42", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086211, "uuid": "2c8ad4f8-fcf6-4629-bbac-7bc54a2bab04", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e197e7f-373b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086220, "uuid": "c9accec4-9375-456a-bfa1-2319aeb6bf93", "comment": "Malware payload", "value": "c4329b0e55a496290e67b87c6ba84139", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086220, "uuid": "08968eb6-0fda-40bf-90e8-6ee2909c3637", "comment": "Malware payload", "value": "d320a9cee56bd446d9b9ee70d38f0b698c94dea7eec27f79d66d0b4820f7e712", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086220, "uuid": "7f27c36a-6e0f-4b18-8ec0-9e172f6b1966", "value": "T1AAC29D62BE55F07897CF330776F4B8D68938BBB6909DA50C60EE908117DCBD0E62C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086220, "uuid": "fd7a3939-da50-4c21-a40a-e3042d2706d1", "value": "384:153CppYUcajVUjr6vN+ai4EeGS45fPH2JG/f4JeBL+XtkS2fKDEx8:a3YU5Wr6vPQ5EGo8Y+S2gEG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086220, "uuid": "2fe59d8c-7b3d-4583-881c-44ec52611fe4", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086220, "uuid": "abbfd4e9-4f40-47d6-be5d-837ae39e42e4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e47543b-373b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086220, "uuid": "bcc0396a-fbcf-40c6-8fc5-ee94fd576b10", "comment": "Malware payload", "value": "03c08dd31dc708abf2f28d380c35dffd", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086220, "uuid": "62ac37a1-a0b9-4954-8c46-6d7e3265db5d", "comment": "Malware payload", "value": "059a5e9b404bcf2aa012d693a5c1dd2730ea013d389f2c4de0fa9275b1be871f", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086220, "uuid": "8f34e5fd-bb3f-4012-be3b-ebec829a51c6", "value": "T170C26DA17D54F1B857DF731776F4F8968538BBB2908D690CA0DE40C127D8BE0B52C5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086220, "uuid": "86ec4d0e-42d4-4660-8876-3cd31142328b", "value": "384:v3CdJahdbl9fr8wm/Du+jEC4YJ1Dhay3r2ic2FBqNj+dL:adKhZebz4KayKr2fXZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086220, "uuid": "b3bddd97-7839-40ca-aa08-df641039590c", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086220, "uuid": "40d697d0-e2ab-477f-8845-d8ced02d1d0e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0fd17ba6-373b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086223, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086223, "uuid": "0089fb50-9c7f-4682-826d-e3e51bfb2d78", "comment": "Malware payload", "value": "3ec8ee06ecbee103fa334027ed4b833f", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086223, "uuid": "84f40d68-1ef0-4f3c-bd13-c082f865ab96", "comment": "Malware payload", "value": "08dc934045f7789e0b9bc277bbbeef5ca48b0a96b4762e195d836ca7f22cb664", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086223, "uuid": "cfdee415-d282-4301-a6cf-692e562a91ca", "value": "T1EEC28C61BEA4F0B85BCF770776F4F8968838BBB5908EA90C61DA54C117DCAD0B63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086223, "uuid": "6ca652c8-c729-4ee2-9e8a-f4ecce6494d7", "value": "384:5C3Ch/TREAdBU4yqrrtGOJIAj6mER54d9006bzp08B6IeZIIMF:3hdBU4/F9IAuB/728BAZIIMF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086223, "uuid": "e8473ec9-ea22-4a71-9786-c5c1530afd85", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086223, "uuid": "8562c904-c498-49b0-9e93-29d29c7cc0d4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ff6baad-373b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086223, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086223, "uuid": "3d3e4bd5-1fae-46b1-8e43-f78fb8572866", "comment": "Malware payload", "value": "a8997a18c8aab9284dacbb7f05512aff", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086223, "uuid": "dd0ac4d2-2f3c-4d28-a596-26c4f09ff944", "comment": "Malware payload", "value": "f6236b6c8411c4726c967945de8e10025b4e2eb5587212c3a4e5f2d49b7580fc", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086223, "uuid": "02cdd4a9-fa40-4fb0-9923-cc9390b0d5f3", "value": "T183C27E61BE64E5B557CF370BB6F4F8D68538BBB1A08D690CA0DE44C113D8AE0A63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086223, "uuid": "fdf5e80a-995e-4d93-8365-7efcb1849e9e", "value": "768:hxuO+uPdlXm/WY5NicD+MYvU6NgTmnnAD:DquLW/WMBmvvnAD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086223, "uuid": "891ab5a3-71bb-426b-acb5-f0dbeba87cd4", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086223, "uuid": "8ec100f5-4a33-47b2-85d8-02acbc82d961", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13bdb94f-373b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086229, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086229, "uuid": "7c824bfb-7484-4c34-a2cd-56c710b58c09", "comment": "Malware payload", "value": "e82c6e4beaeb53fd143a2a4131669cb1", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086229, "uuid": "b82d5031-9604-49c5-a13a-ab9d98bb90bc", "comment": "Malware payload", "value": "33e1f5a82a88a6d510ce26594132bd81c268b792df54dd47180f178ef5227432", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086229, "uuid": "1beaff72-696b-4c42-a264-2cd2819f518d", "value": "T1D5C27B527E94E0B867CF370B76F4F8A24438BBB5A09DA90C60DE448117DDEE0E93C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086229, "uuid": "db16eecb-f561-4ace-852b-d24ebe819f91", "value": "384:23Cf04t740Iv5qT+d/bEgXIhP7eGHwyK2KNu+sa/5ajVG3gGEtyk:tMXJvq+1ZCP7hwwKNum26Tk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086229, "uuid": "06c87e0e-bcec-4f24-ae95-a26d8d7f5050", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086229, "uuid": "89193893-df98-4a28-b9c8-16703dc59ce2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1489d430-373b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086231, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086231, "uuid": "0ff9cc75-cdde-4baa-9a59-c689084eaf59", "comment": "Malware payload", "value": "ffa9e10c0f6fe5b2a38c0955e5be8a1d", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086231, "uuid": "1b0c32db-55f3-4176-a0b1-02b007f76b11", "comment": "Malware payload", "value": "45cdf608ff0a3af78a9208d42eef14bb64c889aa687f9243003119bc987ad21c", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086231, "uuid": "ec059b93-533d-4eaf-925c-ff7010652ccd", "value": "T139C27E627E98E0B85BCF770776F4F99244387B75A08DA608A0EE44C117DDAD0F63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086231, "uuid": "e609e344-69f3-4235-8fec-4fdc3897276f", "value": "384:c3CWIiqJUy6k7WY8BKPeyrWXYMmocvQ0Q9zLaz9v90rZRDMF0whHyOlfW:jtiqJUy6kJlWN3cvQ0QAz90Dw0gyEfW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086231, "uuid": "f193f7c2-5e1c-4f44-bc91-2b5422b7e809", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086231, "uuid": "807cb389-eef7-4efc-9024-5d8a4b81fa6c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17057086-373b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086235, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086235, "uuid": "55919b65-74b0-465d-804c-e68bb12db959", "comment": "Malware payload", "value": "04f793321e71706e610274f21ad3fe6e", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086235, "uuid": "30286dbb-9a87-40e6-b86c-cf6e21422a42", "comment": "Malware payload", "value": "49c508dbe1d8d11186074b0735f16065c762d526031a70ce6b2a292446ee0581", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086235, "uuid": "c0d6f720-f076-4b9a-9332-c7d65478c191", "value": "T172C27BA27EA4E07457CF331B76F4F8964538BBB1A48D690C61DE548113DCBE0E63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086235, "uuid": "45f4fc3b-8983-4c05-aacc-1b1c3cf1fd72", "value": "384:m3CjfdHalLugCOToXX10L1cooe1bREf/t+:d/LvXeBtn1bg/Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086235, "uuid": "568ecfeb-36dc-4fad-8d7c-c04eacf62543", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086235, "uuid": "f87a1112-5127-417f-a07e-d3b04890b19e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18ed028a-373b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086238, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086238, "uuid": "18ca6e6d-003d-4365-9c05-8246b8565d35", "comment": "Malware payload", "value": "55917bf022f4350c2cde7a2f4e7de12a", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086238, "uuid": "95f34b29-b352-4bad-8db4-2a25c2d44ba4", "comment": "Malware payload", "value": "39bc69ec7113911db86f2f57e1fba1d364913ba7344193025d14b09ac09306d5", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086238, "uuid": "ab1467cb-91a8-4faf-8daa-8c6b670f51cc", "value": "T1E6C28D61BE54E4B497CF330776F5F8D69934BBB2A08D690CA0DA94C113DDAE0A63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086238, "uuid": "70f85462-ec57-49ea-986d-e0be3dfba9c7", "value": "384:k3CVJvjVZH1bh3Cc3fVFlXcy5D3tEm43A8lMvrd:rVJb6+9FJz43A8lMvrd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086238, "uuid": "a2a3bbd6-33c3-4e3c-a0f0-2cd5362b76fa", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086238, "uuid": "0276d6f6-76e7-49ed-87ab-21003d887dfd", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1be95899-373b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086243, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086243, "uuid": "5870cab6-77e7-43cb-baf9-d5ef2b3bd016", "comment": "Malware payload", "value": "1baf316b6c8dc172660bfdbd7b4badfc", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086243, "uuid": "a23b4cdb-92a2-4a4b-90eb-28257c69b625", "comment": "Malware payload", "value": "a63a0341acb2897cca2ecf9b96cb06523e50e4244fc93900926c53b8cd40ae28", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086243, "uuid": "59b192cd-ca42-40aa-b2d7-7bc20a77fe8e", "value": "T1E2C27C61BD55F0B95BCF770B7AF4F8D28534ABB1A08D690C64DA848113DCBE0EA3C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086243, "uuid": "0d9c568a-6ca3-40fd-9532-80b40a4a0ccb", "value": "384:M3CXpSmDK4DGhNFPffcxlq7fSol/CZeV04lU4gOsceg:TXpLDPmTPsmf/nVyID", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086243, "uuid": "172e3727-8476-4ce1-a839-f205189261bf", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086243, "uuid": "d562e3cd-8374-4d01-a688-4d60d481577c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c51682c-373b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086244, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086244, "uuid": "1b44e171-acc7-4c8f-95cd-7f8695c9f469", "comment": "Malware payload", "value": "b94a49764acb973214929d1e9d786f03", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086244, "uuid": "30c05afd-0860-44a7-9746-def23d4cf0a5", "comment": "Malware payload", "value": "a829831bd6005591225cdb7769c5247557ae77884628588f636683e5208cb001", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086244, "uuid": "0be83dd7-31fa-43c3-8b67-730126d17c56", "value": "T1C0C27C627E54F0B85BCF330776F4B8A648387BB2A08DA90CA1DE94C517DDBD0A63C5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086244, "uuid": "fba07a2f-3b39-4997-ab35-5b8948eaf800", "value": "384:v3CnbBMwiof2y3XA+fY/Q97jXfS+4XKm+SlE8KlbdEuyBOgTieQOJwNlzCn7F0sl:abBMwy27D6V6m7PAbddifieF0siY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086244, "uuid": "1e786822-3ddb-4104-a581-b062eb781d3e", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086244, "uuid": "ee3ea170-7bb7-436f-9c79-682f5096da0a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c7a311a-373b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086244, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086244, "uuid": "3c127083-dcc8-4077-b5e5-4ab049ed1478", "comment": "Malware payload", "value": "911e3abd7ffa41847ccb71d9c205e5ae", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086244, "uuid": "70fde0c3-5333-4b57-9f42-9c327df7c2d9", "comment": "Malware payload", "value": "220f08ffeb4d756e7480ecb134b23e5974080d870c76ea4c0875fc7256e39266", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086244, "uuid": "d1364928-f185-462c-9510-427d730a37d6", "value": "T17EC26C627E95E0B457CF37077AF4F8A25538BBB2908DA90C61DE84C113DDAE0F62C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086244, "uuid": "5432c961-4c36-40f8-aa4f-dcdd828632e7", "value": "384:t3CJMmddwwZqLjiOs/zwhiGv7hMEB261gs9h19R5fxGVBK0yQ6RhkQu1G2EGGaRp:IvddxghYzwh7jq581P55ou4BEGVp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086244, "uuid": "bff8a239-a2ff-4331-a97a-5ce8595a1860", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086244, "uuid": "22a3dd38-2461-45e9-949e-0de48362479f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ec41490-373b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086248, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086248, "uuid": "87c3c11d-6454-41d6-88fc-9d74fda92b40", "comment": "Malware payload", "value": "a53ed2d8722fb0eb1ce1510be9031753", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086248, "uuid": "4c77ef95-4801-4629-ba6b-b36050956e43", "comment": "Malware payload", "value": "8251eb059844921d145182f06a61e36b657d29fc168072246308bf25b84e295d", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086248, "uuid": "ea7f020f-8f11-4b7b-9f7c-4e877fd339e2", "value": "T1B0C27BA27E94E0B857CF330B77F4F8924534BBB2908D690CA1EE94C157DDAD4A63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086248, "uuid": "d2f06bf1-c6af-4008-b7c3-0dd81744367f", "value": "384:b3CodVdo3etftSDOEXpv11WpIJEbfEuaM4m+rw1vvq2wn1tn87lwsI:uodVdKsSDO8xWpImbRbEy4Ew5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086248, "uuid": "6f2b777a-2c9c-494d-a11a-4d9fa7a80c65", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086248, "uuid": "2aa89d5a-24eb-4e86-821e-36f131040b5e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ef80d6f-373b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086248, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086248, "uuid": "1367be0b-16d4-47f3-8b44-270bf96a07c6", "comment": "Malware payload", "value": "3f4f0d36d5ea00dbb2a7f9423eb51faa", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086248, "uuid": "04a6c685-7e62-4eb1-95c5-8e05cee64f71", "comment": "Malware payload", "value": "502da816e32cbdc6b3ebeebfb3cc553b3da396422d80f74eb86eebe71aff2dc3", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086248, "uuid": "7fc971d8-debf-4291-8a42-9f3188139f5d", "value": "T177C27C917E94E0B457CF371776F4F8928938ABB1908D690CA1EE94C553DCAE0B63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086248, "uuid": "d10a5ee5-544d-4b69-a382-bde12ac4089b", "value": "384:Z3CUFACmij+sxcQD4Esn2d07hwhg8uo+3SLExRKaoCODz:Mk+sqEzfuo+I63SDz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086248, "uuid": "a0e4a967-8eed-49a5-b1fe-d6afea3131d5", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086248, "uuid": "9a286ede-a519-4a77-870d-45e8153ccc02", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20525d7b-373b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086251, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086251, "uuid": "dd293c9a-6df6-4869-8e66-775c620508de", "comment": "Malware payload", "value": "473877da5aee13cf771fea4f9e557fc3", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086251, "uuid": "436bbea1-5c25-4310-b4c2-c75a03e7c3fc", "comment": "Malware payload", "value": "f03054c873dd635a8c21d3516a62ca9539d6c67206f53b43d677bd8c6412989e", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086251, "uuid": "0ca7b573-c57e-4720-af96-9185c34239fc", "value": "T1E5C27DA17E64F07897CF77077AF4F8A289347B76A09D690D60DE40C613DDAE0A63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086251, "uuid": "2e03079e-1b08-454d-9bc1-04c46a681635", "value": "384:f3C10M/g2yJBbNMmH2MCWiedbR11BSADBcLc5/WYqxz:KSM4vhMfM/NdbXXxVWYql", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086251, "uuid": "5236d89b-d368-4adf-b3c0-da826470a167", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086251, "uuid": "872a099a-17fb-4930-9b15-8b1f1c3da8ea", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "22774013-373b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776086254, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086254, "uuid": "8cbdb2be-cd39-40b2-9f83-1bb3fff85c10", "comment": "Malware payload", "value": "3f5d830f6311801c610a6464394141c5", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086254, "uuid": "032774e6-5ec0-4d1e-8fbb-4f9e8c5248ed", "comment": "Malware payload", "value": "06afb09e82e56357830ec302ca812edf72286ec94ebeb5ec848bbd7e8f46ee6d", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086254, "uuid": "aa9eee3d-01c3-4d4d-9ce7-d9eeeabf69c2", "value": "T1C0C27E61BE94F0B45BCF370776F4F9969938BBB2908DA90C60DA44C117DDBE0B62C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086254, "uuid": "dfe24329-4d9e-4a49-8d1d-34f5480f8dec", "value": "384:g3C3iEmHzvohHSG7VbL36ChjDJChaRlfDM/jYlB9YGqK:v/4kyQL3nhjDJY2l5lB9YpK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086254, "uuid": "b05763be-0adf-41ee-b235-55d4ecadd1ef", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086254, "uuid": "e5b7b1ee-6817-4f84-a38e-3309b7c4c1ff", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "957a9b1f-373b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776086447, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086447, "uuid": "afdabd29-a7de-46a9-a730-15077fc04eb9", "comment": "Malware payload (Mirai)", "value": "5e8205a52683e22fdae8a16f332e0112", "object_relation": "md5", "Tag": [ { "name": "176-65-139-25", "colour": "#7645b7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086447, "uuid": "96d0c65f-facf-4161-971c-5a4f70941c06", "comment": "Malware payload (Mirai)", "value": "883bb05d52d71a8e7cf50aa19760c8f9766aa5f5386b01b31708581138a313de", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-25", "colour": "#7645b7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086447, "uuid": "b4960f7c-efc6-4207-ade6-fda05dfc8379", "value": "T1F6C32C45FC404B23CAD612BBFB5E428D772A17A9D3EE720399256F25378785B0E372", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086447, "uuid": "844b0c22-a3e2-4a72-9d13-3ec9bd6397ec", "value": "1536:p6POsPG51alMEu9ZOJXWnA8q44VX1uTJm/l/UsqVAO3dI1yfxWdI9cTlnDwywyYj:gPOdhrvOFWnd4nuFal/UhvRZWG9XWyD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776086447, "uuid": "21c0db84-9133-41f5-997a-58a796121bd6", "value": 129824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776086447, "uuid": "8069ae67-12ef-4922-b78f-554094890f34", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5b33327-373c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087011, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087011, "uuid": "4dab9e25-f4a8-46b0-ae6e-db1ad1ef351d", "comment": "Malware payload", "value": "0038af28189802c306feff658a3f9c26", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087011, "uuid": "b35c6b40-2994-425b-837b-38256d34fe8a", "comment": "Malware payload", "value": "16910926a65e5232c344f8b31be3c9e7393bde250a4c668e71650fd4a96a3833", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087011, "uuid": "cfb966c6-872c-4a5c-a299-a881f9156f7b", "value": "T13EC27B617E55E0B8ABCF370B76F0F9965438BBB2A08D660CA0EA54C153DCBD4F6384", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087011, "uuid": "8605b3b2-4d93-45fc-9f0f-37637aa36743", "value": "768:V1ohdUCwoQ0+Dkwc7V4+/PmITK22s9tL1M/:VudVwoQxcB4OP9+22s9t5s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087011, "uuid": "2dca3ce1-8d75-4448-9e1d-fffb28d23d53", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087011, "uuid": "b2438f2d-0243-4655-99a8-310adb50977b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6b77eca-373c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087013, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087013, "uuid": "0a032c5e-58bf-402d-aa26-205aa7b4f021", "comment": "Malware payload", "value": "0d66fc53d99318ad1e5977cb6560ccf4", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087013, "uuid": "a7df6f6c-4bdb-4e21-beea-50c3b444fe89", "comment": "Malware payload", "value": "af2cdd527c28966cfdfd0818fabfeda38668057d506f83bf5ebf56a904bb0748", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087013, "uuid": "1525c8fb-6622-4335-b18e-4b5673348958", "value": "T1E641B5EFE4169334CE43467401AA6C9DDF12E63B5502A050FA8C4D45BB14AB5F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087013, "uuid": "aa8dce7f-4892-45a4-becd-515cdffb770c", "value": "48:w2mkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:wkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087013, "uuid": "96418e80-1ccd-47b4-b8b8-b456846987fd", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087013, "uuid": "a923b3c9-23d6-41b2-abc1-0af20ec77642", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e84834e3-373c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087015, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087015, "uuid": "8480553a-0b4f-4188-893c-faf1910313e0", "comment": "Malware payload", "value": "c3c621724e38b5e854f75f120edd2bca", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087015, "uuid": "59e1bab7-cfb2-4e2d-8104-fbabaae45273", "comment": "Malware payload", "value": "ebe141292e5861a38430fabd5847d5c2ed69f339f6d43b7b1070755e87e91f3b", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087015, "uuid": "ca981fea-096b-4398-ae39-30c2c8a7f6a8", "value": "T154E023D44F16FE21C5704839C116F3100F1579150F40B1E100D074D2D4711863E3F6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087015, "uuid": "652518b8-93fc-47e5-a830-a99ba525b4ab", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWX75FFyC6w5fJWXb3GPebRJ:4xtJCUOblw7BJYXHpQtX71mEebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087015, "uuid": "b630a0e1-bd73-4d41-a745-a5bdde0c8f0b", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087015, "uuid": "e39148ce-002e-4be0-81e9-6c7da5f746ef", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9c88eb8-373c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087018, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087018, "uuid": "1e9f19b9-b300-4aea-b00b-e0969dc6dcf0", "comment": "Malware payload", "value": "ae0a56673f348f06961c248f8d2de9ac", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087018, "uuid": "97d17261-9e16-44ae-86c1-931c121211e4", "comment": "Malware payload", "value": "57eafc8802a961c5636a21cd98fc68ecc3c908cb8cab77b0b684c7bb6a674c89", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087018, "uuid": "e776b78a-3bef-42c4-a0dc-eee5a8a810d2", "value": "T105E023D44F16FE61C1700435C116F7140F3D79450D80B1F100D070D2D47018DBE362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087018, "uuid": "7fc3fc92-ec5a-43dc-9f71-0e54ffd1f75f", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXVLVpFyC6w5fJWX1LVdGPebv:4xtJCUOblw7BJYXHpQtXVROwebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087018, "uuid": "486436a5-d142-4d25-904a-0fd4fdb5d719", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087018, "uuid": "992421ab-91ae-44a5-bd3d-4a84e24296ca", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eaabd3ad-373c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087019, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087019, "uuid": "e09f8c9f-cd13-436f-a029-4197d680b188", "comment": "Malware payload", "value": "2b0d5297b654c7c1164b86d875379f10", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087019, "uuid": "57073bfd-a5e5-4370-9f79-26b81585f79a", "comment": "Malware payload", "value": "b5daae52d9cac0d358bf3b90126468d28082918694d6b79b81dd52d573fb7fb7", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087019, "uuid": "78480054-a5c1-4b0b-b6eb-7647e9dda4ae", "value": "T10F41D5EFE4169334CF43823401AA6C9DDF12E63B59029050FA8C4901BF149B5F3A43", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087019, "uuid": "b10616bb-9263-40be-8f04-14890b4dcaac", "value": "48:w22kMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:AkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087019, "uuid": "a8b11395-b9bb-42f4-8a12-f92324ea17c5", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087019, "uuid": "7f414d48-986b-49e2-bec2-45c19dcb03f1", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f02aef36-373c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087029, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087029, "uuid": "b1a284ab-26a0-45cf-a22f-4ae9b669c43c", "comment": "Malware payload", "value": "a9d5ed4e9fb7dd7e320a6eca9ea718c0", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087029, "uuid": "cd366b91-f1f2-48eb-bcb2-54641eb06bdf", "comment": "Malware payload", "value": "f13ed5ab70d68b420632cb870204e12ff84e34d8b6212a6a510fa2bd70e2958e", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087029, "uuid": "f71d993e-54d2-4d46-b24d-58aab0fefa86", "value": "T116E023D45F15FE21F1700839C116F3141F1579050D42B1E100D0D1D1D4715CD3F362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087029, "uuid": "e603a589-e8b7-4ef8-8bf0-9706072b15b1", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXyXDpFFyC6w5fJWXSXDHGPer:4xtJCUOblw7BJYXHpQtXMDFFDUebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087029, "uuid": "b9e570a3-2c7e-42fa-82c4-9e9b434dd308", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087029, "uuid": "066c5fbd-bca6-41c8-90a5-0344e9bfcd6f", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f06346c8-373c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087029, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087029, "uuid": "681849db-1388-444a-8182-b8357e1c1e0d", "comment": "Malware payload", "value": "f966bdea4c76ac2f30f52d0b93f8c5ca", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087029, "uuid": "3c55c353-4d80-469c-86ef-73f7f81c8307", "comment": "Malware payload", "value": "6ac7b7d2c5907f46561759342331bc84834f7e01a40dc44274fb5b4f09b6b25f", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087029, "uuid": "e6c39cc6-e948-4a0a-81f0-0b9b65527d54", "value": "T18AE023D45F16FE25D0700435C21EF3100F15F9050550B1E100D070E2F4701853E363", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087029, "uuid": "a5fb3d16-2e4b-41e5-9e0d-360b077a6ec5", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXOBZhFyC6w5fJWXuBXLGPebv:4xtJCUOblw7BJYXHpQtXsQebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087029, "uuid": "c5095e6b-2b58-44cc-9788-fbf21469c8c7", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087029, "uuid": "22fd5b17-c4cf-45f5-8256-abceb7f9e974", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f278983b-373c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087033, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087033, "uuid": "b2a6ea89-74f3-4ad2-a094-29a73da41a50", "comment": "Malware payload", "value": "542b4c351706736f4aeb041e92d0e375", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087033, "uuid": "21e63ac0-6f27-491f-9753-b2006333fbf7", "comment": "Malware payload", "value": "73557dc8233fcda24372d21242f53d9219cc3a608df731653e2145f8dbf6d11b", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087033, "uuid": "cf050d86-6909-4767-a024-c37a223cc6af", "value": "T188F22E501F0BBA06D17B0C8E78BBF5CB617512BD0A009A6961FD368AC61378D6CDB8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087033, "uuid": "b4f502a4-5a39-4330-bf05-c4470f679655", "value": "384:AHSup/9Ktto+TgE8ZZWdc442gYXt2ImugY6ngvNc0mdPZxBI0ZGB0eyTA+/WY:4SEbZs8TATIGKt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087033, "uuid": "4a9ecf97-3fb8-4819-b7a1-b6f456b6eb4c", "value": 36160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087033, "uuid": "2c6377a7-8f58-4ed0-96f2-ee87a9d95122", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f29e3c59-373c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087033, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087033, "uuid": "f8182210-f850-41c1-9830-f0fd3b41f948", "comment": "Malware payload", "value": "17341b31295150509f71b7dd1e49fb1d", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087033, "uuid": "3d61886e-ccd8-4f3d-b8ca-68ef58ef6fa4", "comment": "Malware payload", "value": "d2d5bfeaa561e2fbfc8ab19ce3a52fca0cb1cfe938cac2029632f8e93e2ff117", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087033, "uuid": "cee87cd3-1bdb-4f73-97bf-ebe6bb0925d5", "value": "T105C26BA1BE99B1B867CF330776F0F8924534BB72908D690DA0DE54C127DDBE0A93C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087033, "uuid": "f0b4adf5-91db-49e5-99d0-f70e2d23077d", "value": "384:UF3Cgqyn7wA0IGbmvK5lv9IKZqvTSxSQX9INv:9jy7f0rAAv9TQTS58", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087033, "uuid": "10a4c593-4a89-49a4-a466-c789d5dd14b6", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087033, "uuid": "d98b488e-b976-4e4c-b6dc-b04694acc25f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f32f9fb7-373c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087034, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087034, "uuid": "b72af5d1-51c8-45a8-8e92-df79a17e51d7", "comment": "Malware payload", "value": "8257189063f4f048a409b854efd03f85", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087034, "uuid": "d0f1f158-e2ab-44d6-80fa-4991b385344c", "comment": "Malware payload", "value": "66b94d27371bb74e1239aed02f3df8d242a7d104dc2e1c0f50630d5209253dbc", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087034, "uuid": "26b613ef-aa7b-4520-ba53-7f7f4a671dae", "value": "T10041B5EFE4169334CE83867401AA6C9DDF52E63B55029050FA8C4D46BB109B5F3A53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087034, "uuid": "6725e154-dc45-4fe2-9d65-5e664306d505", "value": "48:w2GkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:AkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087034, "uuid": "738146f8-899b-40f4-a2e9-f29a4943fba8", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087034, "uuid": "f87f5c99-1b1b-4be1-bcf0-37597757bb20", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f4d7119a-373c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087037, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087037, "uuid": "5dde6d54-5c1b-4867-9029-3715714a4d78", "comment": "Malware payload", "value": "f3ec02464d4284d2a8311b3830ff27e8", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087037, "uuid": "ebad7de3-be64-4112-85b4-7343aae30883", "comment": "Malware payload", "value": "51a1d751a0ed8b61d3c23b8740ce1e46ae4c10fba40d0712f6e8f438bea5fb50", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087037, "uuid": "578c6213-518c-408e-8940-b487c6cdf82f", "value": "T1B541D5EFE4169334CE43423401AA6CADDF12F63B55029050FA8C4901BB109B1F3A43", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087037, "uuid": "a66c6793-a055-4f25-b676-d13f42e5c179", "value": "48:w22kMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:gkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087037, "uuid": "d5625178-e38c-43b1-b684-bc3cea7dc1e4", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087037, "uuid": "c22b2ca3-6736-4c66-8b5f-faa9733e2101", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f969968b-373c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087044, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087044, "uuid": "9fad37b8-ec38-42f9-85d6-36c908831aca", "comment": "Malware payload", "value": "7f25dba861f7ad25007853a1b045a4db", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087044, "uuid": "8f7384de-112c-48cf-aa6e-5a7d2101fc6c", "comment": "Malware payload", "value": "d9d58a9f5f666671f01bef769ac754c1b6b0548647414138b1174657ac42f0e3", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087044, "uuid": "5cae738e-9f27-4ba0-92dd-642a832ef027", "value": "T126E0A7D45E15EE22C0B104768106E3100F26A9090561B1E100E06491D4713853E262", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087044, "uuid": "2796ac8a-58a0-4d22-a0a0-b430cb6e4e7b", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXXRY1nFyC6w5fJWX3RY1HGPA:4xtJCUOblw7BJYXHpQtXXGrgGqebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087044, "uuid": "e7e7abf2-c834-4dce-8dbb-bff3fc1e33a0", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087044, "uuid": "5b29af70-b5d9-46d6-9aff-db5e28a6b38e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbba8ab7-373c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087048, "uuid": "b218f176-c540-4f25-b115-ec9021612a29", "comment": "Malware payload", "value": "f040ae14d3eb206d8eff5c95a797e322", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087048, "uuid": "371d4ec9-d076-439c-93d5-05bdf3adb32d", "comment": "Malware payload", "value": "62aff1d37038e997fced2f57f9b7fd60f7b8e0ff3079a2daf1b775fee435cd8a", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087048, "uuid": "b4feecab-8947-4900-8995-b43a1665d499", "value": "T1EF41B5EFE4169338CE53467401AA6C9DDF12E63B65029050FE8C4D45BB109B5F3A53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087048, "uuid": "1ca2c007-d7d8-4e75-b241-2dde2724b543", "value": "48:w2ykMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:0kUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087048, "uuid": "701c3c1b-31d8-49d7-b0a0-a2918d97b89f", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087048, "uuid": "b873f8bc-4e0e-451e-ac6c-4af485ac9ffe", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ffe513a9-373c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087055, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087055, "uuid": "c69f8c77-8e2d-49b7-82be-29e11414b3d4", "comment": "Malware payload", "value": "718c48df0df0934598ed5cb1d824c23e", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087055, "uuid": "15571525-0ba5-4866-b9b9-3d8abbabd525", "comment": "Malware payload", "value": "51805e7844d86ed475124f5f6bf3f206ead9ca5b9035080367170f4d705c8a28", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087055, "uuid": "b459247e-530a-4211-8975-9cd75f3cb90e", "value": "T10541B5EFE4169334CE93867401AA6C9DDF12E63B65029050FA8C4945BB109B5F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087055, "uuid": "6a761999-bcbf-4d0f-87de-df052a9c347b", "value": "48:w2KkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:8kUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087055, "uuid": "ec51bdfb-cd15-4661-9f8e-0d62ed307b8d", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087055, "uuid": "cc8730cc-eeee-481b-bd03-5bdc2ae19891", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01ce3ba0-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087058, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087058, "uuid": "65886eb0-a947-426d-bf02-9ff528d1ee91", "comment": "Malware payload", "value": "1b2fe2ad0205476a4507fdf42f4c29df", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087058, "uuid": "e478a174-a4e4-45a3-b68b-673883739119", "comment": "Malware payload", "value": "e6ab953ad3cd39086ee8d1a2dbbc2df354bd552252aad3ff7e3827abeba0e849", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087058, "uuid": "aa2bda0a-8e03-41e9-b150-987df6cc5080", "value": "T17FC27D52BE94F0B8A7CF770776F4F89249387BB5A04DA90DA1DE54C153D8BD0A53C0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087058, "uuid": "ce4b8882-26c4-453a-b837-0f586a52e011", "value": "384:y3CptvULp3KDcCMQbf1dcl6wZPl3uiIiAbi14f2Kd4Khy:hfQDK2l6Ix14OKSOy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087058, "uuid": "0c46d647-c01b-48d5-96df-8f69ad95249a", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087058, "uuid": "b704ec81-e362-40c6-927d-3e03961bc66a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "022aa5f5-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087059, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087059, "uuid": "e75a84c9-7587-4db3-b29c-46146b4f7a8f", "comment": "Malware payload", "value": "1eb187437743b31599f98256971d46c8", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087059, "uuid": "096efceb-dcaa-40d6-bfe6-d21fa36f975d", "comment": "Malware payload", "value": "0b24a864bca8eefe003b6e61de25fb2b74f804e2ac4114e2e9bc3ddfc29cd936", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087059, "uuid": "33b0680c-174f-4a22-b2b9-5b311225cbf9", "value": "T157E023DC4F17FE61D0700875C106F3140F17790D1D50B1F101D055E1F4701853E3A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087059, "uuid": "02735033-262e-47e2-801d-9fd0bc5bfaea", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWX0RhrFFyC6w5fJWXURhdGPer:4xtJCUOblw7BJYXHpQtX0nrBnqebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087059, "uuid": "110f6fbd-bb0f-4ba4-8579-63812940c484", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087059, "uuid": "3af7523f-3711-4494-8c50-38dfc980a598", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "025923bb-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087059, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087059, "uuid": "59d3bc6e-10d9-4fcf-ac2c-f2742d747ae8", "comment": "Malware payload", "value": "94c615889f8b921fd628746c3fe56144", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087059, "uuid": "67edc997-9e4c-4dee-a866-d2bc7abc813c", "comment": "Malware payload", "value": "c7da5f914ab2802b84bb411e4a2f46fdf0754626229a85593e2bd2030039aaf3", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087059, "uuid": "317dba6e-bcb5-4968-be25-df1b66d1ac7f", "value": "T1E32367CD3AD09C52D0DBA893784F9AF31451DC5BE2716B3DB8AE8D93030E11968317", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087059, "uuid": "4916bd16-d51e-4301-a80e-3fa385cb880f", "value": "384:Vq8XeG0jd7rlc5Pr8cVM0TkXprUhaZBnzEY:VqO9yPiziJZBnzEY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087059, "uuid": "3ba2bb88-7964-4557-a4c8-e83469366ad5", "value": 47971, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087059, "uuid": "9d417b05-b077-448d-b966-cc669000ed67", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0260fd5c-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087059, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087059, "uuid": "9c7564d7-a2d7-459d-9979-2a09669589e5", "comment": "Malware payload", "value": "1d56e8baba4b2cdb02904514ae8654ab", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087059, "uuid": "0d05e01a-a927-4ca4-aeee-5bc567039014", "comment": "Malware payload", "value": "f3f557ca796b74ff8a37a2c0a967b472a716028088db0cce8c9fb7f4c5206b37", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087059, "uuid": "7388dd9b-cc7c-4ab4-b9f6-4af10fc603d2", "value": "T1A8E023D44F15FE61D0704637C10FF3100F1579150584B1E100D050D1D4701873E363", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087059, "uuid": "ff65295d-ac2d-4d36-baba-b25fcd1bcd5b", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXzFyC6w5fJWXDGPebRJ:4xtJCUOblw7BJYXHpQtXp7ebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087059, "uuid": "7561cc72-dd7d-4e8d-914e-b1770a38d558", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087059, "uuid": "7b6fe096-2312-4905-8655-fb18d10757c1", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "053d19d5-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087064, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087064, "uuid": "cc946652-e837-4a8c-8991-0611ba50b4e9", "comment": "Malware payload", "value": "7259f9ef0e5c891651549de2487767aa", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087064, "uuid": "645dd865-0e73-437c-bcd7-011cfcb27f00", "comment": "Malware payload", "value": "4b39325132261f811fbd2069a7f15d61722f1257a5b89f66ced1f9c7f19b6c4b", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087064, "uuid": "0a0430e3-8719-46d4-a9fc-44376135a839", "value": "T1E4E023F45F16FE21D1704435C11EF7115F15790D0D81B1E100D050D1D4B018D3E3A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087064, "uuid": "23c5d784-309e-425a-b64b-4d7a09387784", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXDBtFFyC6w5fJWXjBbGPebRJ:4xtJCUOblw7BJYXHpQtXdBkgebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087064, "uuid": "0797de48-6157-4314-9c79-33a18ea70b7b", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087064, "uuid": "f882f58e-2be1-4ecd-b49f-0496bfd32203", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05759272-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087064, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087064, "uuid": "ccd5b476-33e7-4203-af02-b519c7a7a710", "comment": "Malware payload", "value": "b9122a52b6f7a2f933417debb16e699d", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087064, "uuid": "0c199321-6926-4875-a703-64557e1b3479", "comment": "Malware payload", "value": "acecc929369527f67ef92f8a1b93d5c884b3ccc8fec949944472f8ffa2431dc8", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087064, "uuid": "390a6d6f-b82f-48a1-ab5f-e61462c9bc6a", "value": "T169E022F8CF55FF26C0700536C12AF3200F1EB90A6A41B2E200E8A0D5E8701893E362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087064, "uuid": "fb27d64c-934f-43f6-bfb8-310ad734c80a", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWX+BLr7FyC6w5fJWXeBLrDHGI:4xtJCUOblw7BJYXHpQtX+BXBFBXgebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087064, "uuid": "800e8b06-8b29-45bd-8a69-d564129b6b9f", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087064, "uuid": "2ea96060-7e50-4dd5-9b1c-7cefe4cee990", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "061d76d7-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087066, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087066, "uuid": "bcef91cc-2c07-4a9f-896d-a2473ba689d4", "comment": "Malware payload", "value": "789ad70f1d4085bb2d387cae14627f8c", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087066, "uuid": "4ed7bdf7-dfde-43fc-b86f-3f3659eab6d6", "comment": "Malware payload", "value": "7257992857181cf1c07ae443accbbf71a824047cf963335efe17f92506c01cb0", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087066, "uuid": "7766585f-625d-46b4-a0d3-43dcdfebcbe6", "value": "T1BB41B5EFE4169334CE43467401AA6C9DDF16E63B65029060FA8C4945BB109B5F3A17", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087066, "uuid": "ec4ff7d4-e3b0-4713-be8d-e64357e3dbd8", "value": "48:w2mkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:AkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087066, "uuid": "d3ba8151-3f6c-4cb2-80a2-fefde0b0dfe6", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087066, "uuid": "211f9992-d170-46c5-bb39-654dd938c1e8", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "070cf62e-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087067, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087067, "uuid": "a2ee8702-f979-44fa-9c26-77dc334358eb", "comment": "Malware payload", "value": "44a75ad0bcfd92329ac9b25f52ac14ae", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087067, "uuid": "f4e670ce-792e-44b5-b13c-056635d12df7", "comment": "Malware payload", "value": "56b03d36cd2fcbcc33d26b5464e9f07b7b410d843eda1126f500db6793daa207", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087067, "uuid": "d29da97b-e99f-445c-8ac2-84f95a9704a8", "value": "T12D41B5EFE4169734CE43467401AA6C9DDF12E63B59029050FA8C4945BB109B5F3A17", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087067, "uuid": "81a6b880-1200-4a53-9d2a-5a462f2e2cea", "value": "48:w2ukMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:IkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087067, "uuid": "29532d63-59bc-47bb-b30b-4c572e4a477f", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087067, "uuid": "6617ff86-6833-4f06-a3f9-cde4d57fa57d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07e8b976-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087069, "uuid": "0b627bf4-9e95-453d-8ab5-0aa219858e95", "comment": "Malware payload", "value": "54cb0757ff10ee2171474cca1c440ac5", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087069, "uuid": "6fdb3b3c-1db2-4c38-a8dd-f24d5c58d12f", "comment": "Malware payload", "value": "c328e7b0f5bcf654fb72d4a32544558d7a5705c7189a375fc231eae8a1aa4afa", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087069, "uuid": "86d214b0-0637-46ba-834b-c462d5fe3f23", "value": "T17AE023D4DF16FE21C0B00435C10EF3100F1579050542B1E310D051E1D4723853E3A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087069, "uuid": "ed54305a-cb71-4db1-94ee-7c2b4a53799d", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXJ3V1nFyC6w5fJWXp3V1HGPA:4xtJCUOblw7BJYXHpQtXdV1FwV1UebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087069, "uuid": "30dc284b-9b79-4b7a-8690-6765b66357cc", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087069, "uuid": "03e46292-e2f2-4818-aa99-acc8825c1b87", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09996a73-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087071, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087071, "uuid": "a2774c63-455b-4658-a56f-e12cebe47cdd", "comment": "Malware payload", "value": "cd4f286c835d1c3f213c7d7aa018fcc6", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087071, "uuid": "fe4ec0e9-1ffa-489c-9728-38543745a805", "comment": "Malware payload", "value": "022127bc3c6dfb2a9865d86188fc477c53f675d83a8aff7de599a49787773cc3", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087071, "uuid": "a50a5ded-16cc-4d19-beb2-9c877a14137e", "value": "T19341A4EFE4169334CE43867401AA6C9DDF22E63B65029060FE8C4D45BB109B5F3A53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087071, "uuid": "8f045b45-7de9-4b7a-9766-c882e4324c23", "value": "48:w2+kMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:gkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087071, "uuid": "c85aa3f9-7bb9-433b-a323-d3434850635b", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087071, "uuid": "9c6db85e-de58-4f17-8d01-2df3a4753f5d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09a7fc6f-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087071, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087071, "uuid": "f66cc790-3506-425c-bbe8-ae1629f219c8", "comment": "Malware payload", "value": "4bcf364e53cd59238d5f95ade58b7b28", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087071, "uuid": "3d1daebe-e5cf-44d0-84a6-007235bd5b22", "comment": "Malware payload", "value": "5752ebf191325d4911e1a11aeda52e0e4d734eb67753ac78be4a9906dbfd6e19", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087071, "uuid": "d1a167d6-01c9-4c51-a260-d267b00ee42a", "value": "T195E023F44F55FF25D0700435C116FB104F1579050D81B1F100D054D1D4B11863E362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087071, "uuid": "cdc34430-3a97-4ba5-9bac-5127ca62fa8b", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXNTdFFyC6w5fJWXtTrGPebRJ:4xtJCUOblw7BJYXHpQtX7tebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087071, "uuid": "74273a71-03d6-4157-945b-47e033aadc47", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087071, "uuid": "198664c3-e564-47a4-a37a-5d8e45d71ccf", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a842882-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087073, "uuid": "0c8b7af3-db75-4c5e-8c0e-4b8fc3ffd052", "comment": "Malware payload", "value": "ea4e59487794b23735fbea3710933162", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087073, "uuid": "523f04da-568e-4bf4-9dba-8372f43c450a", "comment": "Malware payload", "value": "b71796070a976b5f701f883e84b05ba889444df5b71be3fd44922f3a07a82d2c", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087073, "uuid": "cbce57f5-280a-4006-885c-60e754b953fa", "value": "T10DE0A7E48E15BE21C1700436811AE7115F1679050981B1E100D09091D4B01893E2A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087073, "uuid": "81e10bfd-b536-4243-be32-ddd6c280c3c9", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXEBDpFFyC6w5fJWXkBDHGPer:4xtJCUOblw7BJYXHpQtXEBDF/BDUebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087073, "uuid": "b9b113d8-2e46-4e0e-84de-c724f54c37bd", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087073, "uuid": "eeca062e-9362-4d78-9c08-910910a1cc2d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c2c416d-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087076, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087076, "uuid": "40ba4b20-a7e5-46a7-b1a0-8b2ca8303951", "comment": "Malware payload", "value": "0bc0ab248cfa6941c3f736b0b516c57d", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087076, "uuid": "d5c18bc4-ab6f-4828-9957-5f410d4ea2c2", "comment": "Malware payload", "value": "79fd55efbdaaf7ae40c8a9cc9e717abed3b4eee0194551975e1f4b23d635496b", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087076, "uuid": "3e4e3bf4-8aa5-4cb1-98fb-69389a1a18e3", "value": "T1BC41D5EFE4169334CE43823401AA6C9DDF12E63B59029050FA8C4D01BF10AB1F3A07", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087076, "uuid": "4111ab38-ecd8-4438-b003-5a9b115300cb", "value": "48:w2KkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:kkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087076, "uuid": "913f2765-6cc4-488a-b50a-e010b7843089", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087076, "uuid": "0b3ceca8-81f5-4952-8dd5-30b997c4fce6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0cfc43f1-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087077, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087077, "uuid": "502d04c9-8fb3-4f6b-bf14-e92414a7f582", "comment": "Malware payload", "value": "1077cb376d5e46bb5b156f4ef9b32e1c", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087077, "uuid": "fc445f4b-d614-4c57-82f5-dc91a01cbe85", "comment": "Malware payload", "value": "de3e481d77f369a61245c5c5a286e0c620120c9e39a962f9021cdc919d3f80ae", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087077, "uuid": "7381a78a-4ad5-4fad-b6fa-c22115557b57", "value": "T14BE022E8CF55FF26C0700436C22AF7200F1EB90A2E80B2E200E0A0D5F8B01893E362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087077, "uuid": "bbffed3e-1ead-4bac-95f0-e09de4c77256", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWX+GhBtFFyC6w5fJWXeGhBbGI:4xtJCUOblw7BJYXHpQtX+krFkqebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087077, "uuid": "a95d5ac6-54d6-45cb-8625-b4ef9e9cb21c", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087077, "uuid": "ddbe953f-b311-4d0c-90c6-ca31c83c270f", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0df8e9c3-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087079, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087079, "uuid": "6df465f1-659a-4d64-9cbf-c2c2152c2f44", "comment": "Malware payload", "value": "922c6d4c7fa1aa517ba87e30e8562174", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087079, "uuid": "6fc48503-e0d7-4c27-bf6d-9a4914baf153", "comment": "Malware payload", "value": "b47e3a4ec0688a3a96a8d6276e6d1258b03ff24358ec36e4828395c271de7ba2", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087079, "uuid": "fcb886dd-e411-451a-8866-bcdeafbd7039", "value": "T1F741D5EFE4169334CE43823401AA6C9DDF12E63B5502A060FA8C4945BB149B1F3A43", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087079, "uuid": "6175b24e-3e03-4658-af7f-7a4fae8a541f", "value": "48:w2akMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:8kUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087079, "uuid": "d92cd67e-e016-4acb-aad9-d29982f3c5de", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087079, "uuid": "beae9cdb-b5ac-4bfd-b3bf-a5624456a513", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "14eb6595-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087090, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087090, "uuid": "de7a3b62-7593-4a89-bcb4-973c217a37fc", "comment": "Malware payload", "value": "c6c5603faebf77c3e1ec8af9d9fbbc08", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087090, "uuid": "642ea1ed-2546-428b-9e3c-5cd5fb3297af", "comment": "Malware payload", "value": "9c1428450e192d2f863d2b11b0b9502ecedee688e247bcc7f0915f0f555c9f3f", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087090, "uuid": "12258df8-7135-47a6-b21d-3993f478612e", "value": "T1D7E0A7D45E26AE72D170593A8107E3200F2669050540B1E100D05091E4701C53F272", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087090, "uuid": "1ec110e5-54e8-4cb2-9247-9ee79b590f73", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXishBDnFyC6w5fJWXCshBDn1:4xtJCUOblw7BJYXHpQtXVTFiTUebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087090, "uuid": "5cf6e62a-1e13-4479-bbc4-9b1c73b4d475", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087090, "uuid": "568dfe20-6581-4a98-9861-54a97392c921", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "153b3b92-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087091, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087091, "uuid": "13fde54a-4c4f-4951-b6f9-bc15c7953005", "comment": "Malware payload", "value": "545987103b8c692ff9bec09bc63ca2c6", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087091, "uuid": "b5993067-4b94-4a33-8032-6999f403d57e", "comment": "Malware payload", "value": "c93e8f81495d52c48924fc69e3b74d433584654cfaa4127016bac2cd56392ab2", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087091, "uuid": "2ec0a5ed-dd60-41ba-9dbd-3798abf1d845", "value": "T1DE41B5EFE4169334CE43467401AA6C9DDF12F63B6502A050FA8C4945BB149B5F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087091, "uuid": "343a38f6-98e1-4866-8eb7-8e006b68bd9b", "value": "48:w2CkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:skUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087091, "uuid": "d9204689-7561-4787-9b18-bdd59357a70d", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087091, "uuid": "97e0061d-0f0b-4e5b-8dcc-127d9d77b24c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18a65382-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087097, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087097, "uuid": "03943306-6fd8-4ee6-9def-99cea0134ed6", "comment": "Malware payload", "value": "ed2bf0f196fdc30bcf0010deec2e38e1", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087097, "uuid": "a71dee36-5f22-4c75-8348-5bc435a41110", "comment": "Malware payload", "value": "172180c7df6dc35db40f27412a2fd9f598926e4d42cb80deff88387a8b2a9a3d", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087097, "uuid": "78c24aee-9d3a-4b4e-abda-1b2d5974a4ca", "value": "T16D41A4EFE4169334CE43867401AA6C9DDF12E63B6502A050FA8C4D45BB109B6F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087097, "uuid": "5e233887-ce4b-4e89-bbf8-d0b66e619699", "value": "48:w2m7kMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:07kUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087097, "uuid": "b7264323-4798-4691-adc8-b853d9464630", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087097, "uuid": "463def6f-a832-4f7f-8408-7b48fd8393ca", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a10bc10-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087099, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087099, "uuid": "8e5080b4-d854-4b4c-9103-b89968f0035d", "comment": "Malware payload", "value": "9c8211acfe19be6495a00514ca6086eb", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087099, "uuid": "48c10e7c-eeb9-4807-9916-0ec8fdaaa8eb", "comment": "Malware payload", "value": "fd6182d15d253530e53b62e0ccc1babbb9f1f605eb4af5c4ee14eb13c9b24c4f", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087099, "uuid": "de665196-23e6-4bf0-ad6f-8de3488112e5", "value": "T1C641D5EFE4169334CE83427501AA6C9DDF22E63B5502A050FE8C4901BB10AB1F3A07", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087099, "uuid": "856c4df0-c544-4372-b164-c1cdd7970031", "value": "48:w2CkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:skUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087099, "uuid": "0d0fde60-9af1-4400-844b-a9d667c0201f", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087099, "uuid": "0475abc7-5b83-4fe4-9274-3e7f5fa7b704", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a47f824-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087099, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087099, "uuid": "1863d5bc-9c32-406e-9ee8-ff7224ab4275", "comment": "Malware payload", "value": "5c5b84c7031ee62112b86d70d53a6095", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087099, "uuid": "b3a1f616-65dd-47d0-b5aa-19340f628535", "comment": "Malware payload", "value": "6f7ff02be7b497b491d4f0ec8c6488dff5da8c5090b59fc20500b1e6b7429363", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087099, "uuid": "74fe1805-566e-4b53-a552-5e689d5cdc89", "value": "T14341B5EFE4169338CE43467401AA6D9DDF12F63B55029050FA9C4945BF109B5F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087099, "uuid": "fe86c118-cc30-4ccb-af12-28b79eeadd86", "value": "48:w2ikMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:EkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087099, "uuid": "b4989a61-af5c-434f-a29c-6affc63c2d4c", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087099, "uuid": "44670ae8-0994-4579-9702-eca79b19ead1", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a87c8f9-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087100, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087100, "uuid": "0910f0f8-aa70-42fa-aa0c-c49f30b718ab", "comment": "Malware payload", "value": "95d7d85c2b4f5ab654af753c3dff4389", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087100, "uuid": "40478dd0-ee48-43d1-be0f-2b66ae58cbca", "comment": "Malware payload", "value": "d3b8fff9f0d0fdf0a4b8454eada113b6b433ea34ce3ae1de74bac0eba0ec36b8", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087100, "uuid": "cc2f5927-c58e-44ac-932f-f690891d592d", "value": "T1BE41B5EFE4169334CE83867401AA6C9DDF22E63B55029050FA8C4945BB509B5F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087100, "uuid": "e8db33c1-10f7-4a99-a412-bcae79d7327a", "value": "48:w26kMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:0kUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087100, "uuid": "72a19503-ac2a-430e-85c0-39013709e49a", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087100, "uuid": "06281584-c748-44a0-a415-f437e9e49058", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1dfedda7-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087106, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087106, "uuid": "de34ccbf-4197-4d7c-92fa-4dac0e25b0bb", "comment": "Malware payload", "value": "ab1e245d3ad49b8151ba29955cfc9410", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087106, "uuid": "b8092317-8fd5-478b-a3fd-3e93af15b64a", "comment": "Malware payload", "value": "6c69ccb2acebfb5b3adf1c961d069ef1d2813805237f6b4bfb663622967b0e16", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087106, "uuid": "5920ae82-71fe-4238-98e3-6458ef7f3f75", "value": "T11AE0A7E44F15BE21C3B004358116F3100F5A69050940B2E200E050D5D4702893E267", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087106, "uuid": "e777ade3-e89b-4817-9323-2c6d6ec6fef7", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXWCL3FyC6w5fJWX2CL3GPebv:4xtJCUOblw7BJYXHpQtXr1uEebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087106, "uuid": "e165aac5-9333-4892-8f9f-efcf8cb2d999", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087106, "uuid": "283ffc7d-744a-4615-90ef-5caea584531c", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ed763ae-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087107, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087107, "uuid": "056b498d-ca10-4d57-bbe3-121bd2f5b180", "comment": "Malware payload", "value": "9c6fda68114ef4e419179893a8d9c23d", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087107, "uuid": "937ed930-6145-4775-90c8-88bb9cfaed10", "comment": "Malware payload", "value": "595fe06cbd7f44f12f15a84a61c98159ddbe0491f28a212f5827ec82e22fe831", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087107, "uuid": "34cb7d18-2947-45bc-b75f-1a69f00a720a", "value": "T1A741A2EFE4169338CE43867401AA6C9DDF12E63B6502A060FA8C4D45BB109B5F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087107, "uuid": "c7b1eea0-fc6c-40ed-83a1-6080aee92145", "value": "48:w2ekMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:QkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087107, "uuid": "308789a2-106c-4bf1-9040-2842ed70dd10", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087107, "uuid": "b996ba05-cd94-4cbd-b6fd-4652042af7f3", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2174a63d-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087111, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087111, "uuid": "70cdcdb4-64da-4991-9dfc-f1bd1f89dd62", "comment": "Malware payload", "value": "70a5a05c50f1c4c4a4fad23e00881a3a", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087111, "uuid": "9a821503-56c7-4132-bb43-9982a03566c4", "comment": "Malware payload", "value": "b573ff40ed956b0404fd6809882ed3b9c608806adbaec44e1a27ad7396ad3f9a", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087111, "uuid": "93db1c9c-1d27-4e39-9d44-eecffa830459", "value": "T12241B4EFE4169334CE43823401AA6C9DDF12E63B5502A050FA8C4901BB149B1F3A03", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087111, "uuid": "6d7a9278-d508-48ee-8812-ca69a09ff4c3", "value": "48:w2ikMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:kkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087111, "uuid": "c1dc528a-30db-48fa-87a1-c43889a431ee", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087111, "uuid": "1c129001-947d-488c-a37c-ea42bbe97e55", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "239cc263-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087115, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087115, "uuid": "45af0a97-b030-4935-947f-7eb30f7938a8", "comment": "Malware payload", "value": "f3ee6beb4266b78261ea8e0b254542f8", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087115, "uuid": "12999373-56ea-4e31-ac09-155f3702aa29", "comment": "Malware payload", "value": "b8828d56073d95b0e0c484f01f402e321d306da278cf290d75b74e5cfe4a87f2", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087115, "uuid": "6aa26e0d-ce5e-4ef5-b88b-edb1c94c24e0", "value": "T11DE023D44F1BFE23C0700435C106F7110F25F90505C1B1E100D050D1D570185BE362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087115, "uuid": "83787131-37d6-4ec0-99f5-7c4f7427bfa0", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXEr7FyC6w5fJWXkrDHGPebRJ:4xtJCUOblw7BJYXHpQtXErBprgebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087115, "uuid": "2af4fffa-05e4-45cb-9440-553872decf19", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087115, "uuid": "74ee1422-9e99-47f2-a108-5dbf0203d396", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "24a48641-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087117, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087117, "uuid": "83226170-58a2-4775-94ac-a64faaf3c4fe", "comment": "Malware payload", "value": "43b25f40efa8c391cb3f45890541645c", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087117, "uuid": "bc672ab5-d30d-4fde-acb0-7ac1879326db", "comment": "Malware payload", "value": "5639272858b827b6e90b60423d154c1801f00b92f3f20de22aed25aad1f61c9d", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087117, "uuid": "1b4d1d36-b23c-496c-91e7-2c6f7fbc307a", "value": "T1A5E023DC4F25FE21C1700435C146F3104F1579170585B1F100D050D1D470186BF366", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087117, "uuid": "12ff2d57-b8a1-4393-b672-814aa3ef2d80", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXMpFyC6w5fJWXsdGPebRJ:4xtJCUOblw7BJYXHpQtXMrfqebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087117, "uuid": "2156a873-78ce-4be8-bcfd-8f63794b3d27", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087117, "uuid": "b69dae2b-3afb-4d7e-abc1-d43be2065fee", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25a070fd-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087118, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087118, "uuid": "5f735082-be66-4b94-83f4-3330f0be8c51", "comment": "Malware payload", "value": "4beb02ecd6a2ac8f42e04a2b46ac36b2", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087118, "uuid": "b9e677f9-ec46-4ef1-8d76-095fed293246", "comment": "Malware payload", "value": "70a01b098eac9713e9f882673481085a4082b11a0ebc10052e0a0482c2308ded", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087118, "uuid": "13a799e3-e28e-4066-9d7f-547e004dd3ab", "value": "T169E023F4CF59FF25D0700539C156F3500F1579055741B1F101D050D1D4B01863E762", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087118, "uuid": "3a64888e-7137-4f63-8339-dfb752429a19", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWX2iB7FyC6w5fJWXWiBDHGPer:4xtJCUOblw7BJYXHpQtX2iBNigebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087118, "uuid": "0df10062-21cc-4b30-a9fe-edb39a7346dd", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087118, "uuid": "9c20f44f-ec58-4064-aa21-2e37e268cb00", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29be52d4-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087125, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087125, "uuid": "750cec4a-56d3-46bd-b53c-260683b4baed", "comment": "Malware payload", "value": "c0c5a29d8e7e1a99dc44afcd36d27450", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087125, "uuid": "82e322ce-e475-4aa0-8333-9126009b52b4", "comment": "Malware payload", "value": "b577b803e265489813414504412b8193fd4b9c4acb51829b3583497f915fe4f2", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087125, "uuid": "c26ba48c-9ef7-4070-b8cd-c084baaf1785", "value": "T174E0A7D94E15BE22C070047A811BE3110F1569060580B1E201D09591D8B21853F266", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087125, "uuid": "d9fb885a-9555-45c1-8108-0b3f76fc02d0", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXxX7FyC6w5fJWXRXbGPebRJ:4xtJCUOblw7BJYXHpQtXxXBGXgebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087125, "uuid": "52ecc221-5860-46d5-a4a2-bb076fa61b38", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087125, "uuid": "faa1ed92-9397-4d7d-a887-b21c8127716b", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29e15bb5-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087126, "uuid": "2f414d0d-d21f-44b2-a483-7b19af890965", "comment": "Malware payload", "value": "fffc0df4738e2a5e0eb1c0ed0489ca3b", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087126, "uuid": "797a1814-4b38-42cf-aeb3-5605433dab8e", "comment": "Malware payload", "value": "0407c456139ba9000ba6f9e4e80dd70d2684dba8cc471619da8e7fcade61b1e3", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087126, "uuid": "00bc3453-f2a3-4774-b617-bead63af8840", "value": "T142E0A7D48E55EF65C17004368126E3200F156D650540B1F100D16491D4701857E2E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087126, "uuid": "a30fc0ff-ed57-4977-b564-398d64735623", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXwKrZTFFyC6w5fJWXQKrXLGI:4xtJCUOblw7BJYXHpQtXwuZTLuXQebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087126, "uuid": "d65e0ef2-d3e9-4ad3-899b-dbc43c32fde2", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087126, "uuid": "d2107986-4127-4251-81bb-38830f42faaa", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2bb08626-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087129, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087129, "uuid": "6f8d10d1-e6ea-4acc-8b48-f4db6a9a6c68", "comment": "Malware payload", "value": "2282ea6949cd6823852d1c2488f20307", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087129, "uuid": "de238cff-fae5-4b5f-9bcc-d82d0e116e93", "comment": "Malware payload", "value": "ab611add589bc892d17369b159ce5b06d351214d40537efc78b7f4fcb14aacfc", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087129, "uuid": "aa6ce680-eed2-4a70-b1c0-5518c1e5dc3d", "value": "T182E0A9F88E55EE22C2720436810AE3289F9AA90A0A40F2E200E0A091E8701893E262", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087129, "uuid": "bd583888-e43b-4930-a2b8-36332a4bb79c", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXiBZhFyC6w5fJWXCBXTHGPer:4xtJCUOblw7BJYXHpQtXiZTnXQebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087129, "uuid": "77a72eff-8f84-4413-9980-7c31d8aa2c43", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087129, "uuid": "e5795cdd-6aa3-4057-8445-1b155ef14fc8", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d5a76d8-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087131, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087131, "uuid": "26b88b81-ad5b-42e6-bc89-68f48b583ecc", "comment": "Malware payload", "value": "e04825dd90b7ec081197d6c2b560b733", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087131, "uuid": "1f8554df-332b-4381-9e7f-a2cbe0d9c842", "comment": "Malware payload", "value": "5af4a46c38efec52f645504b58672304a7463148020999e5aa198b397c44a12d", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087131, "uuid": "98a0f855-fa5c-42c9-ba62-1ae5eecad2ce", "value": "T1E541B5EFE4169334CE43467401AA6C9DDF12E63B65029050FA8C4D45BB109B5F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087131, "uuid": "cf29d634-8a2a-4759-8a97-f4ae1b7c63f3", "value": "48:w2OkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:4kUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087131, "uuid": "556b30cc-bfe2-4e9c-91d7-e3a15b0bacba", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087131, "uuid": "a0fa2610-052a-426f-8bbe-269bcb76d98b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e0e2e31-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087133, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087133, "uuid": "e56e4f03-0d9f-41de-ae59-d42b9709bdc2", "comment": "Malware payload", "value": "d6d44aee9e1b0300b1702b9ebf16429e", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087133, "uuid": "5458cb08-59ec-41d4-8964-3e6805393521", "comment": "Malware payload", "value": "ad6055601f7f7089616ad0937f47c9ffab0497276d6fd559618c7116cc684866", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087133, "uuid": "70e5eeea-b130-43f3-9d07-b2e042041ef4", "value": "T10DE023DC5F16FE21D0710435C106F3140F3579070580B1E100D055D5D4712857E762", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087133, "uuid": "55f68307-f216-40a9-9308-c2be5ffc6368", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXXDnFyC6w5fJWX3DHGPebRJ:4xtJCUOblw7BJYXHpQtXRjebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087133, "uuid": "34809fa1-f98b-4c64-ba3a-214afd2ef7c4", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087133, "uuid": "20a12097-5635-4003-9426-0cab3798e6cd", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e21a239-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087133, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087133, "uuid": "e8da7a28-7c60-4209-bccc-783d3218d76b", "comment": "Malware payload", "value": "f362e2e874ad6868ffc81c152d374801", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087133, "uuid": "b6fb077b-3803-4185-abca-3b43e7741f68", "comment": "Malware payload", "value": "1c9b3ccf7ec968b90486a6957277e34df6612046b5059f2f9d90065138539601", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087133, "uuid": "6226e65a-f8c6-4c77-968d-89a4dababcdc", "value": "T1EAE0A7D45E95EFA6C0704435821AF7100F5D69050540B1E100D45C91E4701C97E2A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087133, "uuid": "e165ce68-53dc-4b96-b859-65fb56732ebc", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXPFyC6w5fJWXPHGPebRJ:4xtJCUOblw7BJYXHpQtX9XebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087133, "uuid": "a1052532-77bc-4ee5-baff-ed93fd5c6088", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087133, "uuid": "996251b7-6187-4776-a0f5-88f9cb33623d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e316955-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087133, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087133, "uuid": "c3480aed-b28d-4724-bad3-885792d75eeb", "comment": "Malware payload", "value": "72a8ace84429197ce5c269be07d701cb", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087133, "uuid": "6ee2b26c-3c1f-485b-918b-4444f02ffaf5", "comment": "Malware payload", "value": "bd3a1bf119c9cd086e0c0d4800846fc65fc264f10e7420953b7b39154072da05", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087133, "uuid": "bae6863a-6581-484d-ad13-f523f06f30dc", "value": "T1B641B5EFE4169334CE43467401AA6C9DDF12E63B59029050FE9C4A45BB109B5F3A53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087133, "uuid": "e459dc11-6c5c-46b2-8158-4c9e0af51e1b", "value": "48:w2qkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:kkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087133, "uuid": "c8904ea6-d11e-4306-82f4-913bc231d5ad", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087133, "uuid": "f6055f6b-8d0d-41d3-9701-e56b30c15f54", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ec763e7-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087134, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087134, "uuid": "1fee2fbe-628b-4831-9657-f5a3447b55c8", "comment": "Malware payload", "value": "b7a1ce281dd779be609afea55b375cf4", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087134, "uuid": "a769a5f5-fc70-4581-ab58-ef2d362f8b96", "comment": "Malware payload", "value": "e0597b8a18a3d67eb872a52a4d94ec9fbfe6a67b5cbfed6868bca27146c13207", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087134, "uuid": "7955f1ae-5b9c-4695-a8cf-d2462ad8089e", "value": "T138E023DC4F17FE21C1710435C106F7104F1579455D40B1E100D054E1D4B018D3E362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087134, "uuid": "d13ada03-fc2e-4444-864f-b125bd2a658c", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXXT3FTFFyC6w5fJWX3T3LLGI:4xtJCUOblw7BJYXHpQtXDVmkebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087134, "uuid": "e7e4cb6c-4ba5-48d6-873a-35fee09465ea", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087134, "uuid": "8dc1e593-0388-4323-9ba6-63b275d741ae", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31708106-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087138, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087138, "uuid": "8910c783-050e-48c7-9f85-32819d83290d", "comment": "Malware payload", "value": "ee67f85e84f6854a3c6d9700ba199e61", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087138, "uuid": "bee61282-1b74-445d-b85a-cc78d1f82fd0", "comment": "Malware payload", "value": "11439dcef4d5da27cd36beea3d133f7ea7a78530731aab4675da9750e867ad84", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087138, "uuid": "9a791ec3-1f9e-40a1-989d-c48930f00f4f", "value": "T1F741B5EFE416D334CE43867401AA6C9DDF12E63B55029050FA8C4945BB109B6F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087138, "uuid": "814c222f-fb61-43b9-bf07-788e55956e65", "value": "48:w22kMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:gkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087138, "uuid": "201be692-1bfc-464b-8d83-020e364b596c", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087138, "uuid": "2ee1e338-1a54-43ed-8901-0116a710eea0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3292fbd0-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087140, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087140, "uuid": "589ec5a9-2226-4692-93d7-32940dca4be5", "comment": "Malware payload", "value": "bd60278f7eec267b9c7125cb87cedc8a", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087140, "uuid": "8fefdbda-c439-485a-bdfc-ce8fb770ee56", "comment": "Malware payload", "value": "d84791f7325f43ed588e734ca3bcf05bc3955531c7e75533477ce7a950173841", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087140, "uuid": "96ab87a1-15c6-4a5d-8d6d-d5090f6f0b07", "value": "T19941D5EFE4169334CE43823401AA6C9DDF12E63B6902A050FA8C4901BB10AB1F3A07", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087140, "uuid": "7eb3bb39-352d-4084-ba4e-bf72ab1c240b", "value": "48:w2BokMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:XokUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087140, "uuid": "8aad709d-48d8-42d6-accf-97a585786345", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087140, "uuid": "63430f53-bd91-4f95-a009-4f695e2669b3", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "32cab2cf-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087140, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087140, "uuid": "356c6040-73d4-48b4-9fd0-0607c4b53aa6", "comment": "Malware payload", "value": "89ffbeeb8f3ebeba0f591e462f0dac28", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087140, "uuid": "d049e5f8-a84a-4d48-8356-2ffe578d212d", "comment": "Malware payload", "value": "d1182c35c9d38e689cc9f9d85bc3114abf6e3da8d82ba3f6415b52dc821b9306", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087140, "uuid": "109d3a74-74e3-4807-babf-625bc984bb65", "value": "T12AE0A7E4CE55AF21D07108368106E3140F15B9150940B1E100E055A1E5701853E366", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087140, "uuid": "62061c71-c31e-437b-9043-81086af0b2a9", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWX1S1FTFFyC6w5fJWXVS1LLGI:4xtJCUOblw7BJYXHpQtX1S1FSS1UebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087140, "uuid": "cc79c936-f0bc-4440-ae4a-6be276248618", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087140, "uuid": "0e68e2a7-d9d1-4a1f-9500-78ab00a588d3", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34f1c5ea-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087144, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087144, "uuid": "d12f21e0-91fb-43a6-9308-b7d6bd2e016b", "comment": "Malware payload", "value": "c2980627f35ee59529121cdd14fc0595", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087144, "uuid": "057411cb-77e1-44f4-84af-7689226f0943", "comment": "Malware payload", "value": "e0de3057bee050786f0eed8cfe5f33c50930b68f1a2c381683bca4b4e7ecd1d2", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087144, "uuid": "76723269-dd47-434f-9a8a-280f213ba210", "value": "T103E0A9F88E15AF22C0700476812AE3200F2BAD1A0A40B2F200E2A491E8701893F2A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087144, "uuid": "9b8989a6-5693-41c7-a87f-4ff2d06d1e58", "value": "6:4xtJCUOblw7BJYXHpQtXb2hPTs2hBQebRJ:83CUOBw7BJYJW2hA2hBQ6RJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087144, "uuid": "67d74ec2-49e6-45bc-a0dd-2ef541ca8d5f", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087144, "uuid": "edae3fa6-8baf-4451-b8c9-4dda4aa00290", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3602fc7a-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087146, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087146, "uuid": "98ca85b5-9029-484b-ae12-b3d5e3151fea", "comment": "Malware payload", "value": "04254fadc2a3a33dabab9012d1c3046c", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087146, "uuid": "b3da664b-b4aa-42bf-94d8-7fd641d805fd", "comment": "Malware payload", "value": "215b2dab53fa3f39922b7955d4ec04aeaf2ea4d1ba90fe553f9b690c45af0e55", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087146, "uuid": "42bbc8e2-54dd-42f9-9641-113deef3774d", "value": "T120E023D4CF19FE61D1700435C216F3700F1579450541B1E100D0D0D1D4702853E373", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087146, "uuid": "72e6e397-6352-4137-9c34-18df4a5bbe3a", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXBXLXFhFyC6w5fJWXhXLXLLV:4xtJCUOblw7BJYXHpQtXBbXFIbXUebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087146, "uuid": "da1f04b6-4b6b-4c6b-bd74-db7744ba26c1", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087146, "uuid": "f3d49cf9-5cc5-4c5c-9226-f47328ad0e37", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "36425f23-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087146, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087146, "uuid": "6f4caa31-f17f-4e77-8e5b-fd9fefca1f7b", "comment": "Malware payload", "value": "fe5fe9c41ac7b705128eb1e79d1ed366", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087146, "uuid": "da8e4ae2-dda0-4ee8-a09b-bcaa9f2d1f71", "comment": "Malware payload", "value": "0881934454896d13d84d62deb0e22d9e73188d62d0c4ee5b22dff7b0d8d5613b", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087146, "uuid": "34d88b1c-3a0a-489b-97b5-ac3ade309abd", "value": "T1AD41D5EFE4169338CE83823401AA6C9DDF22E63B55029050FA8C4941BB109B5F3A03", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087146, "uuid": "29151da6-f797-4610-a527-091f9decc4a5", "value": "48:w2krkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:irkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087146, "uuid": "3b1933b4-3217-4d6b-82ed-bf969cf31508", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087146, "uuid": "67f84306-7e17-4bcb-b11a-be8dd4c7d0aa", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "386d85ad-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087150, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087150, "uuid": "1b763844-6fae-4308-90ec-3f5b6ef0bb60", "comment": "Malware payload", "value": "235ee15e2712dc98d2f601ab473c4a2e", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087150, "uuid": "037c570a-25cd-49d0-b4fd-3765b623fd40", "comment": "Malware payload", "value": "93e47de4a685d0bcd8d7ffd762680b7f618af4865234c49dc344ddd83de42c5f", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087150, "uuid": "4bcc7fd1-a40d-4eea-960d-832900b71143", "value": "T1D0E023D4CF17FEA1C0714435C146F3100F1579054544B3E300D150E1D4701C57EBA2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087150, "uuid": "6113b8a8-6f48-4f55-9f9e-d1b72b47e310", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXLpnFyC6w5fJWXrpnHGPebRJ:4xtJCUOblw7BJYXHpQtXbNebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087150, "uuid": "c2859722-5324-4801-b5c1-141827c335e1", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087150, "uuid": "553bb099-245a-45de-9f0e-0e9e0b3ac5a7", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39e44dd2-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087152, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087152, "uuid": "287a7f1c-69e0-41b6-b8d9-c7ef6db1dfcd", "comment": "Malware payload", "value": "9fca9cb930717cdc921254abf2ab8019", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087152, "uuid": "403bf220-b265-4ec1-95b9-972b540882b9", "comment": "Malware payload", "value": "ebf0778004c40d9b764b41c67e385157834cf3567a45b2e6830a7f5ceffccc09", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087152, "uuid": "9d85b661-6f2c-4dd2-be9e-0b0525396128", "value": "T18C41D5EFE4169334CE43423401AA6C9DDF12E63B55029050FA8C4901BB14AB5F3A03", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087152, "uuid": "5eef6f38-abe4-458d-827f-d844ceaf7622", "value": "48:w2ykMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:kkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087152, "uuid": "10563bca-f468-41d9-bdab-09316000cce7", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087152, "uuid": "0ad64a88-2ba6-49a5-a426-f56f803e559d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a247987-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087153, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087153, "uuid": "9c5dbd27-6924-46d4-9acf-83fea65c4fa3", "comment": "Malware payload", "value": "b67300e82a934f9f595062f9fcfaa45d", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087153, "uuid": "58e9e33e-60aa-4505-bf03-88aae1fbec81", "comment": "Malware payload", "value": "ad53ff7692de9b36ecff9e6aa95579eacdc7cc5f3373839f1340541bb85dfbf6", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087153, "uuid": "18d13ae0-3f00-4d18-a104-4342195e1db8", "value": "T1F541D5EFE416A334CE43427901AA6C9DDF22E63B5502A050FA8C4901BB109B2F3A03", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087153, "uuid": "e3bb39b0-e97a-4ca6-b594-18278f9de51d", "value": "48:w2R34kMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:f34kUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087153, "uuid": "61286e8f-6e49-40f0-ae89-3f60ba99409b", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087153, "uuid": "d243f90f-ebee-4852-a1b6-f0f54c8142dc", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e1afc13-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087159, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087159, "uuid": "959ae2a7-e22b-4101-896d-672a921b5208", "comment": "Malware payload", "value": "72e7e251459cea0f620788872b4ab923", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087159, "uuid": "fb84f50b-276a-45ce-986b-cf287d114120", "comment": "Malware payload", "value": "68b4b647b3970ac5586b29d26f0019fca08d4453d36aaf91afebb643d9f11134", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087159, "uuid": "8ac41f28-4a6c-4161-a240-155e7f9eeffa", "value": "T19E41B5EFE4169734CE83867401AA6C9DDF22E63B65029090FA8C4945BB109F5F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087159, "uuid": "2ead3985-4e06-49f7-9d02-4783fa4ca094", "value": "48:w2ikMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:8kUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087159, "uuid": "7b918c32-23fe-4ee5-aba5-5f60e3ddb5d2", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087159, "uuid": "a504eba3-1a0c-4c5d-aa33-bf408d54e3ec", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f8b1f7a-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087162, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087162, "uuid": "0631eb6f-6196-4531-bd1c-3c4eacf52a2c", "comment": "Malware payload", "value": "dd17dcaa2e37e4451bcde2c0a8ab67bc", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087162, "uuid": "08b05c4c-c434-47a4-964b-c70bae290abb", "comment": "Malware payload", "value": "b44cee93c66be0566c682196b0c19e5fce0ae10b87a4d471e4c37fc7c899ca52", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087162, "uuid": "d6592678-fa6b-4c46-82ea-db897630c166", "value": "T1DFE023D44F15FE21C0700435C176F7100F2579050D41B3E100D050D1D4B11857EB66", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087162, "uuid": "091bd327-a156-4d38-8d35-5a66ff52dc70", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXQBDpFFyC6w5fJWXwBDHGPer:4xtJCUOblw7BJYXHpQtXQBDF/BDUebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087162, "uuid": "979bdc06-0426-4d6a-b5ae-0e6f00a4048a", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087162, "uuid": "1eceb1be-be13-49ba-b5b2-0b3bcae48761", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44491b6a-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087170, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087170, "uuid": "917f875a-f9cd-4ce1-9dd7-c0d5fd564946", "comment": "Malware payload", "value": "82c9d5e62cd3423f18a88c7ba5742994", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087170, "uuid": "43c49e9c-c29f-4ff6-afc6-2639f498ee99", "comment": "Malware payload", "value": "86c04010a678d48bfe1c4f221fcd2bf9958a0b3fc1344dbd83e3c3fceba478b8", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087170, "uuid": "a852f025-ff95-457e-b81a-822d74e0c3a6", "value": "T1C9E023D44F1AFE21C0704439C116F3100F157A170541B3F100F054E1D471185BF362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087170, "uuid": "609718be-3022-49ce-b289-81ad4be69e78", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXFWXJhFyC6w5fJWXlWXHLGPA:4xtJCUOblw7BJYXHpQtXmiebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087170, "uuid": "79066be1-91ea-4f8e-9ec5-f97f48f0c21a", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087170, "uuid": "d03027ee-323b-4c1d-98b8-4726ba5da5a7", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4458a158-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087170, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087170, "uuid": "3ac6749f-dd34-4275-8d0c-8c7a81df0a88", "comment": "Malware payload", "value": "bcf81e8826a5dd910070fd6b76a58e13", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087170, "uuid": "a0fc8cb2-eca7-4819-ab25-f86c597ce1af", "comment": "Malware payload", "value": "e9cf043b043098180be37fe96147a2c13ede97a14205bfa4f2b7827b1cf038a0", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087170, "uuid": "393c4582-c8b7-41e5-aad1-941d4fea88ee", "value": "T10F41B5EFE4169334CE43867501AA6C9DDF22E63B5502A050FA8C4E45BB149B5F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087170, "uuid": "43041dc4-8411-48a6-af04-ae28b4f4cacd", "value": "48:w2MkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:+kUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087170, "uuid": "e80b38a7-6711-473f-9470-31bfe54f3f7c", "value": 2277, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087170, "uuid": "7b8576e3-ed22-4a14-9ee4-00f7ffafd0ce", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "448d993e-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087170, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087170, "uuid": "0fac8e08-dda4-4e48-814b-6bd09edf1b57", "comment": "Malware payload", "value": "f830a04dd7b3b99eca3e50299e6a2775", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087170, "uuid": "807ade51-8dfb-46d2-9bde-b5c2e9ee812c", "comment": "Malware payload", "value": "427ab1b8da6403ab345a2b520d310300f51074d1fff048cf22d4bdc4d2acc8b7", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087170, "uuid": "95bf646d-b9b9-4d8b-99c8-e4c9e23a789c", "value": "T13A41B5EFE4169334CE43867401AA6C9DDF12F63B5502A050FA8C4946BB109B5F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087170, "uuid": "adfbcfca-ca0a-48cb-8e46-41a4d329dcbd", "value": "48:w22kMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:QkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087170, "uuid": "ebfb262d-226d-4dc7-a96a-55cb18bd8f03", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087170, "uuid": "062416e4-af1a-4fd3-a665-c4541d0b02df", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44d94dca-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087171, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087171, "uuid": "a73a22ef-fd8f-480e-bcc1-6d558d618f93", "comment": "Malware payload", "value": "ec87019c7cf22dc26acc7799cf6b16e8", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087171, "uuid": "b971db8a-8001-4014-97b3-62c7387fd7cd", "comment": "Malware payload", "value": "4e642ff0156d84a738b6b05843042569e9a0721ab0e4e37803f7cf574b63a069", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087171, "uuid": "0272c97e-e088-4ea7-909d-99a9482c476c", "value": "T19FC25C617E94F1B467CF3707A6F4F89255387BB2A08DA90CA0DE94C117DDBE0A63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087171, "uuid": "afb1e25e-200f-4f36-8191-80716a5be3b7", "value": "384:C3C9dR0By5NfYEWpyOxzngkj4FPzCDjYW5XHjr4u:xnZiE0Ngkj4JcYWJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087171, "uuid": "68478c97-0a28-4e99-ba8c-84c96a846a1b", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087171, "uuid": "71002bab-7bec-49d1-92ec-89909d6bea95", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44e7261f-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087171, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087171, "uuid": "86832fa9-04f0-48a3-a50c-d5d367334eeb", "comment": "Malware payload", "value": "6fdd4d7265ba78317f00b8e1c52667fc", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087171, "uuid": "c9519e84-7943-41c5-bfca-023390928634", "comment": "Malware payload", "value": "abbad5d4d6859510cda0a9cee077a44ca205947c3fcf2b5ce7cdd8a5bd7e2c6d", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087171, "uuid": "4b409e9d-b65a-4186-b471-9b8bd2a068b6", "value": "T1A9E022E88F55FF26C0700437C12EF3200F1AB90E8A48B2E200F0A0D1E8709893E772", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087171, "uuid": "e8b506aa-dd20-402e-9d89-96e1eec4cef0", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXaVPhFyC6w5fJWX6VBLGPebv:4xtJCUOblw7BJYXHpQtXePTRBQebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087171, "uuid": "0e07094f-3e6e-4048-b3fb-65d0d788a5c1", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087171, "uuid": "8be631b8-33f7-4ef4-87d0-34b6be92b633", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46013cf2-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087173, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087173, "uuid": "942a8c3a-8f3d-48b7-89c6-3cc3feee525d", "comment": "Malware payload", "value": "ed0866d6a268cd0d19030dd56746daea", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087173, "uuid": "380a1338-1505-4905-a847-3dfb0533ba2f", "comment": "Malware payload", "value": "ea6fd0d25b4ee7f31f9c4af96684a0efa9da91fe2907551d890862caf959b910", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087173, "uuid": "a3a09b65-080a-4e4c-a742-7727ecf3bbe0", "value": "T1EC41D5EFE4169338CE43423401AA6C9DDF22E63B5502A090FA8C4941FB149B1F3A43", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087173, "uuid": "c3893b5c-4cfe-44b6-aadc-212f1c2917fe", "value": "48:w2mkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:4kUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087173, "uuid": "7f71f3b7-ed62-4266-a931-8f8c7c6ebbd8", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087173, "uuid": "2b50a235-c38d-41a2-aa6f-8d1bea5ce6f4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4643a492-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087173, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087173, "uuid": "7ef538b2-bedb-4af4-a315-fd039233fa2b", "comment": "Malware payload", "value": "ef5c0759dba31c6acaed716872de5944", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087173, "uuid": "486848d9-df84-4a6e-b6c0-391f24bb977b", "comment": "Malware payload", "value": "713082fe6af29fbe78d9e79067529c348f7a1fe975cc245b5fd53db77bb14353", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087173, "uuid": "4917961a-8151-439b-b5d9-ef02a008fba9", "value": "T15641D5EFE4169334CE43423401AA6C9DDF12E63B59029050FA8C4941BB14AB1F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087173, "uuid": "be7edb70-5e92-4a1f-a27e-8a5d38ba5d16", "value": "48:w22kMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:AkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087173, "uuid": "739997ad-a40a-497e-af97-db9ccc923de4", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087173, "uuid": "5cc0197b-5b7c-489b-a04b-ee937d2cb0b6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47dc88fa-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087176, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087176, "uuid": "13aed45f-7950-445a-b02b-e1fba5c93a36", "comment": "Malware payload", "value": "67692b55966178615cdbe4d22ccc9a0e", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087176, "uuid": "02b2370b-3773-489f-984c-31bdd89af931", "comment": "Malware payload", "value": "c00231c490443b145af065c1b32736fbee13b51211e965b185e05152ff98d109", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087176, "uuid": "a1324d4d-8cf5-4248-be0c-7ff648518fd6", "value": "T1C4E023DC4F16FF31C0B00435C116F3500F15F90D0541B1E100D450D2F4B01853F362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087176, "uuid": "11b3f184-dd0f-48f2-9678-9688b0229bec", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXGTnFyC6w5fJWXmTnHGPebRJ:4xtJCUOblw7BJYXHpQtXWmebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087176, "uuid": "ec536785-70ed-4030-8f32-f0eb91576f26", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087176, "uuid": "27c7d0f1-effb-4db2-b95c-f666d7ecdec0", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b34b97c-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087181, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087181, "uuid": "2ba77bfc-cc93-4dab-acd0-49c395d7bcba", "comment": "Malware payload", "value": "dfc1a4245d446ca17504847a1c98b871", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087181, "uuid": "8b3c81a9-2dde-422d-b9da-8bb286e68b97", "comment": "Malware payload", "value": "b6ece7584f9dd6a810144ada805dd3cd655fdc3e4330dfe81ff356d3654eb312", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087181, "uuid": "601df1e6-0754-4fc6-9fe7-71e33cf4878a", "value": "T12541A4EFE4169334CE43867401AA6C9DDF12E63B65029050FA8C4945BB10AF5F3A53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087181, "uuid": "354ee8f7-e60b-43c4-a880-c3af8d3c663c", "value": "48:w2KkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:MkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087181, "uuid": "66c5d725-0cb3-4e50-8719-7c7de30d58d5", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087181, "uuid": "2479f1b0-b50f-4115-bc31-df5ea092a323", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4bb9980b-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087182, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087182, "uuid": "677ef78c-6df8-4a43-a998-fe86d635f32b", "comment": "Malware payload", "value": "00bea49ebb88b65813f2fb87c1e81021", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087182, "uuid": "cc81f89f-5454-4b33-8623-fada0f5e42ac", "comment": "Malware payload", "value": "a76fcdca54dbcfc63ac7eae9ef0c9caa0bc2e096a44deb58e8a0573932e7906d", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087182, "uuid": "4dd09d72-d685-4dcd-8cce-ff503c18dfca", "value": "T1DCE023D44F1AFE21C4700435C106F3110F1579151541B1E100D050E1D4711CD3E362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087182, "uuid": "553932ae-771b-4fa8-9a02-d03821c67141", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXTAVBDnFyC6w5fJWXzAVBDn1:4xtJCUOblw7BJYXHpQtX01BEebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087182, "uuid": "1b232d79-6f4c-4eee-88fb-6ded8585b8c2", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087182, "uuid": "f629040e-a571-41ec-bbd0-bfdc1168c09f", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d67c8dc-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087185, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087185, "uuid": "435e9bf0-2305-4d95-9ca8-54cc755c5f27", "comment": "Malware payload", "value": "e6ac964255648f998b0a2566fa542c49", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087185, "uuid": "cc2ad280-e92c-4172-a4d9-a9409b90d1a9", "comment": "Malware payload", "value": "9ea4c5522f0f611750c16b3a97455dcdfe7d2ba08be32f1dc678fffe19eaae47", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087185, "uuid": "d254db3e-ce1d-41c9-9b0b-a1d9d98f9666", "value": "T1D9C26D52BE94E1B457CF370776B4F8964838BBB2A09D690CA4DE40C117DDFD0A67C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087185, "uuid": "5b816061-1d56-40c0-aa61-77e01bbead00", "value": "384:P3CTV9vH62UaTRN3M4By/9lTdfgtrB8GwUxo9HIGX398ZTEAx3:65JmaFN3DyPh+NrsOs8ZTEAR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087185, "uuid": "fd71f913-ece9-49e3-885d-b9368944bd69", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087185, "uuid": "278450ec-d86b-420b-8592-f9bb0ac4a817", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4db38610-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087186, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087186, "uuid": "d2eddb1b-5205-4b2d-9529-44fb980558c6", "comment": "Malware payload", "value": "bbb2a9cc2527e0ecc15a37c76ee01400", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087186, "uuid": "6cdcb16b-7e23-40bf-a95a-41b8714dfdae", "comment": "Malware payload", "value": "a3eb8d6953d7916185c0c436be7502b717c971366fedcbe36fb16f1c10726036", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087186, "uuid": "e17955b1-4c34-4bd1-b7a6-7df875b75698", "value": "T13C41D5EFE4169334CE43863401AA6C9DDF12E63B550290A0FA8C4901BF149B2F3A03", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087186, "uuid": "582d9f04-6a58-4f66-91e4-6e7cb24380a3", "value": "48:w2+kMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:okUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087186, "uuid": "d4f62c64-b5a9-45a5-9dbd-0c4f0fca3d69", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087186, "uuid": "2cef1ba2-3aad-40f3-87ff-084e2d721cbc", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f90b5c5-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087189, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087189, "uuid": "793eb178-3794-4791-b8eb-bdfcd31c9abd", "comment": "Malware payload", "value": "f858e92e492ef7f329dbf5d8f30f1f60", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087189, "uuid": "3c63572c-78dc-4abe-aeae-498c0137a48e", "comment": "Malware payload", "value": "5c675b0f823d29555612308821dcc69b29b9b7a4ad51777773b582db0ae69169", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087189, "uuid": "1e1b196b-c149-4509-8e34-2a22f10672bc", "value": "T144E0A7D48E15AE61D0B04836810BE3110F157D050540F1E100D05095D4702C53E672", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087189, "uuid": "58337f1a-9b8e-4b8a-a98a-a3ca44888a41", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXX3FyC6w5fJWX33HGPebRJ:4xtJCUOblw7BJYXHpQtXX1mEebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087189, "uuid": "3e17fc55-eeac-4b09-a590-ae39a8012b35", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087189, "uuid": "4d694734-74d8-475a-9ace-2eaca48589d6", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51dc0f20-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087193, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087193, "uuid": "555ca38e-6e3c-459a-a53e-a94895fbde59", "comment": "Malware payload", "value": "9defd901a82ce7a659c9c54471966e47", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087193, "uuid": "8d311372-52a2-4d31-a88e-a4eac60797a4", "comment": "Malware payload", "value": "95b43cb9df17c8906e6dce31171cd45a158a83f948dae54c647ac038135ed3f0", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087193, "uuid": "b9050776-b8a9-4867-8b14-e1bdec8a4dda", "value": "T11941A1EBE4169338CE43823401AA6C9DDF12E63B6502A060BA8C4941BB149B1F3A03", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087193, "uuid": "efc53502-8777-42ee-b55d-444907e19ed3", "value": "48:w20RkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:YkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087193, "uuid": "65910b4b-740c-4f1f-b71b-117d3269b94b", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087193, "uuid": "497af98d-b245-45ea-a24a-57969a6209a5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53b64f53-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087196, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087196, "uuid": "17dd471b-3026-47a6-ae41-4b8ab3de302e", "comment": "Malware payload", "value": "8591d7a4c998dbf37cd23e95ed2d9748", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087196, "uuid": "de6730eb-2814-40f8-b041-acf8debc79d1", "comment": "Malware payload", "value": "3c9f3d75b6bdff63bdff4b74f371c54ecb913173e73ad96b9947f94787bdee2a", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087196, "uuid": "6fbd7569-b67f-49ee-bb09-35e9e230d4a0", "value": "T1D3E022F8CF15FE22C0730577E10AF3200F1BB90A6A41B2E300E8A0D1E8702893E362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087196, "uuid": "04ae056b-bd4d-450d-9f6b-9ab4bda7c01b", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXD3FyC6w5fJWXj3HGPebRJ:4xtJCUOblw7BJYXHpQtXZLebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087196, "uuid": "8b9de4f7-e62e-4ddc-8470-0247209738f5", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087196, "uuid": "5c9fb853-d7e7-4ef5-9987-3a0261c82c2f", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54239055-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087196, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087196, "uuid": "2cd9fbd3-7062-45d7-bada-29612298fc99", "comment": "Malware payload", "value": "33d4b81f13ba8e5cba5c1d6573931bd1", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087196, "uuid": "a728a626-70ef-4197-aeda-21ba2779d72c", "comment": "Malware payload", "value": "47c34bc988fec5114b08ca4db43cc2126c46d5bbf8226591241e65ead9b2e628", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087196, "uuid": "16a44726-275b-4ab5-b988-cec9a1a8d1c6", "value": "T1FBE023D44F2EFEA1D0704975C206F3100F15F9070540B1E100D0D1D2DCB01C63E372", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087196, "uuid": "66094f4f-5dfa-43c3-89a9-03bfaceb3d8b", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXbc1FyC6w5fJWX7cZHGPebRJ:4xtJCUOblw7BJYXHpQtX4PNOebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087196, "uuid": "968edbb3-451a-45fd-9958-5127d2a3ed0c", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087196, "uuid": "bccd351d-313c-46c2-b800-803210b0b871", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54accd50-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087197, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087197, "uuid": "dff5736f-ad95-43a0-bd05-c10719475052", "comment": "Malware payload", "value": "97ff7d341199b4d0cdf948f3255fb222", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087197, "uuid": "27a2bc74-c1b9-4562-975f-aef00372fe3b", "comment": "Malware payload", "value": "e8fe9a6655a05228c82d60390c615b5c71585a51b959735d3c4f38dd19cbdd56", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087197, "uuid": "e16ebd8e-265f-441b-b803-cc171657040c", "value": "T15AE023D44F55FE31C0B00435C116F3510F15F9070544B1E105D050D1F4707853E766", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087197, "uuid": "3d534e33-96a9-449c-b786-b46f395e3215", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXSX7FyC6w5fJWXyXbGPebRJ:4xtJCUOblw7BJYXHpQtXSXBdXgebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087197, "uuid": "8932b63d-b527-414e-aa0b-d6b7c935eef3", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087197, "uuid": "dd135d19-9202-415d-8850-a6c599c388f1", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5789bf2e-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087202, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087202, "uuid": "0c0f3682-b813-42ca-8123-a200a5de8858", "comment": "Malware payload", "value": "e9c7ede7cc64e99b06149e61f41f28a0", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087202, "uuid": "cd280c2e-b29a-4ad8-8fb3-a51efb55995c", "comment": "Malware payload", "value": "b1b5b7e06891db17c3f146ca5cb2a0107acbffeac1d2c6974ca384770e1c8ce8", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087202, "uuid": "7ad75ea5-a90a-48f7-8a74-e9e796087de8", "value": "T1F4E023D45F15FE21D1714535C106F3100F1579070540F1E100D050E1D4722873E363", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087202, "uuid": "35311851-6c02-43af-9422-2e78c1c50e0a", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXJXDFhFyC6w5fJWXpXDLLGPA:4xtJCUOblw7BJYXHpQtXJTFTqTLQebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087202, "uuid": "7a45ecab-4bf7-466b-b301-2c7cd6d18cda", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087202, "uuid": "eef74917-5151-45b9-9699-ccd845d0d145", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57b5ac2c-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087202, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087202, "uuid": "8f5bd94d-2931-4e92-afec-636cfdb32287", "comment": "Malware payload", "value": "08c951d062a72d8dd4c7c36eff5a8341", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087202, "uuid": "fb68a44b-b223-4236-b401-a022c96c8e27", "comment": "Malware payload", "value": "53c25fa14a6fce2dc80bd21ac9457b43cab2ed0c5bd655d4e93499a6bb67c769", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087202, "uuid": "c110a1f2-debb-4afa-b4ab-7cd4960fb380", "value": "T1A6E023D44F19FE21C0710437C106F3100F1579071580B1F100D051D1D4701853F36E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087202, "uuid": "5014e2b0-f666-41a7-a19d-557feb4f0df2", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXud7FyC6w5fJWXOdbGPebRJ:4xtJCUOblw7BJYXHpQtXyaebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087202, "uuid": "7a0f1214-ca39-4ed0-abd7-5f923c71e986", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087202, "uuid": "595de021-cdf6-4ea8-807e-72658d0b54b4", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57cd8784-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087203, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087203, "uuid": "0ebd6015-5472-4ccb-922d-9e8e82779a2d", "comment": "Malware payload", "value": "44eb6eeb983f18fd3f7c4b551f8653e0", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087203, "uuid": "4650420e-f9a9-4397-8453-6d57fea9280d", "comment": "Malware payload", "value": "ba358abb563715ca425f9fce0b861227256c857284509a7989191f35e484239b", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087203, "uuid": "3cac18a7-a997-4e5b-b1fd-3d2e1eb69cac", "value": "T12CF24F2273C985A55D613918A200D8F05EEEC0D07F6473ED6369C48BB296C2767EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087203, "uuid": "7a42aa48-7d71-4e81-9612-902995fde2c5", "value": "768:3o1nCXpKudhOHbw36DXNjXRrXMVQo3PsJgF2YkIOKTbYM/UmSfj:3o1nMpKudhOHbw3+XNjXRrXM6o3PsJg0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087203, "uuid": "285451cf-dbc0-4811-929c-740d0c9658ce", "value": 36324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087203, "uuid": "6b7252cd-3967-472f-a436-f4655874ddb1", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58e58f82-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087204, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087204, "uuid": "5868bd37-0673-495f-9d2b-d723421af793", "comment": "Malware payload", "value": "1c0e5ccc7ffdfd8576b1cf131fc12fd6", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087204, "uuid": "242169ec-8bce-42f7-b75e-fedff75d41d5", "comment": "Malware payload", "value": "3ca206008280b8a3e67e49f3c379c73239c04f3b0f8d68e083a45662cb9dad51", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087204, "uuid": "b03efbb3-3210-4204-bd0b-ec8b4661612e", "value": "T19241D5EFE4169334CE93423401AA6C9DDF12E63B55029050FA8C4941BB109B5F3A03", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087204, "uuid": "363e7d02-fcab-4c77-9607-f179c56df15a", "value": "48:w2+kMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:AkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087204, "uuid": "c266ec91-a1dc-4864-985b-fbccd57757af", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087204, "uuid": "dddd1260-b43b-4387-8317-555c9073a983", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "590d3264-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087205, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087205, "uuid": "64316b90-a82f-4c48-a3e0-1d149fcee397", "comment": "Malware payload", "value": "f4d532b8d4260e068b26444d5816ea56", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087205, "uuid": "fcdeacea-32b8-4b8d-8c94-51913174b904", "comment": "Malware payload", "value": "40a21883934059baf69f06f09755e8f87e7116f8630a5316ae42c387cf4e29a9", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087205, "uuid": "abea64f1-28f3-4e88-94cb-2c976ab04c11", "value": "T18AE023F44F15FF61C0710839C156F3104F15790D0552B1E100D050D1F4705853E3A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087205, "uuid": "03d84ad8-5776-4204-940d-2dc24073a22b", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXL9LV1nFyC6w5fJWXr9LV1HV:4xtJCUOblw7BJYXHpQtX9VrAVqebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087205, "uuid": "0208d5cc-6463-46b5-928f-6b3efe5682eb", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087205, "uuid": "f7b6707e-c7f4-4839-b810-1330bdc14a33", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b1af3a6-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087208, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087208, "uuid": "27b24500-467a-492f-91a7-a6a01c693b4b", "comment": "Malware payload", "value": "ae78784cdce948ad986f618df6581935", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087208, "uuid": "9acfea44-928e-4d36-84de-2c35e1d89ebb", "comment": "Malware payload", "value": "43f4e04789120be6183e23fc9fb339d7d6457bf771132d8a24a8eec94e892bb8", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087208, "uuid": "5cd58e93-bb10-447e-9b51-e594821c8097", "value": "T14E41B5EFE416D734CE43867401AA6C9DDF12E63B55029050FA8C4945BB109B5F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087208, "uuid": "bbe4c9a5-30f7-4b45-924a-79b279218bda", "value": "48:w25okMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:HokUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087208, "uuid": "121df081-8531-4c0b-886c-ff3d29e06d91", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087208, "uuid": "b838d0fb-6cc4-4ba0-8411-6c8ac58d1ab9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e3fb42f-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087213, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087213, "uuid": "4ede7495-82d0-4bc9-94fe-9ea5f569cabd", "comment": "Malware payload", "value": "38b7729f1fd877cb532e8d5a87d25d74", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087213, "uuid": "dffb831d-161a-4e10-a258-ae638ed0fa17", "comment": "Malware payload", "value": "d516bdfe4e184417f7dec3090b9a1137d53e9c4b9fe6a1cf1f1029aad8d33de4", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087213, "uuid": "78d1353b-b9f5-4354-86d4-8472bf3a8262", "value": "T1CF41D4EFE4169338CE43823401AA6C9DDF12E63B6502A060FA8C4D01BB109B1F3A53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087213, "uuid": "f963f3b1-6fa1-4f87-90c7-ae23ed5de1d0", "value": "48:w2CkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:ckUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087213, "uuid": "3cc79ee7-126e-4a37-aa20-a01cd2ac2d0b", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087213, "uuid": "9943ff44-50c4-4250-83e5-fd7c3853d4be", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62ef6f6e-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087221, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087221, "uuid": "91220a99-ba45-4a21-b15b-ee6dc74ea054", "comment": "Malware payload", "value": "b92dad648d831eba05ef39742214339f", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087221, "uuid": "7473a26d-ee5f-48dc-941c-51e5639c09d3", "comment": "Malware payload", "value": "debdd4d25460434804c17d90293acb006936ceaf4ef569e9523a5139f8470086", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087221, "uuid": "18755265-e519-4828-982a-cf91f7ae9302", "value": "T1F2C27DA17E64E07467CF370776F4F8924934BBB5908D691C60EE848113DDEE0B63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087221, "uuid": "8e926f56-f591-48a4-924a-0745e1a8041a", "value": "384:L3CCL5flAe1mFOQ+omNSNZrpnNowiYQET2q6sumkT3srB:eMfsFOtomNqZrxNowiYQET2siTO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087221, "uuid": "e4dcc73b-0881-41b4-b9f6-3f90ee142a33", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087221, "uuid": "477a26da-775e-4f1e-8882-80cf4b8f5146", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63727b0c-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087222, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087222, "uuid": "90fd46bd-d174-48dc-807f-c9c01c2e37bb", "comment": "Malware payload", "value": "bb9f947ca5409eeb8327c1dd8ed7bcbd", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087222, "uuid": "c7cd50c0-57a4-4fd0-8faf-052644acc824", "comment": "Malware payload", "value": "d6e9d72e49cf3912e5c9b51557ad26dc98a911d5ad870e48c05ccb4558d21124", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087222, "uuid": "e1fa25fb-696b-46b8-b32f-198684806f3b", "value": "T1B841B5EFE4169334CE53467401AA6C9DDF22E63B55029050FA8C4946BB109B5F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087222, "uuid": "a1cb745c-8916-4992-b110-ceb4a424e3e0", "value": "48:w2CkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:MkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087222, "uuid": "184547a7-e987-4b18-a565-c1b80add1935", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087222, "uuid": "a8a98b84-91ff-4014-8ff0-9dc5c92c4696", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "649e5576-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087224, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087224, "uuid": "f640bb77-655f-4170-ac4d-4245fd58515a", "comment": "Malware payload", "value": "71fa5f22b1c9bcbab9288fcecab851d3", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087224, "uuid": "accaf802-34c8-43ca-9957-76f41e330b2f", "comment": "Malware payload", "value": "fad0e4af536edf38c860b48fb870c44313ea9b3bfdd21964d58b31f486a1eb41", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087224, "uuid": "2d301b89-efd7-4101-9bd0-c2579a2ef02f", "value": "T1A041B5EFE4169334CE43467401AA6C9DDF22E63B65029090FA8C4D45BB109B5F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087224, "uuid": "929f2dd7-6a67-4c7b-bee4-5032d164a03f", "value": "48:w22kMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:IkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087224, "uuid": "fb9f8c2c-d01a-4cc7-a5ac-ccbb192615dc", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087224, "uuid": "a4803660-fdb7-4a87-8598-cf8f701400c2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "662f7e75-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087227, "uuid": "9a7b8067-3b6b-430a-b261-85d70c7508f4", "comment": "Malware payload", "value": "82a9506c470eebe89140978803b349b1", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087227, "uuid": "c6dd1a6c-6796-4c68-8b8e-8a8a618a8244", "comment": "Malware payload", "value": "5b967d1bf886ea8bc900e66b55a8707e96ebee8bdb9720d55680209ffb9240ec", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087227, "uuid": "4ac597df-340a-4daf-b6a2-398db771e616", "value": "T19923A41C9FEC1D92725211178A9A4572BA6E2C1EC5582A9EF09C04D1BF1AE3ED8D73", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087227, "uuid": "8a6a7d58-326a-4d4a-8c80-598079786760", "value": "96:qhgZ8sNzg78sNmg18sNR8sNUxe8sNw8sNJg4x2qlNYxpszxYe/xP6OgHgM9xc3/A:qJyfDj1iIcqlNYxpszxYmZ6b9xO9Cz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087227, "uuid": "6c8fe8f9-c92a-46f4-a2dd-730f823143d6", "value": 47874, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087227, "uuid": "75368175-8f1d-4576-8c37-1f9cb9b8e1d1", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "691ec1d0-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087232, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087232, "uuid": "c424606c-8740-4f71-b3d5-d0ffe6b73a1f", "comment": "Malware payload", "value": "ff41af3ebbfe0a34304e845525926718", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087232, "uuid": "f13417e8-a184-438d-a1f9-ca5b0ed4c294", "comment": "Malware payload", "value": "dd84c629d046b12704be44b12f1187a344b4a86424537288eb75b28f6d83738e", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087232, "uuid": "9de609c0-be33-4c34-889c-0a3cc748236c", "value": "T1FCE023D4DF15FE21C1740437C106F3104F1D79051D44F1E300D050D1D4702857E76E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087232, "uuid": "f9e286d0-5826-4ac9-a550-cb54ec781b5a", "value": "6:4xtJCUOblw7BJYXHpQtXtQTFTcQTLQebRJ:83CUOBw7BJYJ7JFw6RJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087232, "uuid": "4720e554-2573-4d8f-b03f-096e2e7d2a46", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087232, "uuid": "f581f4f0-95ef-4f2c-83c9-b8dcba3fa547", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d10fc4c-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087238, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087238, "uuid": "ee563f87-5401-40a6-8b6c-5d206545c26d", "comment": "Malware payload", "value": "94a7393346e661278d0298adfa0d80b7", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087238, "uuid": "427b08ee-0aad-4541-9550-6b9c03dd1740", "comment": "Malware payload", "value": "83ec07e432235151e58566e041215a553d3e9ef84f2941d66a911ae8ebf7fb2e", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087238, "uuid": "dc2ff63f-1b12-48cf-92cf-72ba7da13f9f", "value": "T1E641B5EFE4169734CE83867401AA6C9DDF12E63B55029060FA8C4E46BB109B5F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087238, "uuid": "a118e84f-6034-4da6-b954-b77e03c3fe25", "value": "48:w2KkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:8kUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087238, "uuid": "617a78f5-1a6d-4dd4-a603-d6bf21061552", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087238, "uuid": "9caf8649-30e3-48e5-89c9-caf8027c7329", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72003cbe-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087247, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087247, "uuid": "01e98fe8-8d7d-4bf3-9b3f-6a5af433f220", "comment": "Malware payload", "value": "afaee31ec68e8a7cdd963b1b0952dfed", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087247, "uuid": "90342485-b42f-4cc2-961a-c2a3802ddcc8", "comment": "Malware payload", "value": "53fbbc2c4acaaa1615787b58d6460705b506eda81deeddac5d2488e057ec7c94", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087247, "uuid": "a96b4dda-82b8-424a-808e-3f38add2941a", "value": "T14241D5EFE416D334CE83823401AA6C9DDF52E63B5502A050FA8C4901BF10AB1F3A03", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087247, "uuid": "6e9abc3f-fd39-4e47-907d-64c8379c2bfc", "value": "48:w22kMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:okUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087247, "uuid": "04f4dc82-995f-485e-949e-e227000e8169", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087247, "uuid": "e25598e5-24d3-4a3f-84a9-f712c3ac8276", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72a5f87c-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087248, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087248, "uuid": "cb202f42-9b32-4bbd-9ed7-af19b3f5eff6", "comment": "Malware payload", "value": "470af7aa64f7ea4988225f83a3440ba6", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087248, "uuid": "99a34298-88fa-4fe2-b186-18f469fb5f94", "comment": "Malware payload", "value": "32203fe243fb741297cdddf2ed5e14d6133c7c4d0e509e81736486bc6e47f582", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087248, "uuid": "6186bb1f-c750-4234-af74-e30eceef42bb", "value": "T104E023D44F15FE21C071043BC206F3340F25FA071580B1E100F050D5F5701853F362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087248, "uuid": "77c648cc-c578-4577-8d00-2271d857f5b2", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXKRVhPhFyC6w5fJWXqRVhBLV:4xtJCUOblw7BJYXHpQtXKDr/DqebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087248, "uuid": "035b2ed5-c1ef-495a-9f95-48d006168602", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087248, "uuid": "baaf42ea-eced-423b-b47b-6c8658bf968f", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76ecaaaa-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087255, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087255, "uuid": "7e9ea383-f198-4053-99d0-e197e6a56411", "comment": "Malware payload", "value": "0fce72cc312815fb47cde70f7b5c6f06", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087255, "uuid": "0a191830-8a0f-4bf7-8bc2-2c1b87fc910c", "comment": "Malware payload", "value": "ea0222ab8aad6eed8c1efedb42941a67445acfc60bc89c4c528b50c069f48450", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087255, "uuid": "6d2a05d7-1b47-47d5-84da-007974f8bbe7", "value": "T16341B5EFE4169338CE53867401AA6C9DDF12E63B6502A050FA8C4A45BB109B5F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087255, "uuid": "716c9cbc-6f2c-4e14-8a3a-dd2573ed02ed", "value": "48:w2ekMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:4kUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087255, "uuid": "18447f42-8d3e-4b38-963c-a6627f6c722f", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087255, "uuid": "bf766593-ad00-4e27-bb36-274d32e57a9e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79e35ae6-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087260, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087260, "uuid": "777573a5-664e-4470-af7c-98627657d213", "comment": "Malware payload", "value": "b22e512f0133d065aec526341fdb0967", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087260, "uuid": "cba8a7fe-da04-483c-9f65-0977cef51b1f", "comment": "Malware payload", "value": "c19213a35ff5dab3da6dabfdc91732ac993cc23ed9b7936537f7a856af145afc", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087260, "uuid": "304f7f65-e87a-40c1-9b41-96f13f6ba33d", "value": "T143E023D44F16FE21C0704535C10EF3100F257A075582B1E100D050D1D4B0186BF363", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087260, "uuid": "b4590136-3c5c-41ea-901b-39f59f46624f", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWX8VPhFyC6w5fJWXcVBTHGPer:4xtJCUOblw7BJYXHpQtXEPTbBQebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087260, "uuid": "f5ff8b70-1486-4a82-bb37-26481f31151d", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087260, "uuid": "56a79608-0697-4cfa-9240-8e8cb17a16a8", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7aa7b400-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087261, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087261, "uuid": "612dda4b-5b03-4371-882d-303b2862b404", "comment": "Malware payload", "value": "d771dd54b1c1d3931254d23259a2f3c8", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087261, "uuid": "f8cd9fe5-4e72-48d3-8b16-b65fca4f8cda", "comment": "Malware payload", "value": "5e6a3ef917a60ad51d09d759e3cff49b7f5b9bbf2dca5aad22e2d154f329368f", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087261, "uuid": "8fb2d50b-159d-46d9-b809-6ef5370c68ec", "value": "T17E41B5EFE4169734CE43467401AA6C9DDF22F63B65029050FA8C4946BB109B5F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087261, "uuid": "db07118a-df98-415d-8220-cde1aefbc089", "value": "48:w2ekMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:4kUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087261, "uuid": "6fa1e579-d142-482c-b645-89cdb318b5cd", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087261, "uuid": "3911f96a-c745-4080-955d-271a0dfe6272", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c4fd58c-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087264, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087264, "uuid": "367d3def-d588-46ef-84b6-29e7a74572f2", "comment": "Malware payload", "value": "f2b36abb8793ac1b1fcd7f32438f9a48", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087264, "uuid": "ed32ba87-3492-4997-80af-aae04019923c", "comment": "Malware payload", "value": "0da32b1eae229903494ca8ef5508a1337e8ac873fabe283b3f7d703908c1f4b0", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087264, "uuid": "90d634fe-6d81-4b96-b04c-72def39c38e8", "value": "T14A41D5EFE4169338CE83423401AA6D9DDF12E63B55029050FA8C4941BB109B1F3A03", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087264, "uuid": "7a7ce46b-5533-4757-918e-c74f2b6c4905", "value": "48:w2mkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:QkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087264, "uuid": "fe0b9cc0-2fb4-4f6c-a608-3a21de1f2431", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087264, "uuid": "a3571781-5ef5-4f9d-833f-87e6dab63cb3", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c9ec433-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087264, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087264, "uuid": "1f1abc89-d4ed-483a-b605-ad5b67e264e2", "comment": "Malware payload", "value": "242820ad6a0b9bf62f5e2449ce7a2471", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087264, "uuid": "3879fae7-413e-4527-a236-dbccc75af388", "comment": "Malware payload", "value": "094f840d2b329fb7215a61758ab4968aed0fc61b2bd7185fa985d8a6439b0450", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087264, "uuid": "f2d1e8db-f802-465c-8a1e-120fee21d6be", "value": "T10FE023D44F15FE71C071C537C106F3104F1579251540B1F100D059D1D4701C53E362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087264, "uuid": "f5bcb84e-1029-4099-b00d-c58b9ebdfd5d", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXvLV1FhFyC6w5fJWXPLV1LT1:4xtJCUOblw7BJYXHpQtXTV1FiV1UebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087264, "uuid": "77753fe4-a9a8-4150-99df-b7a986888787", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087264, "uuid": "f532fa74-bbbd-438b-9df4-7432c7a813c1", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e206b1b-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087267, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087267, "uuid": "c132fec1-6c9c-4420-8d7b-6b8c2f2b1233", "comment": "Malware payload", "value": "205e85ade2ce6cfe9b1ee8981aac5e8e", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087267, "uuid": "14eefa42-2a6d-4db5-94ef-061911882e3e", "comment": "Malware payload", "value": "2793439f604031320db1b8ac98385368dabbed01640179441393bfc045daf1d7", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087267, "uuid": "33797306-f215-4bde-86c9-bdaa5382c8fc", "value": "T16241B5EFE4169734CE43867401AA6C9DDF12E63B5502A050FA8C4945BF109B5F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087267, "uuid": "679c5bca-20cb-4583-b784-8bc9b00e5417", "value": "48:w2GkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:AkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087267, "uuid": "75711225-7b1e-40e9-9b37-d7178c2eb94c", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087267, "uuid": "db6d925c-1386-44a8-a9ff-e07fd448fc18", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f4eab45-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087269, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087269, "uuid": "8850dcda-5270-4257-b381-490dd53111f5", "comment": "Malware payload", "value": "cd6be8f6d6a8b1603fc725842408f486", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087269, "uuid": "33a55492-7b7f-47c8-93ad-b7b345717de1", "comment": "Malware payload", "value": "dc7f9687fbe9bbeba22a3c8d5d2d6c68aef2fade9d65132bfc8d6bab2b0e23c1", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087269, "uuid": "77df23bf-a73e-432c-8f96-b0fffb31e763", "value": "T1A541D5EFE4169334CE83423401AA6D9DDF12E63B59029090FA8C4901FB109B5F3A03", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087269, "uuid": "723ed6fa-f76f-4a9f-9434-1e75d2c4fe8f", "value": "48:w2GkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:gkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087269, "uuid": "ffc66c8e-22fa-4239-b36c-708062346fa3", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087269, "uuid": "c59ad61f-c697-41fa-a0e7-913e3a866b72", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "826af7ba-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087274, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087274, "uuid": "f102127f-b550-490e-837f-5d0977c59dd1", "comment": "Malware payload", "value": "e5836993c7933fcb1e208c87b5bb1526", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087274, "uuid": "0e8c51e8-0273-4ca8-92b8-422dd5f5a6f3", "comment": "Malware payload", "value": "4af0000c4e63d9192a08059ba3708a4197991fa8edbb03308cff36d5f486baea", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087274, "uuid": "636717f8-27b3-4b18-b985-a2a51f3d0399", "value": "T14541D5EFE4169334CE83427401AA6C9DDF22E63B55029050FA8C4D01BB10AB5F3A03", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087274, "uuid": "60d010cd-d863-48fd-979d-98a65fe0d903", "value": "48:w2mkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:QkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087274, "uuid": "8e21f98a-8fa6-4c6c-a3e1-a8af143b8930", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087274, "uuid": "e5ca5bec-a373-4670-8b8d-d569de358043", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "834304c0-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087275, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087275, "uuid": "6cb442b8-0190-4cc8-a60f-cffdbe946084", "comment": "Malware payload", "value": "8fe2d75dd884954737f4c1a1cb426536", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087275, "uuid": "b12f063e-c7af-4364-910e-1114eaaed836", "comment": "Malware payload", "value": "af9addbe15ed3c59a5e589d360ce58b9ca3b6373f5c1b4a8023943729a601aa3", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087275, "uuid": "000072d0-dde3-49ac-9243-bc973c674147", "value": "T16C41D5EFE4169338CE43463401AA6C9DDF26E63B6502A050FA8C4D01FB14AB1F3A43", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087275, "uuid": "56981d40-714a-4eb1-898e-2c5055a27f02", "value": "48:w2KkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:MkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087275, "uuid": "9d49cd12-a23e-4654-8ec0-40a4704d1e13", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087275, "uuid": "5770ac36-1393-4a72-80fc-8323d7204c96", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84043f63-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087277, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087277, "uuid": "c4c23de6-456c-41b0-b576-16b3b84a13c6", "comment": "Malware payload", "value": "7f8dc0b4bcfeb151c6d062741516ac40", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087277, "uuid": "28b02642-5351-4092-9db2-6f327f243740", "comment": "Malware payload", "value": "7188fde6ea17adc64debf0fa5f5b2c8c4e531d5904247a3331ee9aa458ea88ba", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087277, "uuid": "499b4406-c261-4945-aaa2-cd1bbdfa64a0", "value": "T1B741B4EFE4169338CE53867401AA6C9DDF12F63B6502A060FA8C4945BB109B5F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087277, "uuid": "68f0ab33-50b6-453b-9559-1b83f2c41a36", "value": "48:w2CkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:MkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087277, "uuid": "49d11ded-4c33-4104-92f0-1f543dbea8b9", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087277, "uuid": "b39dc8a4-5ccb-4873-9b1b-60440b88a799", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "840eec8e-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087277, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087277, "uuid": "d782260f-9369-4326-9996-04b18068cfad", "comment": "Malware payload", "value": "ff4c110cb1b91459c8a6c1a951076bd7", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087277, "uuid": "64ef80a3-1a25-43ef-aa78-1acf7063e8b6", "comment": "Malware payload", "value": "b8ef8832d1e4a07b08bef7232ee497ee041c8de25f2ab0ab3ee3130525daa34b", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087277, "uuid": "00d4cfeb-7df0-4398-b1ec-c47c49c39633", "value": "T146E0A7DC4F55EF25D07108358116F3140F1579450640F2E100E05191D8701853F262", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087277, "uuid": "dd5de7da-13f9-46a7-abb1-833132cddd27", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWX/XDpFFyC6w5fJWXfXDHGPer:4xtJCUOblw7BJYXHpQtXZPebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087277, "uuid": "0750f164-97dd-41f9-9a1e-e56923c426f3", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087277, "uuid": "68a49a45-c25e-48c4-b094-b1c716539e3b", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8411f557-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087277, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087277, "uuid": "9d0eacf5-965c-4f86-b38a-fdf956db85c3", "comment": "Malware payload", "value": "b920863bb369eef9bbc4b239539c2777", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087277, "uuid": "07274382-5c18-47fd-ab12-290e71ba35cb", "comment": "Malware payload", "value": "c3e657c7055e296365ca278b9f9f88fd73ff1758de2411d5587418cb6cc129fd", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087277, "uuid": "4ba2482f-8322-48a0-ab09-01c8f244442e", "value": "T1074183EBE416D334CE53467401AA6C9DDF22E63B6502A090BA8C4945BF109B5F3A53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087277, "uuid": "92542dc2-efa0-4b2a-8279-75912dad9768", "value": "48:w2G7kMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:YkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087277, "uuid": "89b83664-edec-4dbd-b6df-529c63e31bad", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087277, "uuid": "fbdb0dcf-bfd2-47b3-bb52-4a755be4d7e2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8519aa55-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087279, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087279, "uuid": "8732f075-62b4-4566-959a-1fcc212cb98f", "comment": "Malware payload", "value": "ea2a199533f4e3a0ae2b481587bb31f6", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087279, "uuid": "8c652bfc-a144-48fb-92ba-05426248277a", "comment": "Malware payload", "value": "eec67b8feb9f3ff35aa515f71dddcb6dd353b8fa6686a2b286ad647048d02ae3", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087279, "uuid": "2e573a08-3635-40ee-b2f3-fa1e05537128", "value": "T19941B5EFE4169334CE43867401AA6C9DDF52EA3B65029050FA8C4D45BB109B5F3A53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087279, "uuid": "c9ce6ce3-da8e-4883-b7cc-e783512cfd40", "value": "48:w2OkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:IkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087279, "uuid": "11be0424-0180-4f52-a1f5-12857862135f", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087279, "uuid": "6d8717b3-de43-4c3e-ba6a-6b1eee63d3ec", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "87bd5dac-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087283, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087283, "uuid": "fd6ba19e-4978-4475-8e72-1dabf48a6d89", "comment": "Malware payload", "value": "b79124fd3ebfacd3896ae5aad9eedff4", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087283, "uuid": "78c36aa6-38c4-4924-90d0-d00c596ef97d", "comment": "Malware payload", "value": "7a55cd2f5a3c0688ffb0a0c865066757b4423154e8c937aa8eeec011b0ea80d4", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087283, "uuid": "27d78b1a-9a86-44c6-aec5-a955a9b63d68", "value": "T1C141D5EFE4169334CE43423401AA6C9DDF12E63B55029060FA8C4D05BB149B6F3A07", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087283, "uuid": "b5af2c59-9dd2-4a28-9c5c-09828b5b1f8c", "value": "48:w26kMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:MkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087283, "uuid": "00f99686-c992-4a95-9516-010c0c71e117", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087283, "uuid": "c8df8bde-5bcb-4299-a9d1-122172a48532", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "892922cf-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087285, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087285, "uuid": "c9033893-97c4-4fe2-870a-d5ee5cd65b48", "comment": "Malware payload", "value": "52268329b5f515672972635fee9f9d7c", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087285, "uuid": "44de03ee-f0cf-4840-8de0-814624de5b45", "comment": "Malware payload", "value": "a9b1dfef4465736a7d3718c2fab75146adf05662d37c3f77e83cdd0313e2b8c7", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087285, "uuid": "9030be02-2310-4b4a-b368-0ba17d8e8734", "value": "T162C25CA2BE94E0745BCF730776F0F8924534BBB2A08E690CA0DE94C557DCAE0B57C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087285, "uuid": "48fb3317-5143-4b28-aead-a172e22baa69", "value": "384:Z3CLynpypJfjZgBaIgS0UQMI43gCh1C/RvqtXO6KD4peE7TF/luZr:M6pypJLZyaIb0O3gk0/RvqtXOJkpJOZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087285, "uuid": "4f691a04-3b53-4fce-a5dd-30652463030a", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087285, "uuid": "950760db-cf66-49b9-a701-d3a7fec7d269", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8aa7464d-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087288, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087288, "uuid": "bb0f1df4-273c-4d5a-850a-6cf270321892", "comment": "Malware payload", "value": "c95db8fa9f1642b2e4fb1d669c90e458", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087288, "uuid": "4145da55-758d-4ac9-b861-d9d6a9e0b6c4", "comment": "Malware payload", "value": "64a446cbab228f37aac813c11ba2a7b8ec38b9e6fa1a55daf8b52ee727d54916", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087288, "uuid": "37c35445-1de3-4b24-ba9f-43f6ad604df7", "value": "T1E2E0A7D44E25AE65C27045358226E3100F15B9090581B1E100D09091D4701C53E663", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087288, "uuid": "07e6969c-a8d5-4b00-b6ca-979f709e61c8", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXddLrZhFyC6w5fJWX9dLrXT1:4xtJCUOblw7BJYXHpQtXdJ1YJEebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087288, "uuid": "30c73e52-d7ce-4d61-b689-cd4b89ef8c25", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087288, "uuid": "64cef4cb-1ba9-41f6-96b6-dc72d25e4019", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b7111a9-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087289, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087289, "uuid": "dfe74b6a-b494-446a-94ac-a378afb94149", "comment": "Malware payload", "value": "3a3c7a33203c753a6fe73b818f63ea68", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087289, "uuid": "a05fe616-ad1c-4bb4-9c12-61050fffeb47", "comment": "Malware payload", "value": "4e107c2df24c31aafd8c03edc622d8ac6b61943adeb68257121643fae5c0d057", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087289, "uuid": "030899ba-fbf7-45f2-afd7-19afc2de19b2", "value": "T14341B5EFE4169334CE43467401BA6C9DDF12E63B55029060FA8C4946BB109B5F3A53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087289, "uuid": "a834841b-3132-4f15-9e65-53a644506422", "value": "48:w2mkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:AkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087289, "uuid": "8261b10d-baf3-4c39-83a6-2273f84d70fc", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087289, "uuid": "8745bb5e-780d-402d-bba7-4c71d6a77b2b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c0f323a-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087290, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087290, "uuid": "971bf8c8-859b-4632-9a73-d70bae17c9b0", "comment": "Malware payload", "value": "f1c19284ee75a533277d6bdb93c2af54", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087290, "uuid": "7a8252a7-9ed1-4abc-85fe-af84e34b8b57", "comment": "Malware payload", "value": "eb83d5663f4484342850889da67479972c298908022c2cb1bf300a0c666ca142", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087290, "uuid": "7b83833b-6c25-4d02-8cc5-8a15760fcc0d", "value": "T162E023D4CFA5FF25D0700875C136F3540F15F9051550B3F100D051D1F4701857E366", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087290, "uuid": "4eaa7f5e-3a2b-40db-8e6e-2ee07f6b31ca", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXy8DFTFFyC6w5fJWXS8DLLGI:4xtJCUOblw7BJYXHpQtXySFJSUebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087290, "uuid": "f5b245ee-032b-49bf-826d-4385ed602ca9", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087290, "uuid": "d11fe123-3bbb-45c3-bf51-a34fd3fbbfce", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c1f8264-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087290, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087290, "uuid": "a3f4257b-c487-4740-8969-8358aa43d25f", "comment": "Malware payload", "value": "153fbb09b99b31a4365f401536a6bd42", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087290, "uuid": "1ed10b15-f182-410e-9977-c3ff32008d23", "comment": "Malware payload", "value": "02964283dad8a505ef9c2c2051433a9a78846ae86b2712ad5071f8cbf3230d9f", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087290, "uuid": "7381960b-8fea-436f-90f1-5d2095cc16ae", "value": "T115E023D54F15FE21F171083BC106F3140F2579450580F1E100D0D7D6D4711863E762", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087290, "uuid": "82ab1edd-562b-48c1-84cb-a47494c4a066", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXcQPTFFyC6w5fJWX8QBLGPer:4xtJCUOblw7BJYXHpQtXxnebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087290, "uuid": "6517654c-8dde-4407-bde1-6c778369a4e2", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087290, "uuid": "9aa15a19-9b4d-401c-83d9-7d2925b61e29", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8dfd46cf-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087293, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087293, "uuid": "7553c093-24bc-4296-b23d-4b26a52d2609", "comment": "Malware payload", "value": "f153ce5e2124f24957c29ca2341d6c6d", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087293, "uuid": "00f7409d-b7d5-4936-bd20-302390db1fbf", "comment": "Malware payload", "value": "156f4b09a48a0e7b0623d01c280f32fabd8f3d1de5b5f2b682fd01cbd2a659d4", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087293, "uuid": "46ddd812-fff7-44b6-ac84-c32102868bb7", "value": "T10341B5EFE4169334CE43467401AA6C9DDF12E63B65029050FA8C4D45BF109B5F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087293, "uuid": "3acbf9b8-d904-4c73-898f-c168c9c6c025", "value": "48:w2GkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:AkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087293, "uuid": "8bb94fb2-7071-4a3a-b69d-fc1b9a0b5c79", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087293, "uuid": "2b1f181d-aba6-4aa7-a287-9361e4186074", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90a64917-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087298, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087298, "uuid": "c31da3bb-fc3f-4dc8-a089-b577a0bd3f82", "comment": "Malware payload", "value": "62589298364282546d4f2047ab0595a0", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087298, "uuid": "55be847e-b935-4792-9ec0-4617bee89ffe", "comment": "Malware payload", "value": "795c08c0da525f38b2375822cb37e13d1083606ceb2b8099332cc2c29b500a9f", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087298, "uuid": "a3bd493a-a940-462c-9088-ba394ca405df", "value": "T1B641B4EFE416D338CE93423401AA6C9DDF12E63B55029060FA8C4D05BB149B1F3A03", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087298, "uuid": "57a6bb44-6d8f-4c55-8843-27cd258d7e5b", "value": "48:w2Ev7kMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:av7kUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087298, "uuid": "5bab567a-151b-4f7b-95cc-f8bcd70323bb", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087298, "uuid": "12585b41-0a1b-44a2-ad58-17b2ae2cc8ad", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9600328f-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087307, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087307, "uuid": "f0449b2d-3523-48bc-86f9-fbbe77410681", "comment": "Malware payload", "value": "dd2a2d56f62700556ca82083726c4b27", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087307, "uuid": "a5260ee4-06fc-45db-82d9-ead24e3910e4", "comment": "Malware payload", "value": "8d004d775a4e0818f3f43d61ddc95464232c1b3c6c91083a1fc8aa82c79c8a1b", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087307, "uuid": "ccddbfa9-a204-42db-a345-e37d27572c89", "value": "T14441B5EFE4169734CE43867401AA6C9DDF12E63B5502A050FA8C4945BB109B5F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087307, "uuid": "183b54ee-8a81-4f18-b30e-2731c620b871", "value": "48:w2SkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:EkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087307, "uuid": "a2c80eee-5ea7-4ec8-94c8-4f84e2c68169", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087307, "uuid": "b159f65b-d938-4cba-8507-5f8673b1d2b5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "963dfd2f-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087307, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087307, "uuid": "ee4b9b3c-481c-4625-92fa-509b7131e26c", "comment": "Malware payload", "value": "c08ea3cb1e7b4d469bc713ba7379239b", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087307, "uuid": "12288330-4da7-4323-a827-c90ae11af494", "comment": "Malware payload", "value": "c134bee2bc1726c97d9222e5f79c8f8cd065c2b6c198d8fc9d62429d9feaf3b3", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087307, "uuid": "6f654b02-b1a6-4115-a28e-7360882bd162", "value": "T149E022EC8F25FE22C0700437C10AF3200F1AB90B0A4CB2E282E0A4D1E87018A3E762", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087307, "uuid": "ca04a985-d914-4eba-91bb-bdaa58d5122f", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXScJhFyC6w5fJWXycHLGPebv:4xtJCUOblw7BJYXHpQtXScJT1cHQebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087307, "uuid": "85cb448a-8202-4731-bd29-c3364fd23a26", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087307, "uuid": "9be8131b-beb6-4663-9e21-a27e9a09764f", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96b215bf-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087308, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087308, "uuid": "aa7e6448-7e6a-49c7-9b43-59f61e811c56", "comment": "Malware payload", "value": "97f98e85965e808b6b4baf83c60d174d", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087308, "uuid": "40375e51-8b46-432c-bb03-b7cc1e6663bc", "comment": "Malware payload", "value": "57cd9de7ed1823cbf338903cfec345624415ffdeefd868480b6ab103ce5baa8b", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087308, "uuid": "aa167204-eb73-4f93-9fbc-9fcde32a7f4e", "value": "T14EE0A7D4DE19AE22D17045358106E3200F1569470580B1E100D46091D87028A3F2A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087308, "uuid": "9c6d3ff8-9351-4a59-b6c9-ceb500117979", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWX7VLVB7FyC6w5fJWXbVLVBbV:4xtJCUOblw7BJYXHpQtX7hVrehVqebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087308, "uuid": "5ea26cbd-cce3-480c-820d-682a3c01392f", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087308, "uuid": "ec4a92c0-4860-47ef-a6c0-b17e51b367c4", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99356be2-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087312, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087312, "uuid": "95445302-aaf5-4f2f-94a8-905c88355d28", "comment": "Malware payload", "value": "a4e9f3540f075a02d8d111e9ae3d34cf", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087312, "uuid": "08432378-4b45-4260-983b-726a5f43942a", "comment": "Malware payload", "value": "1ae91af239a6a36d9cbf27b8c8dc8a188e8b5b0befc107a11a3875ffb538599b", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087312, "uuid": "7dff392b-d1f0-4bbe-bc78-db770d48abef", "value": "T12741B5EFE4169734CE43867401AA6C9DDF12E63B65029050FA8C4945BB109B5F3A17", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087312, "uuid": "c5397a8e-5484-4133-9440-8183df15ce86", "value": "48:w22kMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:okUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087312, "uuid": "cceb5e6f-23de-4918-8225-2b8a37c0114d", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087312, "uuid": "d0c5fb81-24a9-41f8-9de4-e4f0391c089f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d63cefd-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087319, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087319, "uuid": "27689f6e-a735-48b3-9712-2aef93085db9", "comment": "Malware payload", "value": "9d19e6c82ab1c4962170aa9bbe485d79", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087319, "uuid": "44cc1e04-f895-4ea6-84dd-4b2f5c1385d8", "comment": "Malware payload", "value": "c7a90746fc4ac1ed7f579db112668aebb59c07a547757783622235188d951fa9", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087319, "uuid": "996bf026-212e-4774-8683-249a3105d36b", "value": "T172C28D66BE68E0B857CF371776F4F8D24438BB72A09D650CA0DE948127DCAD0B63C5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087319, "uuid": "b2dc2c93-67a9-466c-af8a-3df4f7085198", "value": "384:t3CzuwDluyso11HHLjGhXaPloXv//GbbmhopCJpkDsoPtfmpHI5:ICclT1lHLjG0PlkX/Gb6vJW3tA6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087319, "uuid": "31ea4fe4-0a97-489f-a90e-ace24b493301", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087319, "uuid": "df6ff3ed-027e-4c22-afd7-c3402fea6ffc", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a192a6f3-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087326, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087326, "uuid": "595fd88f-c980-485c-8904-27c49af8d8c3", "comment": "Malware payload", "value": "f02bf76512b569da88aa3e7772baf31f", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087326, "uuid": "bf1808cf-9614-480a-8284-49076987461f", "comment": "Malware payload", "value": "d181c6f0d1c59062abd84604b6d57e8d82cbd333a2a84deffe31d0c4f9aba29a", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087326, "uuid": "69f1cd6b-bc83-47cc-9cc1-db01e1d819e9", "value": "T10141B5EFE416D338CE43467401AA6C9DDF12E63B59029050FA8C4D45BB109B5F3A53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087326, "uuid": "de3d7bce-3f07-4b0c-98cc-a8ace5a6092d", "value": "48:w2/BQkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:5GkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087326, "uuid": "33110e0f-0a9f-4728-8cb9-6c0c12aa7ae8", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087326, "uuid": "52ba6831-3fef-4ebc-bf5f-cbc48dac8894", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1c8a2f2-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087327, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087327, "uuid": "c1fe5023-7f73-4120-b38c-dd98378bc5a0", "comment": "Malware payload", "value": "29a10f96369e6d5afbcd3d44d0e792bf", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087327, "uuid": "66e7c8b1-87df-472b-94db-78680efb5658", "comment": "Malware payload", "value": "a1da1733d58d85d9478848061d78b4aaba8493e8c5b6748229678ceedcbf368e", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087327, "uuid": "de903819-4810-4ed9-a814-4c8867198377", "value": "T19641B5EFE4169334CE43867501AA6C9DDF22E63B55029050FA8C4D45BB109B5F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087327, "uuid": "f2346f18-acc7-46c7-a9de-7a203cf6648c", "value": "48:w2WkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:gkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087327, "uuid": "9bad7777-18e6-4332-85ed-31288b4277bb", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087327, "uuid": "8b1bafec-c496-458e-a3f6-dfc911a185ec", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1c97c72-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087327, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087327, "uuid": "245de970-9895-4cdc-b44e-8622adf7426b", "comment": "Malware payload", "value": "3e371595daf42e157724c3a918c68903", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087327, "uuid": "1265be9c-74c3-4df0-b352-8bbc50218a64", "comment": "Malware payload", "value": "3a058cf07a85957c6908119ca56468c5c5f3b4b1d1d4aa2e06bfed16a66f6ebc", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087327, "uuid": "8e52024e-be6b-4553-87a8-1f3426e84593", "value": "T10CC28C617E94E0B897CF371776F0F89288346BB2A09D690C60DE84D117DDFE0A63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087327, "uuid": "a350b31a-7a49-4115-84c3-322c1fde1700", "value": "384:Ln3Cv5RqMeS8yagxATaNUn/C8iROulGunsW1DTFEfhFMBiE:G2/S8AOaNUcLAYsAFEfhFMUE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087327, "uuid": "df92b9f3-1d19-4512-9d2b-dd9e0fb1218a", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087327, "uuid": "5e6df17a-1af0-4709-857c-6ef96a89ff4d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1ca73c6-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087327, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087327, "uuid": "f8d47033-2b4d-41b0-94b6-ad0fc4638414", "comment": "Malware payload", "value": "153a08c4ef35999693a446adfba67c73", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087327, "uuid": "d191df5b-d76d-408a-a059-3659fbfd29b6", "comment": "Malware payload", "value": "81a0bb0fb84f794787e199a10fca49f1fbaa257126746afa04fd0f3ac0ab9257", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087327, "uuid": "84acabbd-b93d-46f1-b510-9789ebfce3cf", "value": "T1F3E023F44F55FF25C07004B7C276F3100F1D79151541B1E100D050D1DC711C53E3A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087327, "uuid": "637cd9ca-3f1a-4faa-b153-f23df91dd7b4", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXVnTFFyC6w5fJWX1pLGPebRJ:4xtJCUOblw7BJYXHpQtXZTWQebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087327, "uuid": "7a863f33-3b47-4f7e-b71a-ff0d0deb5a3d", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087327, "uuid": "75e6c641-203e-4b7c-96b6-39e8a8187951", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a4081841-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087330, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087330, "uuid": "02a04830-4b55-4003-9350-8862035e0d4d", "comment": "Malware payload", "value": "100ac0c4aef707d7434499e45ca887f4", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087330, "uuid": "3861e1e7-76c0-4e88-a039-6ede7582ccdf", "comment": "Malware payload", "value": "ffd8c9ea24b73c5250e1787e835d8bb8ffbef6937d3cdbc987a7b49306888d9b", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087330, "uuid": "b60308d9-5058-44bf-bf3f-feb3f2ebcb9a", "value": "T1EB41A4EFE4169334CE43467401AA6C9DDF12E63B59029060FA8C4945BB109B5F3A57", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087330, "uuid": "9cc74fc2-6968-4218-94d7-8dfb340a6f0a", "value": "48:w22kMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:YkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087330, "uuid": "9eccca9f-7293-4d71-b88d-bff2b5b3cab0", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087330, "uuid": "5ebc8cba-f4c3-44fb-8b5f-67af4e6e6f9d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6dac56b-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087335, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087335, "uuid": "909d0cfa-272d-46b0-bd6b-802d9b039711", "comment": "Malware payload", "value": "4e43379f7a940e2c5ec1fc879c7e4345", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087335, "uuid": "5d95ccb0-02e3-4b81-8962-4db511f65006", "comment": "Malware payload", "value": "e17649fecdc23180e7d10c1eecbac069f5de42bc9589ecc6760a35ccade5f4d0", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087335, "uuid": "b37d8055-1042-47c7-b479-e8228d3fcc7d", "value": "T1EB41B5EFE416D334CE43467401AA6C9DDF22E63B65029060FA8C4D45BB109B6F3A17", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087335, "uuid": "16d4e35a-8e23-4549-8379-6a6bde2c24dd", "value": "48:w2SkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:ckUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087335, "uuid": "bd7cbd90-4309-4e33-b851-1b4b93bca682", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087335, "uuid": "aaee2bba-f22b-4714-a4fb-cfb5395d80db", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a8380f0f-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087337, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087337, "uuid": "858560b4-caf5-48e0-81ad-772d5f1ff282", "comment": "Malware payload", "value": "109bd81c0459c5a7f41eacc6e10d9aff", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087337, "uuid": "634d1b19-3950-4587-bf69-c41e7ef5ce3f", "comment": "Malware payload", "value": "1de0adb601c7cfd0586878486a4f0c6149a42a5fe412596c06624de8a377d4f3", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087337, "uuid": "d2aa6565-e209-49a2-bf7f-80f9e379ba4d", "value": "T1D2C27D61BE94F1B867CF3707B6F4F9A24438BBB1908DA50C60EE548117D8BE4E63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087337, "uuid": "0fe4f67d-1092-4385-a929-223d4902edc5", "value": "384:r3C1dbgz0p7iBt+xlaFZP8paTenRk2QmXb5QAAdpa8Y0xY/6h:+7gwxSVN8pS0v5QAAStPSh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087337, "uuid": "a418b9c9-ec73-4b85-b31b-f95bcf311d3e", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087337, "uuid": "a3c65d11-e2c6-47c8-8b22-eb3b1be0da0f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a8414afd-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087338, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087338, "uuid": "1beb1b36-1d52-42a5-aa45-e11d82134f3b", "comment": "Malware payload", "value": "4434a63c45efb3f06a16a9eb27b264c2", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087338, "uuid": "8e7fc092-e3cc-4dd8-b625-7074edc46f16", "comment": "Malware payload", "value": "234c494787aae6096bb7c1cf1ff1026de7b2cb876232dec6e16305a7b72eeba9", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087338, "uuid": "ca7c5fd3-7d55-4455-aace-6aa6fa180d36", "value": "T1F9E0A9E88E15AE22C4700837812BF3200F1AAD0A0A48B2E200E0A491E8712893E662", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087338, "uuid": "d1607aca-2c55-4fc4-aa9d-06410bcbb088", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXC1nFyC6w5fJWXi1HGPebRJ:4xtJCUOblw7BJYXHpQtXCrRqebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087338, "uuid": "697d4d41-3be6-48b6-a249-5ffd4666602f", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087338, "uuid": "d3be5154-0884-4b39-9a9d-702b2affc880", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9ef5709-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087340, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087340, "uuid": "eb498ad9-d544-4b6e-8633-da2cf725a2df", "comment": "Malware payload", "value": "f4e4da1d079c837ce7038d02b6c5295b", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087340, "uuid": "bc47a72d-a0bd-44b1-bcb9-fec846022a37", "comment": "Malware payload", "value": "41440080ab7eea9d16002266566ab1520632708d8fc53168ed038535d9cd7d14", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087340, "uuid": "fd3c55bb-b97b-434b-b58a-2f13434c0c40", "value": "T18441D5EFE4169334CE53463401AA6C9DDF12F63B69029050FE8C4905BB109B1F3A03", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087340, "uuid": "fcb432b5-bb48-4e08-a1f6-7961586c031c", "value": "48:w2Ah5kMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:k5kUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087340, "uuid": "d29b0955-6979-440d-a41d-dba45b08f902", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087340, "uuid": "44febd43-d0fe-49f1-b53b-ca67d939354f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1c00198-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087353, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087353, "uuid": "e1d35ad5-2203-4ff4-8dd7-8c639cf8067c", "comment": "Malware payload", "value": "2a90bf4687c42bcee130031756527024", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087353, "uuid": "0849b0fe-8f04-47ad-a9af-05a00a537354", "comment": "Malware payload", "value": "505762782814a127068db5eb074acb435ee55dfe2ecd88b291c2cbd58a38b5a7", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087353, "uuid": "d9ba9c78-bf7f-4323-b868-18f487c659a5", "value": "T12041B5EFE4169334CE43467401AA6C9DDF12E63B55029050FA8C4945BF109B5F3A53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087353, "uuid": "615d6de3-79dc-4660-888e-eafcd59d3658", "value": "48:w2ukMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:okUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087353, "uuid": "a2f04535-222b-4d1b-bc5b-0210e9fe2a86", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087353, "uuid": "6b766322-da42-4997-9025-fe745c422287", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b390a46b-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087357, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087357, "uuid": "47c9caa6-afe9-44f6-a6a4-3ba28376dbe7", "comment": "Malware payload", "value": "7f55c2558d0ee1e72918779b67e190d7", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087357, "uuid": "71b15a82-0adb-4431-b187-7e5112c5dd69", "comment": "Malware payload", "value": "7119f6dfd7b1be993b7e7da7841440b5102f0ab24232574c853cae3ba6347225", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087357, "uuid": "fa648e92-562d-4a42-ae28-e1a7e4624aa5", "value": "T194E0A7E44E16AE61C07104358206E3100F35A9070594F1E200D05491E4701867F262", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087357, "uuid": "0b0b1894-1cc8-47b2-ac91-cfcece40fd0d", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXqXtFyC6w5fJWXKXBGPebRJ:4xtJCUOblw7BJYXHpQtXqX3RXmebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087357, "uuid": "53c8aa20-6b94-4566-a00f-f59e20f1833d", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087357, "uuid": "e72ca335-e0fe-426d-953c-652aa6a62053", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4d39aca-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087359, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087359, "uuid": "a417e5e0-2f26-4743-8590-710b18729463", "comment": "Malware payload", "value": "0964116bf949e88736fd47e52e99aca7", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087359, "uuid": "7544017d-947f-4354-b161-81760193b577", "comment": "Malware payload", "value": "d4a0bb70945094e109246dc0ca09f8e347188afcff97231eae5fdf71ab018757", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087359, "uuid": "f4305d29-287b-49d3-90f1-4c2cc585fe88", "value": "T15941B5EFE4169334CE43867401AA6C9DDF12EA3B55029050FA8C4D45BB10AB5F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087359, "uuid": "c56ee681-ee8d-411e-8cbf-bb3bbdd251d3", "value": "48:w2ULkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:OLkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087359, "uuid": "d880ee98-7aa7-4a92-b260-1be7963e549b", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087359, "uuid": "4e4bf008-54ba-4e90-8570-0c5e1a374255", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7ce9530-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087364, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087364, "uuid": "9f021fc1-571a-462e-a901-3a8b7e7bbfae", "comment": "Malware payload", "value": "24aeaa524d0d5f7635dad70147abc633", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087364, "uuid": "cb98000c-e5ba-4ae0-a9f3-eec09922fb78", "comment": "Malware payload", "value": "104a4b38886384f04fdffa5bc1193839d080302123cf4044093f75d470d8f0ef", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087364, "uuid": "ccc83376-d6eb-4b6d-b1ca-f6f17070599a", "value": "T1BB41A4EFE4169334CE83867401AA6C9DDF12EA3B55029090FA8C4945BB10AF5F3A53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087364, "uuid": "06ac023a-559c-4a04-9dc6-11feaa65ae96", "value": "48:w2jFokMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:NakUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087364, "uuid": "9155b750-58c7-414e-bb9c-9fd29274e0c2", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087364, "uuid": "39859b53-5428-4517-8baf-29ac4579e1f4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bae2d30e-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087369, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087369, "uuid": "8900b475-6cb7-4fea-b028-7cf8504f3356", "comment": "Malware payload", "value": "e0d564f46bd641f822fdec4762c35d38", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087369, "uuid": "d82f7e7b-26cf-4781-ab39-bf4fb71ba7b4", "comment": "Malware payload", "value": "bc084f01dc64419c46f8b14960e1127b51345b492d0897a353e4db6c30e4d49f", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087369, "uuid": "90b86a1f-9319-4fdc-9433-b3c238571c9a", "value": "T112E023D45F15FE21C3710835C206F3100F15F90D0D91B3E100D050D1D47228D3E366", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087369, "uuid": "b6e49c73-06ad-4c8e-8496-81c40ad1f64a", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXUEnFyC6w5fJWX0EHGPebRJ:4xtJCUOblw7BJYXHpQtXpPebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087369, "uuid": "9bca1fa3-63d8-478f-97be-039ef29e8abb", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087369, "uuid": "37cf1fed-0acd-463c-a8f7-c73bd91e3bf3", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bb75ab44-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087370, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087370, "uuid": "13167b05-4e5e-4149-829c-e2d56d441e7e", "comment": "Malware payload", "value": "6488c85118c56ca9b00d82d66c534b7a", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087370, "uuid": "492fb9cd-eed1-40c4-8785-8cb1ca66f136", "comment": "Malware payload", "value": "44601ccc507559190c99e479f79813251f1cce07b2ff6c443e69fe7c6ff56d38", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087370, "uuid": "10c2c64f-92b7-45a9-97ce-41a4e1062ae6", "value": "T17941B5EFE4169334CE93467401AA6C9DDF12E63B59029060FA8C4D45BB109F5F3A53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087370, "uuid": "f7554c84-2733-4fee-a1f8-4a8082bdf919", "value": "48:w2G7kMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:A7kUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087370, "uuid": "26e64f9e-db13-497f-afb2-b666c0b81842", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087370, "uuid": "e1019b8e-c013-4d52-8eab-8d4363220fcd", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc803041-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087372, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087372, "uuid": "e063a0c9-0ef3-47ca-b126-b781530ae123", "comment": "Malware payload", "value": "18191b1eda85ff6d1873f4521ea49bb9", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087372, "uuid": "0c3a5f3f-7377-454f-8904-76592d3c174a", "comment": "Malware payload", "value": "287c5f0c09de06169855473359db6274d079b8b61b358ee788d6fa9ed46fefb8", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087372, "uuid": "3835b06d-80f7-4ca1-a01d-7a412868aa91", "value": "T14EC28E52BE94E07867CF371B76F4F89245387BB2908DA90CA1DE84C163D9BD0E63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087372, "uuid": "9ca092d1-9c50-432e-bb86-2b4c2f759f1a", "value": "384:Y3C13mgiUN+u816Gv4UJtUeR/z3X1YmXR0vLXyIcu5bPnz+:HR23Mc4UfNz3X1YmMLC0z+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087372, "uuid": "21ebcdb3-001b-4567-b28c-002e826caac9", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087372, "uuid": "bb636e9f-fa52-4d2e-8f78-06a604c61cbc", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd664262-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087373, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087373, "uuid": "5909a8b3-0a08-4efd-a735-bc307d247b68", "comment": "Malware payload", "value": "7552f4f30205c442ae3ff543541a6bfe", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087373, "uuid": "34b1935b-7129-4df4-830e-9081387bc1ad", "comment": "Malware payload", "value": "c18f9b824ac27bf6cf538f3dc680ff57812172365baabbccbb4a5a2512bf1035", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087373, "uuid": "2c6659c6-23e8-42dd-bc06-6944ac63a400", "value": "T16E41B5EFE4169334CE43467401AA6C9DDF26E63B6502A050FA8C4A45BB109B5F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087373, "uuid": "9a931018-9de6-498e-876c-baae15c7c7a6", "value": "48:w2W7kMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:wkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087373, "uuid": "8e07c05e-8e85-4418-8a01-911318128078", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087373, "uuid": "45ac0edc-05f7-441b-95cb-17413ed8198f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd7991d2-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087373, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087373, "uuid": "6191f0f1-adfa-4685-827a-5815f7c8d753", "comment": "Malware payload", "value": "3137ac52268fc325f61a66df54817fd7", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087373, "uuid": "d83746d0-cdbc-4127-bed3-aec07b95c577", "comment": "Malware payload", "value": "299734eade8c9dc53b3085effeb58d1ac096ded8b38327412f3aad36cbf4ec44", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087373, "uuid": "c9ecc057-229e-4244-bab9-4ddcec144852", "value": "T132E0A9E88E15AF22C0700437C10BE3200F1AA90A0A48B2E200E0A491E8712893E6A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087373, "uuid": "74c0b9f9-8817-4437-be6b-b2624db274a0", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXsVhFyC6w5fJWXMbLGPebRJ:4xtJCUOblw7BJYXHpQtXqT1QebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087373, "uuid": "f19e980e-cf29-4002-b5d7-d520846ceb7b", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087373, "uuid": "acd1d954-830e-4fa6-beb8-803696c77eb7", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be9aa61e-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087375, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087375, "uuid": "92cbca7e-cfd6-4861-8c29-a24089383450", "comment": "Malware payload", "value": "dee39d44d41e845c0705c533fe33b168", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087375, "uuid": "7d9ae19d-91ac-444e-809a-301f16091a15", "comment": "Malware payload", "value": "63f351e86b7c2778f21aa9666b382ce49e3fcc4ce3a1f4906a089d878d029584", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087375, "uuid": "1758e55f-fc0d-4068-806d-b44aa37299ed", "value": "T1DA41A4EFE4169334CE93867401AA6C9DDF12E63B55029050FA8C4945FB10AB6F3A53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087375, "uuid": "ad5b405b-bda0-491d-af46-5c56b37dc529", "value": "48:w2GkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:gkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087375, "uuid": "741e1d8a-a7e1-4569-9feb-d640dcecf44a", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087375, "uuid": "0d78f8e8-3d66-4919-8ec4-4623790077d5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1e1944b-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087381, "uuid": "ff35a266-88a0-41a7-a971-bc906dcc611c", "comment": "Malware payload", "value": "4e27f1638d5e5f0ecda75ef163f5f4fb", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087381, "uuid": "13593b4e-fca0-400d-b673-965981efb811", "comment": "Malware payload", "value": "35817fbb013ea0ca442f58eb73d6fb9916e6abe2032f9edfdfd4f2d0daaad0a1", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087381, "uuid": "24bda43a-9df3-45be-848a-6b9319adb590", "value": "T177E0A7D44E2AEE61D0F008368306E3140F1569090550B2E100D05191E4702857E662", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087381, "uuid": "fa17bd2c-b85a-4c70-b2d0-f6eca3248265", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXRLVBZTFFyC6w5fJWXxLVBXB:4xtJCUOblw7BJYXHpQtXRRewebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087381, "uuid": "3d92b582-d8fb-4303-9feb-f8d36c787b0e", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087381, "uuid": "c11d10af-9bb3-4a97-9546-e27cec4ee7f8", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c23d971f-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087381, "uuid": "8fee7691-7903-443b-835e-1abc62c07284", "comment": "Malware payload", "value": "0d03091652989712b8a8d2a12f58a570", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087381, "uuid": "cb4a94f1-ccaf-4aa9-919f-cbe151f43dca", "comment": "Malware payload", "value": "9729f6dff1bfb5eb0857a175cf93d73d7bb30d849ad44291fedc60501dfbdf05", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087381, "uuid": "3cb5e97d-346c-4e85-a3d6-17332717babb", "value": "T197E023D44F15FE61D3700835C206F3150F1579170540B3F100D051D1D4701867E7A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087381, "uuid": "faa25d31-d8b7-4849-b00b-3f035d8019cb", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXktVBDFTFFyC6w5fJWXEtVBx:4xtJCUOblw7BJYXHpQtXm1XEebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087381, "uuid": "29f187ed-e41a-40ae-b3c5-21f25562f0f6", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087381, "uuid": "af768b39-2f25-41b9-97c1-5399ce79da9e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4028cfa-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087384, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087384, "uuid": "327ccb59-c07d-4e16-9f66-bc80afd271f5", "comment": "Malware payload", "value": "185216615c009b0c457a1021a6cb98bc", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087384, "uuid": "306c2e87-e916-449b-a30d-4691ab4c61d2", "comment": "Malware payload", "value": "e2c64516ea687cbdf08988bba2bf38a500d1503671ee1764e2ce3ee6abbbe050", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087384, "uuid": "889b4565-1b5c-40de-9920-6ccbbb70db2c", "value": "T1BD41B5EFE4169334CE83867401AA6C9DDF22E63B55029050FA8C4D45FB109B5F3A53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087384, "uuid": "f82dccb1-bf63-4e83-8c0a-3b168bb889db", "value": "48:w267kMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:c7kUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087384, "uuid": "604060ca-25f3-4280-85c3-878ec44217fa", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087384, "uuid": "7015009b-049e-432a-a737-397ccc7f7d2d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c63568ea-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087388, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087388, "uuid": "d32574ed-5e22-47d2-927d-cade521904ad", "comment": "Malware payload", "value": "36c4eef5ed35796d2de44a1e34786c52", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087388, "uuid": "b7141b05-85e1-4d0c-b979-1db425b5eff2", "comment": "Malware payload", "value": "38dd3ef4850d6d432c03616dd6cde7f848bf0e9b9a90b79b3642dbecee8d1fad", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087388, "uuid": "5ca269b3-cf5c-4e60-a9c7-457ac4e26270", "value": "T1E0E023D44F25FE21F4B00837C117F3151F177A050551B1E100D055D1F4705C53E362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087388, "uuid": "0695ba2e-34a9-4f5b-bd85-a6d36da8b3e9", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXILXpFFyC6w5fJWXoLXHGPer:4xtJCUOblw7BJYXHpQtXILXFPLXUebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087388, "uuid": "1bdee03f-1a33-4092-aaa4-8955b4d5bd97", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087388, "uuid": "719db322-55e9-4268-a7e2-027f727c3a88", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7890abf-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087390, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087390, "uuid": "17c8eff3-5d89-4cdc-a5bb-b7e17ab8231d", "comment": "Malware payload", "value": "8adc2eb4a08335e119c04f661ca410fa", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087390, "uuid": "7f11f53f-f3d9-4e1e-9759-3c681e34126a", "comment": "Malware payload", "value": "6d1a312b51b7538cf34b981b70a630193b264321888e806633590cbc98639eb4", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087390, "uuid": "6cf55ffb-236d-4e44-b53a-b3692f060574", "value": "T14141B5EFE4169338CE43867401AA6C9DDF12F63B55029050FA8C4D45BB109B5F3A53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087390, "uuid": "bc6bbc9d-0bd9-4100-98f7-1caa7934a8fd", "value": "48:w22kMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:okUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087390, "uuid": "261033fd-8e0c-423b-81b0-870264b7502b", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087390, "uuid": "ed2d411b-a494-4462-93f1-c195216db8a6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9b8b59d-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087394, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087394, "uuid": "532d6ff9-e4f5-41ef-9c09-4fbfeec62e62", "comment": "Malware payload", "value": "33b46fac8f15421f4e64cbde13319ba9", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087394, "uuid": "d06b9244-f187-456f-9789-129864dd947c", "comment": "Malware payload", "value": "3bd0942a1d316eca6b72f9cd3b9a046e6c092c09707ab6f4ae595a39ec31c050", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087394, "uuid": "ffb6dc4d-baa1-4946-b568-bb3ac3ddde67", "value": "T1A8E022E88F55FE22C0720437C10AF3300F2AB90A0B40F2E200E0A0D2E8701897E762", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087394, "uuid": "4ddfa8c5-8081-4835-85ec-68125eafbc30", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXzhFyC6w5fJWXdLGPebRJ:4xtJCUOblw7BJYXHpQtX3hebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087394, "uuid": "0dd30e38-e2d6-4d39-8dc7-542cc8bda651", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087394, "uuid": "9d2846e6-1c2e-4821-a875-b69c1615ffe8", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cdbff67a-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087400, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087400, "uuid": "8afa9dd8-7ddd-44b2-af96-69e7588ff64c", "comment": "Malware payload", "value": "32c4052330193d0212dd9c7d5da50c6c", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087400, "uuid": "efef07ba-a37e-4877-bf7f-4365de4aa3e0", "comment": "Malware payload", "value": "d9771253abba2bc046230264ecede9af6c42e82b6d55430eec5954eb5b005e58", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087400, "uuid": "b59a90d0-fb7f-4c3d-b14b-b07b8f463b2f", "value": "T15241B5EFE4169334CE43867401AA6C9DDF22E63B65029060FA8C4D45BF109B5F3A53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087400, "uuid": "4550fba5-28c8-4231-9559-eed4f49a91eb", "value": "48:w2WkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:okUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087400, "uuid": "47ddafee-8164-4dc6-a058-85194b2a0a42", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087400, "uuid": "5bcb0428-644c-46e6-a1e4-fd0f0c2fb543", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce4096f1-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087401, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087401, "uuid": "db9f2812-8bc6-40eb-84a7-a93f7be06cb4", "comment": "Malware payload", "value": "7337f429a65a1291c2ee78b5159fdc96", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087401, "uuid": "e75be27d-c46a-49a1-9b34-eb25db0ff5b4", "comment": "Malware payload", "value": "c8a5f605db833f9d5478230cf228dbe714e260a94cc1cfd862a88daf674bfccb", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087401, "uuid": "751107a2-afe6-4acc-b78c-7868df666f78", "value": "T1A341B5EFE416D338CE43467401AA6C9DEF12E63B5502A050FA8C4D45BB209B5F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087401, "uuid": "61cfff07-8bf5-464a-ac69-641b4ed92bdb", "value": "48:w2ukMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:4kUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087401, "uuid": "9a5b7fc2-38e0-4b0f-b20e-ea6839686621", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087401, "uuid": "024b3fe3-df92-4cf2-9773-a74461410726", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cee9fe47-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087402, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087402, "uuid": "bb8d5e0b-4b64-4ea4-a26a-3887500767d6", "comment": "Malware payload", "value": "7f0d726f2ba8e7eecf6b4ee126cc2d77", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087402, "uuid": "2fdc95ee-63a0-4ef1-8671-7458291bd483", "comment": "Malware payload", "value": "b58d2130758489571e800aa759ae9fd6d977aa973be133f7d65ba44ab16d6492", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087402, "uuid": "d358b0bb-c0bf-426f-81ea-48995a95d9f7", "value": "T1ECE023D44F1EFE71C0704435C146F3100F1D7AC50554B1E100D054E1D4711C53E362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087402, "uuid": "29ae4eb2-7d00-4d57-93ef-eb206b248960", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXAnFyC6w5fJWXgnHGPebRJ:4xtJCUOblw7BJYXHpQtXwEebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087402, "uuid": "1b208db6-3f2c-464d-8731-a6994d6f7bb0", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087402, "uuid": "b4a982c1-37c9-4817-8e7e-b0667748cf73", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d27204ec-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087408, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087408, "uuid": "4d504538-434a-4696-9695-a2bd65dda078", "comment": "Malware payload", "value": "f437b2de905769f3ff6eccffa0983995", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087408, "uuid": "41440790-4a34-4dbc-a876-1dbb88126434", "comment": "Malware payload", "value": "5991ed9cb847c4e343d81ea6b14ef9c62b6eb7e5b44d569111641faf788b9405", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087408, "uuid": "5ad2458c-41b8-4eef-b6bf-3266f66b0610", "value": "T136E023D4CF16FFA1C0704435C246F7140F257D050594B1E100D350D1F4701C5BE362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087408, "uuid": "9b5267d8-5bde-4c03-bf00-8aa52085e621", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXb7FyC6w5fJWX7DHGPebRJ:4xtJCUOblw7BJYXHpQtXbBugebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087408, "uuid": "2134d013-cdf1-4b1f-aa3e-3ca04943b820", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087408, "uuid": "8b3f2408-31d4-4e33-8460-134968e9d39c", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2c186da-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087409, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087409, "uuid": "847e1d03-e3d4-4960-9c13-04e2476587cf", "comment": "Malware payload", "value": "ede0ec648504f0c77ca107ed9e9bf541", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087409, "uuid": "0a8e3037-15d6-43d9-95e2-1a6288aea7b4", "comment": "Malware payload", "value": "de00e536cf1ea86567f8aa033a465e5a75edbe66a10647be4f357df079b3283d", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087409, "uuid": "5f56255e-b665-475d-b36f-d3507891c8ad", "value": "T16FC27C61BE94F0B49BCF730B76F4F8954538BBB1A04D650CA0DE84C267D8BE0A63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087409, "uuid": "5d16a13d-9d27-439b-8054-222278da1f51", "value": "384:i3CHh6b53WeBKN2ZHFUoMCrBAs9Nvn8kw8yzdrZKdNdTFFAhyE7:RHAbIeB5rz7/8kw8yJlWNBFFxE7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087409, "uuid": "1d6b97f0-7d00-40f3-980f-67101b79ee75", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087409, "uuid": "e815bfed-420d-4fb9-b2d4-a75702caf873", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2c3862f-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087409, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087409, "uuid": "3887d0be-eb9c-4ee6-93b1-2d7d193f4285", "comment": "Malware payload", "value": "b07de2bf2c82bcbf528a61a5fc68936b", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087409, "uuid": "60329aa7-137b-4b46-919d-e8dd55367da7", "comment": "Malware payload", "value": "7d5e7b36048fc23d81a14d538c2869ec423f2f0ad5b61619af96916e53751fc6", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087409, "uuid": "24831c6c-3b28-491a-96ee-1b04d99a2352", "value": "T194E023D44F16FE21C0B00435C106F3110F2D79050580B1E300F450D1D4701857E372", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087409, "uuid": "df61bee7-6c41-42dd-b08d-55e57fb39536", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXzL3FyC6w5fJWXTL3GPebRJ:4xtJCUOblw7BJYXHpQtXn1WEebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087409, "uuid": "bbd303a9-60c6-4104-b71d-d318d4d0fc71", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087409, "uuid": "16e7e868-bfd9-4575-9f1f-c1e20309313e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d343db2c-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087410, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087410, "uuid": "aafd4e9e-626f-4686-bef2-8fa9747a4e58", "comment": "Malware payload", "value": "cbb9e8fda301feb244d6f59ad58c4c6b", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087410, "uuid": "8d851c1a-3698-478f-9053-8ea4c919cdb8", "comment": "Malware payload", "value": "47055865d883b6b9d9ff8542b9d5952901f52559a85955bf4fb8ade7cc880e7e", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087410, "uuid": "441516f3-6018-4749-8284-68ea55a4e1f4", "value": "T18D41B5EFE4169734CE43867401AA6C9DDF12E63B55029050FA8C4945BF109B5F3A53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087410, "uuid": "7996dd3d-bf11-421e-907b-74309e7fb19b", "value": "48:w2q7kMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:E7kUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087410, "uuid": "01f25ae5-afb9-481f-b379-a83428d14a25", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087410, "uuid": "79fcfcde-27b6-442b-93eb-9a98d4b5f4ba", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d44d0f3a-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087411, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087411, "uuid": "1a683f44-3682-4d3d-8fe7-6a82a71a75e3", "comment": "Malware payload", "value": "5835a334aa5a99f3f6f4ba2498a3b7d3", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087411, "uuid": "8437ca25-cb7b-402c-8967-f3bda7aac04c", "comment": "Malware payload", "value": "c8b436bb7cedfdecf75a417ffd860dcaff160625d8ffcec064bf6d9af130d632", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087411, "uuid": "ed55a26c-775f-47e7-a132-a09d816874e4", "value": "T1C5E0A7E44F16BF71C0704435C106E3100F2569550580B1F100E05C91D4701C57E272", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087411, "uuid": "18b1d427-04ff-4ec2-ae5f-795c0731d93b", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWX2XFhFyC6w5fJWXWXLTHGPer:4xtJCUOblw7BJYXHpQtX2XFPXUebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087411, "uuid": "9b43a17a-e70c-430e-9268-1086ba0499b8", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087411, "uuid": "dccc87f4-2367-415d-a4e8-ba226b9e74dd", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d8d91063-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087419, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087419, "uuid": "d2bba043-200c-4251-ad7b-06e5d81abe59", "comment": "Malware payload", "value": "3b8db7a8777c3e896e5d4071cbff2475", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087419, "uuid": "736c4623-d8eb-45a7-acb7-30a910ad9bc4", "comment": "Malware payload", "value": "1f8f6ec8332560b5a3f57d87304ac396cdcc8fa8ec6bb1c94d62403bd083a877", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087419, "uuid": "91fc5e09-d90a-4c78-bedc-1679627b086b", "value": "T14BC28D92BE94E0B497CF370777F4F8968938BBB1909DA90CA1DE849153DCAE0E53C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087419, "uuid": "002627fc-e983-40cd-89e8-a4c68a25243d", "value": "384:Q3C7H2mQdjbueewh8U887VCY8VFU7LGXjPtj2NXGwDXIVrtLUxdz6JF:f7HbHeetUIlqUKhGwDXIVrCdziF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087419, "uuid": "ab18701d-403e-43f3-93d9-486beeb30e81", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087419, "uuid": "017d02a1-41f9-4dff-a761-a38081ec334b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d9dd272d-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087421, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087421, "uuid": "f3673b3e-503e-431a-9c8f-928a622c7d9a", "comment": "Malware payload", "value": "23c79899adf4524916096705b28ce27c", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087421, "uuid": "af330a19-13fd-43d0-a4d0-08577551ea30", "comment": "Malware payload", "value": "ce6342dd0f406e96d8115beb15a6d1d12dddbc5d852fe359976a621cb3c77df9", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087421, "uuid": "f71c6b3c-c577-484e-a5d8-4d40bf74c7f1", "value": "T1C541D5EFE4169334CE83427401AA6C9DDF12E63B5502A050FA8C4901FB109B1F3A03", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087421, "uuid": "c729378c-f3db-4da7-a78d-bfd2d0c2fc17", "value": "48:w2GkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:okUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087421, "uuid": "d44c779f-d9ce-46d3-9368-fd3508e658c8", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087421, "uuid": "d14d8e9e-6b37-48bb-bbac-a4cb9666f360", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db33a31b-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087423, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087423, "uuid": "3c443361-2c5a-4bdb-a066-004440f211fa", "comment": "Malware payload", "value": "5f75dc3472f8900c9ceb2ace94baa586", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087423, "uuid": "d76ffae6-f286-4107-b3fc-0a31723fc27d", "comment": "Malware payload", "value": "02909aa816b7933d0f874f829764a0987b4ab1843ddff0a5c896aeb592087742", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087423, "uuid": "71d125de-a3c1-4993-900d-ed583a75e265", "value": "T1DCE023D44F17FE21D0B00439C116F3100F1579150540B1E101D0D0D1F4701857EBA6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087423, "uuid": "ab8d8b78-b565-4ec3-a20e-01a08d629d7b", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWX66XFTFFyC6w5fJWXa6XLLGI:4xtJCUOblw7BJYXHpQtX7XFTSXLQebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087423, "uuid": "df90b499-eb91-42af-b9de-b31d0d0d47b5", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087423, "uuid": "d4fac91b-1c9e-4d86-a670-e20dd49c0562", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db628e69-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087423, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087423, "uuid": "2f760cff-f531-43e3-a5ce-0b0b016e50f6", "comment": "Malware payload", "value": "3ae37fb9a5b227c00214ae735c5c2a07", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087423, "uuid": "f8db7f61-a8b1-4041-a2d7-4961997830b8", "comment": "Malware payload", "value": "e28c6d9782861611235b890b6615c6c526725396447dbc85d145d059e24d261d", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087423, "uuid": "8721a578-7c4a-4257-bf80-ad9dae5e5dc9", "value": "T19EE022F88F15FE63C4B00436C10AF7200F1BB90A2E80B2E200E0A0D1F8B0189BF762", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087423, "uuid": "786266a5-1f4b-40fd-976d-f38a7c116ea0", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWX9TXDpFFyC6w5fJWXdTXDHGI:4xtJCUOblw7BJYXHpQtX9TRkTwebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087423, "uuid": "e55d7d0c-31ad-42b5-a88f-5d1163ae10b7", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087423, "uuid": "ba2ad808-48a7-47ee-8c18-f585c6c5ceb1", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dcd40c7e-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087426, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087426, "uuid": "a42ab2ca-0866-4a49-98d6-9125af19205c", "comment": "Malware payload", "value": "013bdf3a4e2976b4b66f49c339aacf38", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087426, "uuid": "203c1a5e-40f0-43a2-8fea-7fd2c49d52e4", "comment": "Malware payload", "value": "966cd42a186cb7852f197639799df3e7d39b6e154a7184fa2526dd4869987a59", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087426, "uuid": "5a82afdc-7861-49a4-96e2-ca3a04c34804", "value": "T1C841B5EFE4169734CE43467401AA6C9DDF62E63B55029090FA8C4945BB109B5F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087426, "uuid": "0f3b1519-c5ed-44c0-8ef4-6d241e8963db", "value": "48:w2WkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:wkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087426, "uuid": "83a58af1-f47d-4679-8de5-a3943ec89a99", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087426, "uuid": "6920e343-5f31-4a73-a8dc-dd19ac5a210d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df711ad3-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087430, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087430, "uuid": "5205bb1d-8f00-4f9c-9205-b4f388df628e", "comment": "Malware payload", "value": "4d08d571d2adefbb96cfa5800db4bc06", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087430, "uuid": "15a3ed32-1447-42a7-94c1-a88e762ff89d", "comment": "Malware payload", "value": "f1481d9becdbf6c06bd626e58d7dfbb63c7f0a076bed96498122d9bff8ecfd9d", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087430, "uuid": "8249e3e4-11b6-4151-96ef-89991e8de6bd", "value": "T17441B5EFE4169334CE53467401AA6C9DDF12E63B55029050FA8C4945BB209B5F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087430, "uuid": "92f91994-598b-44f9-a4c0-1f98429049c1", "value": "48:w2mkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:wkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087430, "uuid": "4198e520-ed63-4529-b4a3-fdd08fc567fa", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087430, "uuid": "a7c46e0f-56e0-4723-bae1-ee974cb535fa", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1b785b6-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087434, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087434, "uuid": "0bacf61e-ffa0-43f1-ae7d-ea55d0e1c07e", "comment": "Malware payload", "value": "c977c2514271f519b672d7d7d0a8ba0d", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087434, "uuid": "ee6a8930-0b84-4e8a-8a67-eb01e6a9fc13", "comment": "Malware payload", "value": "55309f028929d7602b5153c7ca18b30937712258228899a1dfe080754d8c5714", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087434, "uuid": "9374ff5d-0d2a-424c-a7d0-990ec1fd0e55", "value": "T18C41B5EFE4169338CE83867401AA6C9DDF12E63B55029050FA8C4945BF10AB5F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087434, "uuid": "3b8be122-5eca-4ebe-81a0-31e23a24e855", "value": "48:w2KkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:MkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087434, "uuid": "00884473-2568-40ff-a390-0d42012c8e60", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087434, "uuid": "ce20f3fc-a040-45ac-b2eb-3daa25dea013", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e261ba33-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087435, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087435, "uuid": "2f590a87-0793-4dd2-9793-39352e176251", "comment": "Malware payload", "value": "f077f994363c516c56d8050abf9ed753", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087435, "uuid": "420710f6-4ecb-43e3-aabf-0fb36e6deeb3", "comment": "Malware payload", "value": "1250a0323f2a251e85a68ee2a36e1f953eb3a136227d8c895f7bbb5c498b2e6a", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087435, "uuid": "60d84c85-1d78-40dc-bd5b-d5c5a5cdf3d5", "value": "T166E023D44F16FE23C4700837C116F3100F27791D0740B1E300D155D1D4B11853E3A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087435, "uuid": "539e9c7d-2634-4886-9e97-b69cefe53f88", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXNeLXpFFyC6w5fJWXteLXHGI:4xtJCUOblw7BJYXHpQtXNeRaewebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087435, "uuid": "a7498f72-3551-4ccf-9227-b585cf320d0e", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087435, "uuid": "64152965-62f7-47db-b782-4556e8a771c4", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e27ffddd-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087435, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087435, "uuid": "a00554b0-3f26-41f5-9152-263a5ed1b609", "comment": "Malware payload", "value": "b8f61b218ee58af61f3b73f7e063667b", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087435, "uuid": "93167359-d833-4a7d-9761-32e4f1fcdde8", "comment": "Malware payload", "value": "d78cd12a2dd1b0ca8f259ab754b541a1defba4dafc2ada2f89a2b7d42f699ece", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087435, "uuid": "40157193-a374-4f78-8a29-a0d0c1647b76", "value": "T1CE41D5EFE4169334CE43827401AA6D9DDF12E63B5502A050FA8C4901BB149B2F3A03", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087435, "uuid": "6eb9beda-21e8-4744-a598-c7f0e9bed233", "value": "48:w2qe6kMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:ge6kUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087435, "uuid": "68662d81-2918-4239-8b48-39bc71d28b02", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087435, "uuid": "ba7ad276-37cd-4bc0-8541-be6265fa573f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e614bb00-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087441, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087441, "uuid": "0731c6a2-9758-4611-8e12-52699ca5a68f", "comment": "Malware payload", "value": "877ba1dec1e89e373d3ccb03342de888", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087441, "uuid": "e21119c2-c42b-4d04-a181-1a385de1ee5e", "comment": "Malware payload", "value": "c750d2b57b44009c8d13720feebfc1760f91f4b80fbc53149261c3374cd16642", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087441, "uuid": "f1d7c3dc-895c-46e9-9196-3d8f807a8668", "value": "T13D41B5EFE4169334CE83467401AA6C9DDF12E63B59029050FA8C4945BB10AB6F3A17", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087441, "uuid": "bf798f6f-a875-4ccc-9475-80eca5b2bc17", "value": "48:w2TakMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:VakUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087441, "uuid": "fb6c6c11-f2fa-4d01-a413-a774abd572a2", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087441, "uuid": "3a90b8d0-2904-4aa8-9c0e-d5f3416e59ef", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e69f761a-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087442, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087442, "uuid": "b5c05b1d-6b51-4db1-837d-ebda9fb049f0", "comment": "Malware payload", "value": "93abd08a2fa751b73a91ff460e10f778", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087442, "uuid": "a9ef67ad-c66d-45b6-aa07-e712b7c146b0", "comment": "Malware payload", "value": "bc2c04bd627ef01cad0d96872738ecb88319f1c7153d0b9912c13cb8ceeedebe", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087442, "uuid": "ab2fd304-d5af-46a3-8a12-505f339a34de", "value": "T12941A4EFE4169334CE43867501AA6C9DDF12E63B55029050FA8C4945BB109B5F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087442, "uuid": "59b9e4ab-9b4c-49ed-8f1d-a70813121ae6", "value": "48:w2ekMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:YkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087442, "uuid": "4a441c78-0092-4a77-a63c-0f4bc0a1cee9", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087442, "uuid": "fa7dc0b6-5401-43c9-a225-4471f775b992", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e74f2e51-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087443, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087443, "uuid": "96a2470d-dec7-436c-a364-7295b1f70c47", "comment": "Malware payload", "value": "8d89cc57358c0732dd4b15e9fae09c43", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087443, "uuid": "2ee77667-837c-4666-8644-807e31bf294c", "comment": "Malware payload", "value": "3faa0bc065bd680da4f3c4c6952a07768ae9723f3b31fa14d5939e0832dcd3ae", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087443, "uuid": "7b890aed-85af-441f-8498-234f9adb0a1a", "value": "T18D41B5EFE4169334CE43467402AA6D9DDF22E63F55029050FA8C4D45BB10AB6F3A53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087443, "uuid": "cd5d0354-419a-4b8c-8783-7552d46fe6bb", "value": "48:w2+kMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:YkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087443, "uuid": "44b6f555-53be-477f-a758-99c46babdb54", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087443, "uuid": "a092f812-065f-4f9d-9695-138b38cc22ff", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eaf05725-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087449, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087449, "uuid": "7ee7bc5c-13e2-4ec3-9bd2-16b5f3461550", "comment": "Malware payload", "value": "680fb59a027e404c26a0e0251acceacc", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087449, "uuid": "347027c7-2920-422b-a6e9-44ffe72a9519", "comment": "Malware payload", "value": "5cc06bdd935db2cb354c3e94202439d1b57877d79015b0327ab0d111a9fad75c", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087449, "uuid": "8e6bd6f5-ba2b-4eba-a548-73899e88ca54", "value": "T101E023DC5F15FE21C1704475C116F3144F1579170750B1E100D050E1D4B128E7F363", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087449, "uuid": "b7c32fdb-d6f2-4a39-b665-c7967d460d38", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXphFyC6w5fJWXHLGPebRJ:4xtJCUOblw7BJYXHpQtXpTOQebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087449, "uuid": "87e0912e-764e-435f-a837-0cc19e130539", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087449, "uuid": "6705b1ac-4ec7-4b7d-9054-f9eb580feba3", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ebae4113-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087451, "uuid": "0c1ab0b3-25eb-4c57-b1b4-b8e1f77958f6", "comment": "Malware payload", "value": "ed7e99529ac0fa2d2c5ffbbbaec8e5a9", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087451, "uuid": "58f678fa-cee8-4044-a8e4-76d07d94426e", "comment": "Malware payload", "value": "1cd2b6eb2db10a3c2ea191091abdc9d20ca87b9011c39b301c3a27df05dcccd1", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087451, "uuid": "8efc1b9c-da8a-4717-b87d-852f18c71aad", "value": "T192E023D45F16FE23C1B00437D216F3110F2779150542B1E100D070D1D47118D7E3A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087451, "uuid": "d0817010-ec64-4c4d-ba23-d84d54f24365", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXRcLVrFFyC6w5fJWXxcLVdGI:4xtJCUOblw7BJYXHpQtXRchrEchqebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087451, "uuid": "64ad0a00-d50f-4b05-8725-5fb1573be838", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087451, "uuid": "3a43df2f-0d3b-421a-9a88-03dcf3e27d43", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed1580c5-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087453, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087453, "uuid": "94b2cce2-f83f-4eb6-b180-c061ee111aa1", "comment": "Malware payload", "value": "ed3caaaa70767fc15db78e07a882486d", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087453, "uuid": "236c1c63-62db-473b-8e83-3f642fddc573", "comment": "Malware payload", "value": "c945384a1d3de8d076689502cf66a09947f729fd558e9bebf17ce5e80e598842", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087453, "uuid": "adddb1ba-d07f-4d11-ba0d-d00c88e0c6b9", "value": "T1D3E022E88F15FE23C0700537C10AF3200F2FB90A6A51B2E202E0A4D1F8701893E362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087453, "uuid": "26fb5e6a-7a68-41ae-b184-5f6ead1c4e58", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXJQknFyC6w5fJWXpQknHGPer:4xtJCUOblw7BJYXHpQtXJQkFaQkUebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087453, "uuid": "66848ec8-5059-4939-aeef-041aa3843dec", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087453, "uuid": "23e0a618-d207-4e33-b763-41c83e405f28", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ede85623-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087454, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087454, "uuid": "1cdbec5e-8bd7-4e71-b10e-9b0b0debe2aa", "comment": "Malware payload", "value": "8665c678c82baccefb5363d071c0db48", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087454, "uuid": "906a08b8-4e06-4e57-ad0c-52f788e9d794", "comment": "Malware payload", "value": "4aa73c674b79e4d1388c73a71d47d0fdb8a4e228425eccff3e6755e8e963cf51", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087454, "uuid": "76a71b54-242b-490c-a9b4-6cbc7ee1673f", "value": "T176E023D54F15FE23D0700435C11EF7100F15F9051D41B1E100D050E1D4B01867E762", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087454, "uuid": "51d79ccb-5d3d-400b-8ba0-757513684816", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXVH5FFyC6w5fJWX1H3GPebRJ:4xtJCUOblw7BJYXHpQtXVH1AHEebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087454, "uuid": "e5322e46-de93-4d72-b629-56dcf2dc28d0", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087454, "uuid": "1c37c5c8-4546-4bdf-95a4-169d2c8240c3", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee29ca57-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087455, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087455, "uuid": "73654479-bc12-43a8-a83e-6cea417d826a", "comment": "Malware payload", "value": "67eaa7d3e630c8cbea7b620109cf51a1", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087455, "uuid": "fd4e779f-426a-4b4d-af12-c9898eb12169", "comment": "Malware payload", "value": "aba16926ab7956000d92917c7e879b800dae8059eef1f064314e68a4df762417", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087455, "uuid": "ea39355c-c9b0-4e7b-878a-10c626c3ebe6", "value": "T1DFE023D45F15FE33D0701437C206F3104F6779050541B1E100D050D1F4B22853F363", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087455, "uuid": "742543cf-5fb9-4ccf-a6e8-a3d9c9618006", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXIc43FyC6w5fJWXoc43GPebv:4xtJCUOblw7BJYXHpQtXi1jEebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087455, "uuid": "680b6a99-0043-4ae9-973c-7cfdf2dfae68", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087455, "uuid": "c7e41178-5fd4-4ca8-90a6-eac34946db2d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f836e484-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087472, "uuid": "409db4d0-dea5-4a45-835e-ac3a7c5167f2", "comment": "Malware payload", "value": "ffa20ea265ec9cf2e5dd8f5f1ea6414e", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087472, "uuid": "86b01a1e-a4aa-4474-8c5d-f7677eb0cbbe", "comment": "Malware payload", "value": "e83632f3b17430486f42372712135e76e16a181defef471429809e7d889672f3", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087472, "uuid": "2ad1ec0d-2071-403a-919b-dd0d0e4f5b33", "value": "T13841B5EFE4169334CE43467401AA6C9DDF12E63B55029050FE8C4D45BB149B6F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087472, "uuid": "61be5492-3b93-421b-a3f9-d3403c050af8", "value": "48:w22kMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:wkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087472, "uuid": "4abb1064-ee32-4cf8-ba49-12a1e6028274", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087472, "uuid": "5dc6df15-f787-4413-8d38-06de16561705", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fab0fc4f-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087476, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087476, "uuid": "2a05bce0-a392-488a-83ec-4548ed0304a8", "comment": "Malware payload", "value": "fd3d27513b6322948632f44c3cf0ba1c", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087476, "uuid": "26a5dbf0-203e-4866-8deb-fb6ec5b05c32", "comment": "Malware payload", "value": "9be28fb6301ccf568285924674a5d7c3b5f9eb289e9411733fc44fbdaccdf138", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087476, "uuid": "859f2a11-a3b9-404f-a594-bec32e6ca966", "value": "T11441D5EFE4169334CE43823401AA6C9DDF22F63B55029050FA8C4901BB149B5F3A03", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087476, "uuid": "c5de1808-11b2-467e-a3a5-62dabcf4b12b", "value": "48:w2ZIkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:UkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087476, "uuid": "3fd695e1-ccce-4ea1-905e-ab71f02c2af3", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087476, "uuid": "0093a733-4da3-4251-aae4-58304afb9c14", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbb92657-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087478, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087478, "uuid": "3a9a3fa4-c1d0-4510-b648-9495b0e9b94d", "comment": "Malware payload", "value": "07d60ec03130b3d4a303db5ded373e5b", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087478, "uuid": "8ef0e327-c64b-457c-9198-d1282986e83b", "comment": "Malware payload", "value": "939ab6aaf7217a8fa7842229a10e9471cb76f47d3a194bc19e5bf6f24cda8688", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087478, "uuid": "605fad72-7e88-41be-a493-96d65a10fad9", "value": "T1B5E023D4CF56FFA5C0714435C156F3100F1579454540B1E300D150D1D4701C57EB62", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087478, "uuid": "2ee21e4c-e81e-460b-b63a-2879ff201133", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXxpnFyC6w5fJWXRpnHGPebRJ:4xtJCUOblw7BJYXHpQtXNjebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087478, "uuid": "ab31e2cc-ecb3-4ffa-9fd2-7c5e76f373d6", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087478, "uuid": "270462d9-8307-4064-8bd2-b245c538f26a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fdab4b31-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087481, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087481, "uuid": "c3285881-d2e0-47c5-b21e-ccff5d9e665b", "comment": "Malware payload", "value": "fd38d472139165ed17a246f121697eb0", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087481, "uuid": "941defd3-5e17-4975-8ca0-62bb62aa041f", "comment": "Malware payload", "value": "eede6875e393c607a46fef570797c3baeeaf8bf099751556410058f3704b20fb", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087481, "uuid": "0b257042-1a6a-48f7-b3c3-e145ea7e292c", "value": "T159C27D617E98F0B457CF370776F4F8964938BB76A09D6908A0DE50C227D8EE0E62C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087481, "uuid": "851b09ac-516d-4597-8ddb-926d31872585", "value": "384:aF3C/2/TuYLnArvkA8e/VTEU0FV8K1J3VevWWCYc2cogCt0S:ag/2ZeEe/VTrA8Kr9Wg2kC1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087481, "uuid": "49901041-2a2a-478a-a738-79d16b5d9752", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087481, "uuid": "b0211a09-933d-4118-9de8-60fcff3db051", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff74849a-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087484, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087484, "uuid": "de652129-f8c5-4aba-9808-a123b7d735ca", "comment": "Malware payload", "value": "e43fa0017f53fc6fe99cec520cd1c25e", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087484, "uuid": "e3e3d134-bafc-4230-9466-b21f505d6951", "comment": "Malware payload", "value": "518cdcedc83fc9d337cd07444139e540a1968503b5e2ee72354565c4d179cd2d", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087484, "uuid": "4a5437d2-92ff-4eb7-bf31-1c58aba567f6", "value": "T16D41B5EFE4169334CE43867401AA6C9DDF22E63B55029050FA8C4945BF109B5F3A53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087484, "uuid": "47c908b2-629f-4f19-9b94-ea1da0f2420d", "value": "48:w20DkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:8kUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087484, "uuid": "30153f07-6206-45e4-ba27-db97c371c6bf", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087484, "uuid": "555d4e38-bee5-4911-96d5-297578c862ca", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff815b13-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087484, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087484, "uuid": "73b21eae-1ed1-4577-9529-b011d9345c32", "comment": "Malware payload", "value": "c26b4d94e01fcb14c3d7e67e06f66fca", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087484, "uuid": "f4e52483-7c7a-4322-afde-905e92890a87", "comment": "Malware payload", "value": "c7e3d66baddc5aa653d5511e47d513291de06f530b25748f11243986fcfc13e7", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087484, "uuid": "a9d32f4b-c8da-4c62-846e-67dd21204e80", "value": "T1AE41B5EFE4169334CE43867401AA6C9DDF12F63B55029050FA8C4945BB149B6F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087484, "uuid": "937042b3-3dfa-4ffe-b304-365dba05d8b7", "value": "48:w2WkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:okUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087484, "uuid": "845bdd80-b6b5-4044-89d4-68551d02c1e5", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087484, "uuid": "05c04d8d-3425-4c67-acf4-21be2181b9c5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "017fd71f-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087487, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087487, "uuid": "85b6797e-aad9-4417-8aa3-522d21b6f746", "comment": "Malware payload", "value": "3a53b894d61259b9b0617b8defd2f514", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087487, "uuid": "df386795-1e89-4ff6-8be5-4caf9cc41b8c", "comment": "Malware payload", "value": "9db73e2719bf1039f9897cf5338fc92910608ed6f1b83d7608ebbe5b1acee253", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087487, "uuid": "9b860844-55f7-4705-9a77-a112f91af687", "value": "T1E541B5EFE4169734CE43867401AA6C9DDF62E63B55029090FA8C4945BB109B5F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087487, "uuid": "0afd21cb-8e91-48f7-b839-8fcf45a07bd2", "value": "48:w2ukMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:okUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087487, "uuid": "0e7d899c-9016-4f89-a653-55f0b4cdbc91", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087487, "uuid": "3d7e4aae-2f01-4fb4-aeea-be1184923858", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02565388-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087489, "uuid": "8f83d71b-5da0-47c1-aa8e-dc820c41652f", "comment": "Malware payload", "value": "e7ce423c9c49e1617fe22a2cfddae512", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087489, "uuid": "dcd87b54-555d-4487-981c-ef6b62b3a363", "comment": "Malware payload", "value": "14e7e86f5a6aa3d9819d6d28b31b8e410928247c0ccdeb70ad0748292d0837d5", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087489, "uuid": "6967b468-582c-4c49-97ea-1f4a2c2a3b92", "value": "T1EAC27E61BEA4F17867CF371B77F4F8968538AB72A08D650CA1DA44C127D8AE0F63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087489, "uuid": "3b0fd762-cccb-4e18-92c9-b1be54d548cb", "value": "384:W93CZg/UmXopJgSJ8V+dS5IONvvyefQGkRSF4cYCdsDdD:WYMX1Q8YWJyef1F4cYnDdD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087489, "uuid": "011d1d0f-a2c9-4120-9b47-2c3a43fe63d6", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087489, "uuid": "e1dcc5a4-33fe-472e-bb75-08d146de243b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02f53cad-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087490, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087490, "uuid": "c657ee56-77a5-4ed4-a0c5-c252e123fedd", "comment": "Malware payload", "value": "97382169a9f48999568cfa69f2ebbe70", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087490, "uuid": "80d2fe01-eed2-418c-a76c-6929ca367885", "comment": "Malware payload", "value": "3090da96b241ee4bf335870e87042fb7d456176d17af0017482f318dc4ae318d", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087490, "uuid": "bfd956b2-d4be-4707-91b4-1a61e261fb6a", "value": "T156E023D44F19FE21C0740535C216F3501F1579457542F1E101D0D0D5F4702853E363", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087490, "uuid": "7c9db51a-0e50-4320-b177-86f93df3c12f", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXPZVPhFyC6w5fJWXvZVBTHGI:4xtJCUOblw7BJYXHpQtXTTsQebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087490, "uuid": "7818f42b-f25a-4333-bd70-a13e4e9549bc", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087490, "uuid": "0c1f66da-c0ac-4caf-8a7e-575001601727", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "061f9d42-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087495, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087495, "uuid": "1403b69d-8bfb-4cfb-9649-6096f98b5c34", "comment": "Malware payload", "value": "497d155d7e9c7c4e3f72ec19de6c8dba", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087495, "uuid": "4437f8c5-fadc-4288-8562-a42da3e95843", "comment": "Malware payload", "value": "1f6aeff47e03253d7c37e27b86507cf15d3e117e96a785bf7bd576a530288e89", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087495, "uuid": "0ec12a59-36e9-4aa1-9faa-21189806bce9", "value": "T1FDC27BA2BEA4F0B867CF370776F4F8925538A7B6A04D690C61EA54C113DDED0A52C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087495, "uuid": "d845c15f-c039-4543-8749-f4baedfc7be1", "value": "384:T3Cfa4TcPqkRIIJb3Kn3p2wIlMAWv+8adnCRvnpX76:Gfhmb3G3p2HlMAWv+8inC1c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087495, "uuid": "2a37a8a5-a53b-4be0-bf8e-aa2072fe87b0", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087495, "uuid": "db51f048-291c-4e7f-91d8-a89c34239d75", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "086a4eed-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087499, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087499, "uuid": "727f1515-e1ba-491b-b105-33bb99fa8093", "comment": "Malware payload", "value": "c2d85a304855f2bef8253a6411e5b603", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087499, "uuid": "f1f912a1-50e9-4719-8b66-9267472caea7", "comment": "Malware payload", "value": "da21951dc0ae06c635b8260bebb575c8357f32e40cc79ff6e3fab441c3351ed3", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087499, "uuid": "0a05efc7-b61f-4d84-87e0-20581afa482b", "value": "T15E41B5EFE4169338CE43467401BA6C9DDF12E63B55029050FA8C4945BB109B5F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087499, "uuid": "71b1263d-2973-48d8-8f27-2b0dd824db2d", "value": "48:w2oHkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:iHkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087499, "uuid": "b58366e8-68ec-4e63-a1ec-139b69152513", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087499, "uuid": "2278934c-4f74-4a4f-9c04-0a425c26a7a8", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "092ceaac-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087500, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087500, "uuid": "6d2cf981-d6b7-4a7e-b3f5-981b9af06ead", "comment": "Malware payload", "value": "436fa4a4f218cf748a244cb6365a1eed", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087500, "uuid": "57fb2d0d-a79e-4c81-918e-ec9d6a3d70a1", "comment": "Malware payload", "value": "81301242d1f44b472e6c44060eecf0ef545740a4c23e1b6c9d0045a43ff58412", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087500, "uuid": "2a39df40-387b-4a41-8747-0d77ef27f013", "value": "T1B141B4EFE4169338CE43867401AA6C9DDF12E63B6502A060FA8C4945BB109B5F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087500, "uuid": "41c2b957-c0d2-476b-b75d-335bc743ed20", "value": "48:w22kMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:wkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087500, "uuid": "5d540e88-e965-49a9-b142-c0bfd69a7078", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087500, "uuid": "45f6fff9-5e42-4fe5-afc7-507ff2bf305f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d885bf2-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087507, "uuid": "16726da6-e11b-4eb9-8914-4d8f80618b44", "comment": "Malware payload", "value": "4057a9770560edaf2a236567ccb14b8a", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087507, "uuid": "32e0f91e-1023-470d-874a-94c23c23f791", "comment": "Malware payload", "value": "47f148b05eac4a9c1002a2e50133f290168259ead850c17e614b0422d2492aab", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087507, "uuid": "38141d13-ce80-4800-8900-9c33db52c46a", "value": "T19DE023D44F26FE21C0700435C106F3700F2579050580B1F100D170D9D4711C57E366", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087507, "uuid": "9d7b5a6d-b24a-4d56-9a79-9dcefe3e502e", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXzXL3FyC6w5fJWXTXL3GPebv:4xtJCUOblw7BJYXHpQtX7RwwebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087507, "uuid": "dd89f9ec-8a6a-4d71-93cd-518bdb5b1bc2", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087507, "uuid": "788e5018-e5ee-4609-adf1-667e6bd02770", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "107e7b80-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087512, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087512, "uuid": "dbf8c3eb-9f7f-4fcd-be0d-2c90da15c59b", "comment": "Malware payload", "value": "71e29dfcf58207877dcdf41065ea5257", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087512, "uuid": "46e0f1e5-e0ae-4b8b-bb62-795a4e72a7f2", "comment": "Malware payload", "value": "63212760c0ca603a16fae1cca6aa950a3c62e412c9b00312010df8c99cf881c0", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087512, "uuid": "d7a8f47e-9bac-4050-aa6d-ab9f18611da5", "value": "T13541B5EFE4169334CE93867401AA6C9DDF12E63B5502A060FE9C4946BB109B5F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087512, "uuid": "05cc8718-edaf-41fb-8003-6e470c6d573b", "value": "48:w2ekMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:YkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087512, "uuid": "2353ab14-079a-4b70-bb1d-7b2163582831", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087512, "uuid": "06a537d4-6936-4886-8b9a-403cc74a0a05", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11148e2f-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087513, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087513, "uuid": "88b04b5b-a929-40bf-a8f6-71abc451bbb6", "comment": "Malware payload", "value": "27e87769a5bb2ae95c229290b22f9edb", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087513, "uuid": "e8e875cf-7726-4d1d-b6dc-537f53e98fa3", "comment": "Malware payload", "value": "5a351c6a9f2b18b41c29622de4041b89d26ef4b2211752a15e495ce12479380b", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087513, "uuid": "25de17cd-7ab4-4598-a0ca-ea3630674f10", "value": "T133C27D91BE94E0B457CF330777B4F9D145386BB2A08EA90CA1DE448257DCBE4E63C5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087513, "uuid": "01e43fe3-e1ac-4558-832b-ee3aa44e2c14", "value": "768:O19ZMRYJstMzlbcGjY1ze3arwhNfNjeLBP:OrZnZY1zqarWVNj0BP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087513, "uuid": "ffc25a1f-5239-49a4-8a16-dce8a44aa263", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087513, "uuid": "5f0c9049-d255-4823-8e51-fb1914548770", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "12cf96b9-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087516, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087516, "uuid": "1696bc82-63ae-45d6-831f-2551fabb0dde", "comment": "Malware payload", "value": "fa595274826a75a234617ab445bc2545", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087516, "uuid": "89a2475b-72be-4f19-a581-651f680d9f67", "comment": "Malware payload", "value": "f8204df96a8e9eb3c981a8ff9b11116eec3d0c5d714e455749a55cd76a567240", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087516, "uuid": "e774a973-42f4-43c2-ba15-a07122659c13", "value": "T1DEE0A7E48E96FF25C17104368126E7105F1579054944B1E100D05491E4F018D3E663", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087516, "uuid": "c4aee6ed-8f86-44c1-ba95-5575d3f0d0a0", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWX9U1rFFyC6w5fJWXdU1dGPer:4xtJCUOblw7BJYXHpQtXGr9qebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087516, "uuid": "f8d5155a-ccdf-4667-b24f-bf6f87f53c2b", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087516, "uuid": "f9d3b0e1-2e24-490f-8d24-a9a0b6225ab8", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13f80cf9-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087518, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087518, "uuid": "977e34a0-9f8e-4bdb-b32e-57c46e4f7889", "comment": "Malware payload", "value": "e5f5b56338a602efd873767675d0620f", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087518, "uuid": "dfe785e0-80cb-48ca-9cb8-c31dc307e441", "comment": "Malware payload", "value": "d3da854fa39ed8effe4463b200afcfc70389b259de1e859b7f376caeb757ff05", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087518, "uuid": "68615e40-ce13-4c62-a01b-d1807ea6f706", "value": "T128E023D45F15FE31D0B00435C206F3104F5579050540B1E100D055D1FC722853F363", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087518, "uuid": "86d6cea1-8db5-44ae-956f-49d0d8180189", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXMrFyC6w5fJWXsrGPebRJ:4xtJCUOblw7BJYXHpQtXsAebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087518, "uuid": "0f086a0b-f29e-42b1-a7c2-019c29f056c8", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087518, "uuid": "c4373793-c437-40aa-b806-aeb6ac09bbe3", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "140e24be-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087518, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087518, "uuid": "4f3c9ab6-10ad-4bec-a688-3d8dfdee1788", "comment": "Malware payload", "value": "4caad276e3b3181e3b1b6f86a2ad47c7", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087518, "uuid": "122d66ca-b84a-445a-9f67-32b1628b8f0c", "comment": "Malware payload", "value": "5a011813db8497a4db303c90cb5f1948fcf4fcdd8bbe16c0e029195e6734d4f2", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087518, "uuid": "6f32e3be-62a6-4631-a7c6-8a07f3614e58", "value": "T15141B5EFE4169334CE83467401AA6C9DDF12F63B55029050FA8C4945BB10AF6F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087518, "uuid": "233399df-650d-4861-b7ee-d30b18471c50", "value": "48:w2ukMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:AkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087518, "uuid": "2a207b85-385d-4dea-a8f0-3b30444f3da3", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087518, "uuid": "fa99a88b-1e67-4b7e-857d-9ae0543211d6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "156c2850-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087521, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087521, "uuid": "e85dc0ba-3d30-4f92-80f7-45f0334cbf93", "comment": "Malware payload", "value": "56575b08d941195938e3eeecb2ce205a", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087521, "uuid": "54b42318-cc7c-41ed-ab21-3f116d7a429a", "comment": "Malware payload", "value": "1922b532ec102df0707bd8fda07798bec46f369f23b43e50e9cf3ab863c45624", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087521, "uuid": "024d1fc4-921c-494c-85a5-f41cf4e1a6bd", "value": "T1CDE022E8CF15FE22C0700436C20AF3200F1AB90B4A41B2E200E0A4D1F87118A3E362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087521, "uuid": "9eaa60d7-6498-44ea-a4e0-8a9021905d10", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXrahpFyC6w5fJWXLahlHGPer:4xtJCUOblw7BJYXHpQtX2hrBhqebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087521, "uuid": "03eadfd3-8f33-43ed-8396-8a51a37ecc25", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087521, "uuid": "ee27f1be-bae8-406e-9cc9-f081f92732ca", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "186afd86-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087526, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087526, "uuid": "52067a65-44e8-4bb5-9d81-29624adda837", "comment": "Malware payload", "value": "b2a8760a73d6ca542bd72d01099fd725", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087526, "uuid": "1defdf4b-a846-4914-b024-eeb79a31a774", "comment": "Malware payload", "value": "8052420b6f3bc9fc82b17377a2b82fb40e842a30fb0fc0119a1e78b836000cfc", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087526, "uuid": "c38d50ba-ffd9-4803-be9a-3c2844b4fa4a", "value": "T1D341B5EFE4169334CE53867401AA6C9DDF22E63B6902A050FA8C4D45BB109B5F3A53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087526, "uuid": "4b936b7d-2dfe-4068-9e2a-057797de1f7d", "value": "48:w2ekMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:okUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087526, "uuid": "db18f46d-0c4a-4ae8-8fbd-a6434fd4c334", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087526, "uuid": "f9d835a6-3f7e-40d7-80d9-1de4431e3dd3", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18a0caac-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087526, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087526, "uuid": "0a299802-81f8-4289-88e4-97f1154b362a", "comment": "Malware payload", "value": "e9643ccba09e1b72ff14af7dd808e645", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087526, "uuid": "c4ddddeb-9664-4c13-b8ca-26cc85ca7b62", "comment": "Malware payload", "value": "9549eed4a8392619689dc6001159af8591976fc556610494f4b462f7de0edd44", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087526, "uuid": "da906829-a12a-4cd6-b1b6-2b9f393dcd4e", "value": "T120E0A9E88E15EE26C0F00476810AF3200F1AAD0E0A49B2E200E0A295E87018A3E262", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087526, "uuid": "af0adf42-fc53-4b96-b043-d5dddef6d262", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXFpFyC6w5fJWXldGPebRJ:4xtJCUOblw7BJYXHpQtXl3ebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087526, "uuid": "a23b1b55-c426-4d81-9ce0-87cec097ed79", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087526, "uuid": "ce6a457f-225c-43ba-b10a-37b07175803f", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1abce5e3-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087530, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087530, "uuid": "6bab4278-5df1-4bad-9377-87ea2390d351", "comment": "Malware payload", "value": "acdd2c6c1c4e3c585efd247a8f87b2a3", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087530, "uuid": "4cb930fa-b458-44e6-b2f5-4e03646b3e68", "comment": "Malware payload", "value": "fd5d9992832f9ca117dcd7ac037483bbd3a2545639f9df8c5259e7acf7bae589", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087530, "uuid": "423a41fd-5fd6-4b5a-aca2-6099bbd9b214", "value": "T18A41B5EFE5169334CE43867401AA6C9DDF22E63B5502A050FA8C4D45BB149B6F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087530, "uuid": "88f682cb-e948-4eca-9784-e0bd5237685b", "value": "48:w20LkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:WLkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087530, "uuid": "e71706e7-7a69-4a12-bf06-adc354fe2711", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087530, "uuid": "20cee5c7-2193-4f2f-99f2-975c5f95156f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c0f01fd-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087532, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087532, "uuid": "a33ab763-a3b1-46c7-90cd-61447bc5a103", "comment": "Malware payload", "value": "afcdc1db5067171c06464b4deaa21b2b", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087532, "uuid": "a1bdb396-8b5d-4f9f-a8bc-54343b14fdfd", "comment": "Malware payload", "value": "88c7ca7f87c51cb10884ce5d620bfcdb9acff2839b61ca3ebf60d304fb786431", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087532, "uuid": "fab4cd0a-17e5-49ce-b4d1-4aafef7c9cfa", "value": "T1FEE023D44F16FE21C0700437C116F3104F1579270744F1E300D150D1D4B01863E7E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087532, "uuid": "74ba3e72-b521-4d6f-a4d1-a654fdbcc70b", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWX6h1pFFyC6w5fJWXah1HGPer:4xtJCUOblw7BJYXHpQtXS2ebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087532, "uuid": "30add040-e8dd-4e7f-9a27-bc267e2a2682", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087532, "uuid": "44a3fe9b-74e9-4a23-8ac5-576935d62628", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1cdf0837-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087533, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087533, "uuid": "5a20e9a9-dc86-4259-9453-8d14bf313c5a", "comment": "Malware payload", "value": "c9485d0c593d52191d6bd46873bc3b69", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087533, "uuid": "8b7c8bb1-6ef6-4f63-bfaa-1b6d83a735cc", "comment": "Malware payload", "value": "c85b2d6108d8f2beff8fab361adbd1ea7c082d708246604da021bac944afaae7", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087533, "uuid": "b2681d28-f7d4-4752-94d7-5eff87ff552c", "value": "T1EC41D5EFE4169334CE43863401AA6C9DDF22E63B55029050FA8C4941BB14AB1F3A03", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087533, "uuid": "389d611e-d870-4aa3-a1e1-12116f1bf0f2", "value": "48:w25okMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:/okUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087533, "uuid": "86cfe3b1-7a7f-44b2-a4af-cf7469f20e8f", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087533, "uuid": "577814c0-05a4-4a03-b2fc-514369f83e77", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21d01cfc-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087541, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087541, "uuid": "ab139b1b-e0e4-4e37-a4d0-d4808bb6c6cd", "comment": "Malware payload", "value": "c45ed778fe32d0a790935d023d988f6c", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087541, "uuid": "1b6a69b1-7a74-4de2-9e31-282359d5f850", "comment": "Malware payload", "value": "0e3b925a28f4ea351d65619a778c36531b4a89caaeb9c2301568ef7da36aa39c", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087541, "uuid": "4a8da36e-82ac-48a5-a6e1-6a9cd681ff25", "value": "T13C41B5EFE4169734CE83867401AA6C9DDF12E63B5502A050FA9C4D45BB109B6F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087541, "uuid": "d37cfae0-ebd0-4d1c-99f6-56c7ef7f0fa3", "value": "48:w2KkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:UkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087541, "uuid": "a8a2d9b5-54d4-49d2-b0bb-1767aa498e18", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087541, "uuid": "961e7633-b1aa-46ad-a1bd-c8b35ed17e8c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "230e9b62-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087544, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087544, "uuid": "5570957e-ac05-4a7d-9e38-3030ddf5a40f", "comment": "Malware payload", "value": "7bd6dd21ebbaa44d062b59b782d26722", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087544, "uuid": "e3f74a1c-1550-49cb-95e7-e9e57adcd21f", "comment": "Malware payload", "value": "9a9ebebb19eaa4777ebf22957be16675e49f7cd0f85e18acb9911322a47611f0", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087544, "uuid": "aa61fbe4-814e-41b8-9f30-d8c20e16030c", "value": "T1D7E023D4CF16FE21C0700535C206F3100F15F9157742B3E100D450E2D4B11C53E362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087544, "uuid": "a1dfc931-523e-4de8-a7ec-e0fa1ba1b5df", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXXYhB7FyC6w5fJWX3YhBDHGI:4xtJCUOblw7BJYXHpQtXgcebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087544, "uuid": "49558e72-f822-4100-bd88-255e2feda478", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087544, "uuid": "2d93b414-5804-4b52-8534-1ca5ad8282c1", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "279e8601-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087551, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087551, "uuid": "92b9fe94-bbb0-4134-9481-00e01d83f3aa", "comment": "Malware payload", "value": "a28fd8dbe344dbe73387eae3534db468", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087551, "uuid": "9d9f66de-c445-43cb-9da5-2402d63b14ae", "comment": "Malware payload", "value": "68850580ad61484601172ea7f64a2b5e69d3896c8cf77448ef24a9178bac0da9", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087551, "uuid": "77e611d1-537a-4482-8cb8-50f021595856", "value": "T16BE023D44F16FE61C0700437C206F3100F257D050594B1E101D354D1FC70185BE366", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087551, "uuid": "7d9bcdbe-0e63-497b-9c5d-5dfae9ce0bda", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXCXnFyC6w5fJWXiXHGPebRJ:4xtJCUOblw7BJYXHpQtX0EebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087551, "uuid": "7c102bda-1142-4164-a5b0-59b7169c8dd1", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087551, "uuid": "27842828-96e1-4c7a-9b29-d6a220d750da", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "298eb075-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087554, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087554, "uuid": "dcd4dc43-e857-4f1c-ab79-6ad5a6c43d10", "comment": "Malware payload", "value": "f8f4408d4c56245befeefb346ed3a1cc", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087554, "uuid": "1f12c412-cc3e-45e9-9b2a-c531bf752b9d", "comment": "Malware payload", "value": "999a384118f220f932ff9d6d6e5bda415c5590df2ce9ce4c2f8b84e2866d3908", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087554, "uuid": "3a3f9134-fe31-40f6-8add-d4e5127c7e52", "value": "T1ADE0A7EC4F16EE21C1F004358116F7100F19B9050E40B1E100D05091D4F01893E266", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087554, "uuid": "00e8cb54-a1c6-4fcf-9bf4-118d89d714d8", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXXdTLVrFFyC6w5fJWX3dTLV7:4xtJCUOblw7BJYXHpQtXXdTR8dTwebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087554, "uuid": "5aa44bc8-96d6-41e4-a239-e90cec4c3b14", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087554, "uuid": "7a06e6a9-cf88-4886-abb9-322ab74c8112", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ccdc1d8-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087560, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087560, "uuid": "fb42c6a0-63d9-4169-922b-888174f7d8df", "comment": "Malware payload", "value": "c0377ced657cf96e5cb591ea556f7576", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087560, "uuid": "dbf44d98-de3a-4b87-806e-eac6d68ea38c", "comment": "Malware payload", "value": "cfed6e5e3fd640305c71f57f7f6fcc15d235f9995bdd91abd9aac26f4da7628c", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087560, "uuid": "4169d3b0-14cc-4298-85c7-04df718bf2f7", "value": "T1CD41D5EFE4169334CE43863401AA6C9DDF22E63B55029090FA8C4901BF149B1F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087560, "uuid": "a578ac26-2f34-49f7-833c-1e4fccde1588", "value": "48:w2486kMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:S86kUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087560, "uuid": "5fb4ce15-fa7a-4497-b484-e603c06e1843", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087560, "uuid": "2dfb8c9d-6aae-4f2d-9a30-d605b73b03a5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2dcfe7c5-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087562, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087562, "uuid": "cabbf587-e743-4375-abb9-44b89e78a83a", "comment": "Malware payload", "value": "87e91f0098aa4e8a86519b38a281fc8e", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087562, "uuid": "fd5fc258-0e05-4781-a743-1104e0aa8cd8", "comment": "Malware payload", "value": "facc1e4ad6c3abbc7a3cbcfec5f16f4dd47359e921f20f10612e30e58d607e95", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087562, "uuid": "ea5052d4-d7c6-4f0c-aeea-15c8b86fd37b", "value": "T18241B5EFE4169738CE43867401AA6C9DDF12E63B65029050FA8C4D46BB149B6F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087562, "uuid": "1fccfd63-3a09-4945-97cd-3bd774d707e2", "value": "48:w2KkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:0kUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087562, "uuid": "ebb5d996-d859-405a-b429-aa5e3fd1b70d", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087562, "uuid": "f932c9ed-d2c1-43d3-b76e-75ded3b7f958", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e4e1645-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087562, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087562, "uuid": "d8089773-c3e3-484b-8ca9-d7dc6bc80607", "comment": "Malware payload", "value": "0bab12c06e771ed0aaaa5717ce15ccc3", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087562, "uuid": "591d642a-0eae-4961-8e1e-0d5511298d8d", "comment": "Malware payload", "value": "93ac40bf5a1a5ee56bcca3a35c01b37f772e1eee626e9caf0dd61c09017820d0", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087562, "uuid": "445d0fd2-a623-4a65-8a53-610749c21dbe", "value": "T14BE0A9E8AE15BE22C2708436C10BF3200F1AA91A0A40B6E200E0A0D2E8711893E262", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087562, "uuid": "331a2600-f859-4c00-9293-2f671ddc50c8", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXTXXZhFyC6w5fJWXzXXXLGPA:4xtJCUOblw7BJYXHpQtXThWAebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087562, "uuid": "98541746-9f7e-44e0-b7d7-0aa4bc8d8778", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087562, "uuid": "cb87ddaa-4026-4fad-9f0e-b2d52e31edfc", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ee19dfe-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087563, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087563, "uuid": "c0f94bff-7710-49ef-8c11-c089ee38d3b3", "comment": "Malware payload", "value": "795e2e1c1c63c9a0e16fc144b3a3ea99", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087563, "uuid": "3fae6de8-92a0-4cb6-80aa-60ee4e4c8829", "comment": "Malware payload", "value": "bbd2c00433670e1a666a6e706906be595a8174c565567ddb0313cebb6de97442", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087563, "uuid": "4ea255f9-f730-42df-8134-b89703e6e380", "value": "T1A0E023D4CF15FE21D0700477C20FF3100F157A151540B1E100D450D1F5701C53E363", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087563, "uuid": "14d7e5c0-3068-4016-ad11-9b7440208fde", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWX8B7FyC6w5fJWXcBDHGPebRJ:4xtJCUOblw7BJYXHpQtXueebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087563, "uuid": "8eabcce8-76fe-4a2f-9f5f-d121c6be5a4c", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087563, "uuid": "f95bd87c-b6a2-4969-8891-7deca9779441", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f46954f-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087564, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087564, "uuid": "3238d817-246c-4f74-bb20-8969874eed1b", "comment": "Malware payload", "value": "fcc12cddfeb7c8f053e788ef68e2222c", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087564, "uuid": "98529072-96f4-4c03-80cc-ac57747fb909", "comment": "Malware payload", "value": "cbe9050ee883915371e129bd644db6b4b40bcf15e0d678b1ca97d6f456425cfb", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087564, "uuid": "daf48bca-6114-4d35-a157-7e8a58b29b1e", "value": "T1FA41B5EFE4169334CE43867401AA6C9DDF22E63B65029090FA8C4D46BB109B5F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087564, "uuid": "f800f004-b313-48a6-acd2-e9c6e8fb2f3c", "value": "48:w2GkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:gkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087564, "uuid": "b064fe24-0035-4b33-9819-81f6e1f2b807", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087564, "uuid": "db84777c-f296-4ccb-9929-9d0187df527b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3247afa1-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087569, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087569, "uuid": "c79279fd-a626-4e74-b966-09e81610e285", "comment": "Malware payload", "value": "3d7bd413a0c4370e2525c73cc5b3f8bb", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087569, "uuid": "9d991d72-a01f-4019-9c56-cce480aa129f", "comment": "Malware payload", "value": "59b2293ada9f582af6497c8ed07f907ce7a4d47dd56e4110105e51eadd32cfe7", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087569, "uuid": "2c036db1-25ff-4703-a49f-64eb4081b7ef", "value": "T1B4E0A7D48E15AE22D0B048768106E3140F27A9190580B1E100F45191D47118A3E262", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087569, "uuid": "d619d38f-e439-472b-aa22-2fb329436eb2", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXUltFFyC6w5fJWX0lbGPebRJ:4xtJCUOblw7BJYXHpQtXCiebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087569, "uuid": "e8ef6080-add6-4cba-8398-0e397957ea5d", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087569, "uuid": "44f81a8f-d9ed-49cc-a40f-6c8dc09c233e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "32ae8d1c-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087570, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087570, "uuid": "9be6a3c9-a0c1-4727-b3a6-0a5d48e5a40e", "comment": "Malware payload", "value": "0600722460ce469b0a115065cfd2b84e", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087570, "uuid": "7cc95220-57e9-4463-aba2-e3a35a043d8b", "comment": "Malware payload", "value": "5731a4369fc3416fec41a8e65b6a07947a83650979dacd74aad542e4b9fb1bda", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087570, "uuid": "2f9703aa-c4af-476f-975c-1291d13ee56e", "value": "T1F4E023D4CF66FF25C0700935C136F3100F1579050580B1E100D071D1D4701853E366", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087570, "uuid": "a65dd9d4-ccad-4ae7-a4af-e14209c95820", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXwRVhFyC6w5fJWXQRbTHGPer:4xtJCUOblw7BJYXHpQtXwDTLNQebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087570, "uuid": "61a1a517-fe27-42e1-8681-4ab31c78ed86", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087570, "uuid": "c1e19238-c92b-4464-ad36-502e0654018e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "355b6335-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087574, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087574, "uuid": "a15e1813-72cb-464b-83e2-57f56e86b21c", "comment": "Malware payload", "value": "28d3746ab5f1385020d5d2d65e27af53", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087574, "uuid": "990f75c3-d2d7-498c-8ea1-a04cd32e1008", "comment": "Malware payload", "value": "825f69c5e35dc1eb48e918b9c5a5c7376112b4748cce745c22decd41fd0f79f7", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087574, "uuid": "89801e86-fe5d-418a-a34a-36d11ef4b5ef", "value": "T170E022E88F15FE26C0700436C33BF3200F1AF91A0A43B2E200E0A0D5F8711893E7A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087574, "uuid": "d4c94350-d003-4e17-8188-be9a83cb6ea4", "value": "6:4xtJCUOblw7BJYXHpQtXKRcL1ZRcLEebRJ:83CUOBw7BJYJrRARj6RJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087574, "uuid": "7599626d-cfac-48ba-9d10-e945eb6ed70d", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087574, "uuid": "cfec7e1d-45a7-4541-8de9-07b8752bfeb4", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "358ac9b6-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087575, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087575, "uuid": "ca5bac31-78cd-40c5-9467-32eaf6986ce7", "comment": "Malware payload", "value": "f348c2909fe063399788121fe3f6213c", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087575, "uuid": "0b1c5da4-39e8-4a25-bd4b-789204ec005b", "comment": "Malware payload", "value": "acf0477d0ce0782f3068eb3c228f63b194bf91c00212aa2f30fb9a618909f98b", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087575, "uuid": "fa975be2-b744-4c36-b27e-bdc53150b844", "value": "T1CA41B4EFE4169338CE43867401AA6D9DDF12E63B6502A060FA8C4D45BB109B5F3A53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087575, "uuid": "53046511-8e98-4de3-8067-8843366021d2", "value": "48:w21EkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:ckUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087575, "uuid": "c7e4b17a-e906-48bd-8375-285f8593174d", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087575, "uuid": "d573188d-03cf-4f3a-a704-3de8be88f080", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "363a49bc-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087576, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087576, "uuid": "0d6286bc-fbbb-45ba-8471-86779a39549c", "comment": "Malware payload", "value": "a8f8d9553b668f9c832434fc00688e31", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087576, "uuid": "91588c53-1edc-44db-af8e-10278b6e4f1f", "comment": "Malware payload", "value": "ff8b9d806469e1fb712f17566cdf4c72d332b04e4dea32f8f8193bb81d7fee9f", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087576, "uuid": "c12138ab-82b7-498e-91b7-4dddda540aa8", "value": "T1EFE023DD4F2AFE31D0700535C106F3100F157A470580B1E100D054E1D47138D3F366", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087576, "uuid": "6a3bbe1b-e97f-4451-990e-a2a10c1fd91c", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXiVX7FyC6w5fJWXCVXbGPebv:4xtJCUOblw7BJYXHpQtXiVR3VwebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087576, "uuid": "da517c9f-e06d-4631-a6bb-eeec43836c99", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087576, "uuid": "acef56a6-6017-4501-956a-ad90df9e2615", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "36852672-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087576, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087576, "uuid": "a229a7a9-9fba-4b2a-ad3e-aa64a5c50972", "comment": "Malware payload", "value": "5b534b7e919b8634735e0292ccbcd217", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087576, "uuid": "57a06e60-b28e-45be-af7a-58946bd82906", "comment": "Malware payload", "value": "76dcda0310480a05ffda2d649c083041d75d3739062ca1c42df864c8b0a591a3", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087576, "uuid": "9ea489eb-61ae-47e5-9b58-64087deba273", "value": "T1F9E023D44F16FE31C1704435C116F3340F157A550544B1E100D054E1D47158D7E3A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087576, "uuid": "87719681-3d54-4d68-beaf-2502f60787d5", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXZ65FFyC6w5fJWX563GPebRJ:4xtJCUOblw7BJYXHpQtXqiebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087576, "uuid": "9689e748-c63a-429c-9763-b0826ff30beb", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087576, "uuid": "5139f482-f5b3-436e-8376-d65007951060", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "37359203-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087577, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087577, "uuid": "1ea1e15a-ffeb-44ab-9d99-5fe8cf442517", "comment": "Malware payload", "value": "73382970da80cae07da66e938c3fbd11", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087577, "uuid": "af097cde-cf15-4c56-97c1-e7f1c17c6556", "comment": "Malware payload", "value": "cd91a8ae0cd9f93f492b8a03c82167d5243a84f19778fcd44ecd0f604c2092b1", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087577, "uuid": "b178e4f1-37e5-4226-acf5-c33a7760fd12", "value": "T1B641D5EFE4169334CE53427501AA6C9DDF12E63B55029050FA8C4941BB10AB1F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087577, "uuid": "bb965c33-d0d2-42a8-9e4b-fe433cade683", "value": "48:w26kMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:0kUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087577, "uuid": "455b0546-1c15-4429-af0c-3a891cb53413", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087577, "uuid": "c365100b-9a0b-4ef6-9e76-a69b6a4f1aba", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38770dfe-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087580, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087580, "uuid": "00ae8d7b-29af-412c-93b9-2a7887aff6b2", "comment": "Malware payload", "value": "3b890dc19a4f88af44685ff816e6ccb9", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087580, "uuid": "5801df30-1749-448b-88a5-3bf442a3176b", "comment": "Malware payload", "value": "4c585b5a47681ae1ddb66154d79d5eaff36fdf5bd6c235185fa3364614d9299b", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087580, "uuid": "348092a8-c1b5-4ea0-a103-ce42fd6760b8", "value": "T1EC41B5EFE4169334CE53467401AA6C9DDF12E63B6502A050FA8C4D46BF109B5F3A17", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087580, "uuid": "8dba9733-90d4-4d1d-bbce-c7b9a0c193c9", "value": "48:w2ykMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:8kUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087580, "uuid": "6023746f-902c-4a7f-9ea1-99efa5c70f04", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087580, "uuid": "0e0d3769-627b-4ee6-9d30-5d45e6a56126", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "388a4e27-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087580, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087580, "uuid": "05b815cd-1dd2-474c-99c3-0f5cd26db366", "comment": "Malware payload", "value": "3a2c1e4ea697003e026a530475a31103", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087580, "uuid": "582a385b-26d1-488a-949a-0553066640cb", "comment": "Malware payload", "value": "7982032038e1eb54bb8f69a36913d943de6f5701eaf0564195f3ad02554f31aa", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087580, "uuid": "0b8b26c2-1bb4-450b-a6ec-822496943880", "value": "T1B7C27EA2BE98F17457CF3717B6F4F8964934BBB2A08DA50C60DE50C163DCBE0A6381", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087580, "uuid": "7392b05d-c7bc-41cb-807e-1e7a4cd5e74d", "value": "384:ki3ChTNKPVDSc5F+3q0sVA7sGhmx7/cwqYUy+CZRoFPCSK0:kRh8puXUAQJ7gYjLoF6SK0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087580, "uuid": "1da20bee-abf5-4653-b266-dcc67b8bd643", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087580, "uuid": "da8555cb-5a79-43a5-9c72-fab9646b2502", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38b5bf2f-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087580, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087580, "uuid": "b971010c-d527-4e9b-a5f2-3c1e2c476066", "comment": "Malware payload", "value": "61aa6b4f257146f33a1c14e054b8d934", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087580, "uuid": "e822ec19-17eb-4c4d-8c98-233ea525b5ee", "comment": "Malware payload", "value": "f205c247024d7cf48fe31f1342a02660752837bb61b08a564fc0ae084a026289", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087580, "uuid": "f7cb899f-1f0e-40d2-ac1a-257aeda63820", "value": "T17441D5EFE4169334CE43823401AA6C9DDF22E63B55029050FA9C4941BB109B2F3A43", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087580, "uuid": "1d2b69d5-ba2d-49ca-be4b-9b28637c6365", "value": "48:w2WkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:gkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087580, "uuid": "18592695-8d31-489f-a6cf-e8f053c4450d", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087580, "uuid": "f5ac953c-9129-4bf2-9bfd-46aa608774ec", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "391690ff-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087581, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087581, "uuid": "e1b3e5a7-9375-4ecc-b0e8-1faacd82539d", "comment": "Malware payload", "value": "795e45484606e52a3ad0eb258fa21aa1", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087581, "uuid": "e141eb65-e3b5-480b-9328-981862e6f600", "comment": "Malware payload", "value": "8e36ee70f8b417e6e24c5a428035759d2fa9252199b017b3acfd0ac1b59f9ca1", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087581, "uuid": "0a4f6ecc-79a5-4cc7-a625-24aa3fda2410", "value": "T17CE023D44F15FE21C1710537C10EF3300F5579051544B1E100D0D1D2FC701C63E362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087581, "uuid": "5d007b3c-c1eb-4bc1-91f5-5e5e1e6d39a1", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXKa7FyC6w5fJWXqabGPebRJ:4xtJCUOblw7BJYXHpQtXDBOgebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087581, "uuid": "980a1cb8-d583-449a-9c79-e7bc30b8edce", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087581, "uuid": "b119a209-48bf-4e5e-b70a-afaaf3ab69d7", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a3f3563-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087582, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087582, "uuid": "48ce4364-0d8a-46e1-9efd-5a7245ee11c0", "comment": "Malware payload", "value": "0c7adeb0d9121abdaca53e9c88c848bb", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087582, "uuid": "27f84dfe-11a9-4e57-ae15-433e864fa210", "comment": "Malware payload", "value": "c1221e81817ee1a63a19bf688a0d06cc5cdc9e882205cc7a5e3dc6a7058865ee", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087582, "uuid": "41f50ba1-59e1-45d8-8a3f-245a7c8d1c8a", "value": "T12EC27C61BEA5F1B867CF37077AF4F8A245386BB1908D690C60EA54C113D9FE0E63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087582, "uuid": "196591b9-8edb-4497-a4ae-c3d1e4aa25fb", "value": "384:W3CADNG53Ox+evYLA9bBsOjkkgt+LyQ9YsVE32Hhpd77OuV:Ni4YYL4FsWk3kyQ9Gg/1CuV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087582, "uuid": "858adeef-f11d-40bd-926e-72b3ad9988a5", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087582, "uuid": "4f01e8ad-47a0-4585-926a-5926a8c40563", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3da661da-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087588, "uuid": "310ae1b5-f232-49da-9aa7-8c2970924849", "comment": "Malware payload", "value": "5d17d28e8086439c57dadf95a6f20cef", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087588, "uuid": "db2d5e12-6e6f-460e-80bd-1d932c1045f3", "comment": "Malware payload", "value": "e0463e6639766ee6854c43a5882641e3ffb44f653aa0bda55f701896b1b2b50d", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087588, "uuid": "844042d1-f6b1-4908-a9db-05c1fb3220af", "value": "T17EE022E8EF15FE22C2700536C10AF3301F1ABD0B0A40B2E200E2A0D1F87118E3E36A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087588, "uuid": "74f5f17c-29d8-474c-b768-2ff82f3a12f4", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXrB7FyC6w5fJWXLBbGPebRJ:4xtJCUOblw7BJYXHpQtXrroqebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087588, "uuid": "756b11d2-9a25-45db-b19f-c45356629aa1", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087588, "uuid": "0d350b64-98ba-41c3-af84-7d432cd4a9aa", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e97c600-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087590, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087590, "uuid": "3b7fc45b-e746-4248-a65c-13de5dfe960b", "comment": "Malware payload", "value": "5922c2f24c60407cc52d55c687daca27", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087590, "uuid": "a49842b3-c84d-405e-97d1-00f4201e9dcc", "comment": "Malware payload", "value": "cc9bbeedfefd5bacb313b70000d587920b37be8f4d3e3ea91f018cca459f9ec4", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087590, "uuid": "500efd45-6837-437c-a0a7-a2273f7e3e14", "value": "T1FD41D5EFE4169338CE43423501AA6C9DDF22E63B55029050FA9C4901BB109B2F3A03", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087590, "uuid": "e71c189b-3957-49c8-b146-2d3aea8c42bf", "value": "48:w2RYdkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:fYdkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087590, "uuid": "4a64f0a0-f873-4103-a54b-a1285cb7358e", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087590, "uuid": "26e3e39b-f968-4c83-a0f4-d8c916cfdf83", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f236a22-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087591, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087591, "uuid": "e4eee514-ea80-46cf-8cb6-ae4389edabdc", "comment": "Malware payload", "value": "b7db0e96c90381e33795b9769ae6702e", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087591, "uuid": "6ff54116-ca81-4e12-bbfa-e0c825284efb", "comment": "Malware payload", "value": "0f19051336bf76bb3acb6c341504a16cf5a20f7dc5633fa688d803b5634546b7", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087591, "uuid": "7a649ea5-0cd5-40c9-9d69-6e08ca2b360d", "value": "T112E023D4CF15FE21C174043BC216F3100F15790F0546B1E100D0D4D1D47028E3E363", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087591, "uuid": "313a5dbd-3dfa-411e-85d3-fbedbdd6e3bb", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXx7FyC6w5fJWXRbGPebRJ:4xtJCUOblw7BJYXHpQtX7NebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087591, "uuid": "476a59b4-c845-4dd7-bd07-bb7455734671", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087591, "uuid": "dcac92b7-94e3-4101-87e6-f3627f6cd28c", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f24b23c-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087591, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087591, "uuid": "bb57429f-fe41-4dfc-b7ea-b5b814a25f39", "comment": "Malware payload", "value": "af6111933e30e3b29d92207f75bfa2a1", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087591, "uuid": "537bc514-144c-41ff-89c0-9de0d241ba68", "comment": "Malware payload", "value": "1fc26a8b15339b8b12d376698989a95bbd53174801f441d53287cfcc7e9949af", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087591, "uuid": "921c7cb5-a3ab-437c-82fd-cf3bb841d5bf", "value": "T1BD41B5EFE4169338CE43467401AA6C9DDF12E63B55029050FA8C4D45BB109B5F3A53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087591, "uuid": "428f4c80-4f62-445a-91f3-40bf77a6f217", "value": "48:w2ykMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:8kUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087591, "uuid": "e637ed41-6c2f-457a-b763-66dc8d3a03f5", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087591, "uuid": "9e277d5a-79e0-41fb-a40b-7d52d93a225b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3fa0b3b3-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087592, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087592, "uuid": "80e2bfd5-7aa6-439d-8bb8-24ea7c89a9e6", "comment": "Malware payload", "value": "70b2312d08be4cd023bffe6c6d541365", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087592, "uuid": "9ce46a18-08c1-4083-8961-1c69131ee3e3", "comment": "Malware payload", "value": "8144f4fb3432adc37427f42667c9ae2cb09b339eba31f95b308d4128ed76827e", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087592, "uuid": "a0e4b4bc-5ddb-40ec-bf2d-8fa3ea6e906e", "value": "T1D641B5EFE4169334CE43867401AA6C9DDF12E63B5902A050FA8C4D45BB10AB5F3A17", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087592, "uuid": "052a6927-c730-4203-83c2-46a270a3eddf", "value": "48:w2ykMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:kkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087592, "uuid": "b4fa7623-2568-4e5b-8cee-313486eae8c5", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087592, "uuid": "f4008f64-745d-44d0-8e12-0d7aa4ae4689", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "443fb994-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087599, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087599, "uuid": "eb9ca154-d5d1-4748-954d-b2b75c13a0dc", "comment": "Malware payload", "value": "21fabe5c584d19decf48b21a59bdf6a1", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087599, "uuid": "781f0f4a-813b-4b7c-8255-1c219e9696ca", "comment": "Malware payload", "value": "de69bb4349d15a810ca9179c855f6270ca764fab0697f1b3beb392cd608412a8", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087599, "uuid": "8e1573e4-8a55-4ede-9a17-3d39588588f4", "value": "T17EE023D44F15FE21C1700435C236F3100F2579070582B1E100D051D1D47018E3F363", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087599, "uuid": "db283bb6-5b3e-428d-8c82-9ca280db17b1", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXmVpFyC6w5fJWXGVdGPebRJ:4xtJCUOblw7BJYXHpQtXirhqebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087599, "uuid": "5708c78d-7b24-43e3-9e9b-a71733c1f6a3", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087599, "uuid": "ee70c347-8ad5-4bb0-99ca-2338972a2723", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4784fad5-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087605, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087605, "uuid": "78c4cfa4-8cc5-4749-94d5-2c8c03593784", "comment": "Malware payload", "value": "c4f23b5d93d907819598c2f0f288f7e6", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087605, "uuid": "9aa176a8-3116-4f6a-a965-719a0bfd1712", "comment": "Malware payload", "value": "d0a965bff2b74c3f383aa112dd264e7b5b6b5013186bb85e150a4e024ee8c2b1", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087605, "uuid": "570c2504-4b55-4f59-87fb-c5fdb458bbbc", "value": "T179C28D627D54F0B457CF37077BF4F8965438ABB2A09D690CA0EA448253DCEE0B63C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087605, "uuid": "765a26e6-cc54-466f-8245-30b3b36fa457", "value": "768:gmbFmOXRxH2y9AwNu8eyb1YoytoGQrZyqa:gmbsSxWeAO5GveXa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087605, "uuid": "afaf0fae-dded-48be-b562-826b3d1cc9e6", "value": 27193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087605, "uuid": "46d5209c-39a8-4bb5-ab7e-480e9c1a6995", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47faa178-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087606, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087606, "uuid": "16acc5dd-a73d-4083-8b79-51975bb5fb78", "comment": "Malware payload", "value": "2ad2ef57b4896bfa1acf70d5fc5a55ba", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087606, "uuid": "dc124248-20b0-42f7-a66b-c75936382183", "comment": "Malware payload", "value": "71d1a6ee443bad153e6dc7746598d78785dae729b07fe8079bd96b10999aa160", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087606, "uuid": "1efd6dde-b866-4046-9f92-d8081b499224", "value": "T13641B7EFE4169338CE43467401AA6C5DDF12E63F6502A050F98C4945BF149B5F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087606, "uuid": "bf3a6099-794a-4808-a81c-5d3eb29d30b6", "value": "48:w2KkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:skUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087606, "uuid": "de50b96a-889e-423f-9859-a7c4fa9d72f1", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087606, "uuid": "fe6fa9b4-178c-4f1e-b069-4ae904dcf54d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a5b1275-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087610, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087610, "uuid": "4a5b3c58-c62c-4724-9661-e74a2b976351", "comment": "Malware payload", "value": "21aef312aee5d3e1a18896f25565e32b", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087610, "uuid": "a6cbf457-ed74-4e46-9235-daf514b4c05b", "comment": "Malware payload", "value": "609dffa842aef584df4cffd5ed50a257edd4519ff15660730a1b4d07897e4856", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087610, "uuid": "e777c6be-5578-44de-a97f-782a0fa6b307", "value": "T18AE0A7D48E15AE21C57408368107E3100F1569090A46B1E100D05491D4722863E377", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087610, "uuid": "f91b47cb-82bd-4a7f-ad23-e532e90a8749", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXdFyC6w5fJWXxGPebRJ:4xtJCUOblw7BJYXHpQtXHRebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087610, "uuid": "cbbff4e9-61c9-4a1a-b6e9-818cfd7778b6", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087610, "uuid": "4f08461a-a90f-4f6c-9d6b-e8ac4f2e2ff5", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a9b4983-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087610, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087610, "uuid": "156e5ebf-b64c-4d65-ac42-6e90b21edf6f", "comment": "Malware payload", "value": "026787919892ab0d418b71196da6bbab", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087610, "uuid": "e2c4c9de-d14e-4b15-8f53-99ac6c288c56", "comment": "Malware payload", "value": "a3cedb343b4099eec0e414970f2b4cdb831b1382994ca0fd3c190a28931e6854", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087610, "uuid": "e7681050-03bc-42bd-bdf2-9a5bcd477c25", "value": "T1A741D5EFE4169338CE43423401AA6C9DDF22E63B65029060FA8C4901BB109B5F3A43", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087610, "uuid": "3e83f639-eb2e-4b89-9042-035b3f7e477f", "value": "48:w22kMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:wkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087610, "uuid": "3eeb66d3-ecb6-4d62-b1d5-84b1cda49455", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087610, "uuid": "b3e36c44-47fe-4c8d-8a17-0c89b137a337", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c672389-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087613, "uuid": "038df347-1515-4355-84d4-a8dbf77fa0ab", "comment": "Malware payload", "value": "3d8d255b32aa514221d90dea28c0e667", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087613, "uuid": "e46f5c9d-6d5a-4681-9925-bf9e5fa4cb64", "comment": "Malware payload", "value": "3ed74cfb2dc596e405fccc982a432e72abb5e9523455339571e3bed23b26a11b", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087613, "uuid": "5d33aaa2-bc8b-4772-a751-b56fc3639f41", "value": "T158E0A7D44E17AE62E2B008368106E3140F1569050940B1E100D095A1D4701893E262", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087613, "uuid": "d4c08846-63c6-4a68-984d-d22ecc509416", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXXQPTFFyC6w5fJWX3QBLGPer:4xtJCUOblw7BJYXHpQtXk8ebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087613, "uuid": "05234db6-3390-4700-ab07-417cd2de43b8", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087613, "uuid": "369b8eed-a26b-46a3-9a22-4d6a2aba579b", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c74598a-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087613, "uuid": "5978d8f6-36ce-4c69-80dd-784826a51784", "comment": "Malware payload", "value": "7252d5bef71d17ddeb7babf6fb33734d", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087613, "uuid": "940faf94-a03d-40d5-b6a6-e5bfe9ffffa8", "comment": "Malware payload", "value": "0677caa25820fa8ecc567efcf01799c14dddd616480cfe4f04d876d181355fc5", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087613, "uuid": "8a087c0f-fb95-4155-833f-9b63f8082949", "value": "T10FE023D54F25FE21D4700439C106F7100F1579171D41B1E100D055D5D5B21863E362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087613, "uuid": "63dbdc59-e1bd-4066-be76-2043a5ffb99c", "value": "3:4xtllvptkldQ3kNP9Kklw7BJizl//Lr1UYrll8wWXqQH5FFyC6w5fJWXKQH3GPer:4xtJCUOblw7BJYXHpQtXqWt1ebRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087613, "uuid": "b9e0ef00-0d88-4291-a410-ba6b03fe5d82", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087613, "uuid": "608aeda8-9fdb-4365-8fc2-a31a43ee9d77", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d6fb37c-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087615, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087615, "uuid": "601d3c8a-c933-4bed-983b-3498320d8075", "comment": "Malware payload", "value": "9762d3fc44c8f771711f4d0a63b48d5f", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087615, "uuid": "74a203c8-357b-4f7e-8c00-28cffd33f04b", "comment": "Malware payload", "value": "1cc4adc635407d39c65a859e31dabc23073c00dc235c6a5e179a53b8922dc7bf", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087615, "uuid": "0af39d7f-5616-44c2-a34c-41935c75ad46", "value": "T14F41B5EFE4169334CE83867401AA6C9DDF12E63B5502A050FA8C4D45BF109B5F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087615, "uuid": "f9d079bd-3f98-4251-ae8f-5b896ebbc89a", "value": "48:w2KkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:8kUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087615, "uuid": "b37dcd77-6cdb-46e5-8d9c-c741972d4421", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087615, "uuid": "eafdce83-8de1-4609-8c80-dc2e3b4030ac", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51257674-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087621, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087621, "uuid": "203b86c5-40c4-45ee-831a-b95b85594ea4", "comment": "Malware payload", "value": "06273d7489256c814d0f919536de2b4e", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087621, "uuid": "25498ea2-c691-4152-8af6-500bff80303a", "comment": "Malware payload", "value": "7aba10a6d6aca14d95bfb63de20a140adec764c9d89609d0dc27e23c4f46a7c4", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087621, "uuid": "ed525e74-e2ce-4834-be36-b84539fd6449", "value": "T1FA41B5EFE4169334CE83467401AA6C9DDF12E63B55029060FA9C4D45BB149B6F3A13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087621, "uuid": "7065e797-01ad-49d3-a1a3-5a850c24e028", "value": "48:w2OkMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:IkUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087621, "uuid": "dc96f19a-c0ef-4c31-b98e-ce0271a94f5d", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087621, "uuid": "033df780-b42a-45d3-875b-f095578cec9a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5458b7fa-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776087626, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087626, "uuid": "4da771c1-9fed-4654-a434-a4906833b039", "comment": "Malware payload", "value": "fe989cd206c3868627fc9218a4977889", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087626, "uuid": "5d44a347-898b-4d20-b495-83ffc708698e", "comment": "Malware payload", "value": "478fbf8a436858127561a0eb316576c8d3f231127521997f8973d0a9b84b0227", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087626, "uuid": "f696fb1d-d9ae-4e6e-ac76-0f2eab7a460b", "value": "T18841B4EFE416D334CE83423401AA6C9DDF12E63B6502A050FA9C4901BB149B5F3A03", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087626, "uuid": "1fb2c6b6-5d01-4dd5-a242-02b18b0e5644", "value": "48:w2y3kMAqHP43J0dS5uTgD/A3Nnsk6Afo8/uS:c3kUP4ZkS56kUf6qo8mS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776087626, "uuid": "1ba088f5-7589-4939-8cb6-2d90675ada7e", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087626, "uuid": "787710b5-af4b-4d1d-8684-6006a7f7cfee", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5fbfd940-3748-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776091940, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776091940, "uuid": "f3fa4e62-15de-41f1-9bd7-14665f2f124c", "comment": "Malware payload (Mirai)", "value": "f6fa3a9b2a1e7c73db364a082497a0ff", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776091940, "uuid": "ec4a0d74-1d14-45d4-a1d4-47d54f24c254", "comment": "Malware payload (Mirai)", "value": "d88b030bf566c968f46f3163c5efa93d0689b398e34fa21934adbe09cd3c3dcc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776091940, "uuid": "c929a8d8-f611-4b9f-907b-80f2a7c983d3", "value": "T1FBA31A8ABCC5C702C5E0A1B6FB1F52CD375643A8D3EA7147CD19AF29274B85B0A3B2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776091940, "uuid": "007637ee-83ea-4821-bdd9-80c55ddcd9ca", "value": "1536:0j3VgSyozdJWM6/gJj44SrT78ktLGOkUUSwI6Iy8egZo+n4b+R:0j3VgSy26/TprT78ktLGFWypgq+n4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776091940, "uuid": "3c2ea7fe-b551-41a6-985c-303de87639a3", "value": 103820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776091940, "uuid": "e0394087-248d-43ce-9bc9-7f4a3db0cd35", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39fb95c1-374a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776092736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776092736, "uuid": "39fb8150-0bdb-4848-a31d-ade31ce4d8cb", "comment": "Malware payload", "value": "0bf05f9f063b8e221b24ebdc806df9d5", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776092736, "uuid": "2986e371-b908-4567-998f-a585f8bcaeca", "comment": "Malware payload", "value": "ec469a9d070cf085e752fc5cc19f7e21819e7ee5b341ca8095065d50845b4674", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776092736, "uuid": "a52bf38d-9609-4764-b658-e4d453a1dca3", "value": "T16152FEBDC5E2BCC0875B32C068EDF7D2109E97137E5A676CF6D804940B54768EB785", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776092736, "uuid": "cb4022a6-8b8c-49e2-8c63-cd84dc0de2a4", "value": "384:wsjomh7fRWOBcphlIwUE2gh82y4///BAv/ICHwRARrDcv:fkwRmnlIL3gy2yq29HDDcv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776092736, "uuid": "dd3ef048-261f-4bb0-87cb-aab45c8186a6", "value": 13618, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776092736, "uuid": "367d3047-62c8-4c7e-8964-b83c2b85d38d", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23e9406e-374b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1776093128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776093128, "uuid": "d2ada137-5c23-4689-b514-6285dec7e1f8", "comment": "Malware payload (Stealc)", "value": "69cd45bf76f04b12e08d5856f0a53d8a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776093128, "uuid": "b97e1b0f-ca2d-409b-a9f9-11e74b300d65", "comment": "Malware payload (Stealc)", "value": "432d81eea7e758df49927049f0e059fffd3a9188f94da3e1f0a49efdf7190ae7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776093128, "uuid": "016a5f13-0b58-47bc-84b4-f28c3021c1be", "value": "T1E0860233B289A73EF16E1A3759B6D2508C3B6A11651B4C16DAF84C4CCF2D2602E7F6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776093128, "uuid": "fd9a61b7-5be3-4cf6-98df-3f150eb841ef", "value": "ac4ded70f85ef621e5f8917b250855be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776093128, "uuid": "4a0b808a-8046-452b-a1e2-d52b60ae994d", "value": "98304:nN66et4PxxFDWasVmtn2XwDIreeq6bRdkgguvqP6N1:fLZxF6auEn2Y2eCRnNbP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776093128, "uuid": "f2bdca7b-ebfa-4bd7-a3c6-b78ac8301ef1", "value": 8040290, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776093128, "uuid": "d1ba0684-0583-442a-928f-4e0c7837e9f8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff0fee13-3751-11f1-bc00-82aee05be84a", "comment": "Malware payload (GuLoader)", "timestamp": 1776096073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776096073, "uuid": "732af50d-21da-4176-9a9f-92147da4662e", "comment": "Malware payload (GuLoader)", "value": "328af7facdea18af90a26fdf6bb93ff3", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776096073, "uuid": "9ccd3da1-8f2a-4169-a51a-6d4824af430d", "comment": "Malware payload (GuLoader)", "value": "2bbb37485871adac5f5fb129a01cc638e2ecaafa178ff807d08bad9bd37a1b00", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776096073, "uuid": "70ec4a74-98a6-426a-8c99-af85efa3fd7c", "value": "T1CA469F12ED6809A9C592A37A887351537E38B800171123E76AD9636C1F737F8D37AF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776096073, "uuid": "919bf881-9db3-40c4-9c88-ed2bfcc9f6fd", "value": "3271ee162568f50a6810be9b8973807f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776096073, "uuid": "9de8e038-f5d2-48d2-bae4-62c9b39616f4", "value": "49152:6x8hZ8I2gsng5o42dCqX8ZNKBgFjipzQcHfnrw4KGvuWXsEgm274S3ncqmygXjBa:6xIf6BmUI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776096073, "uuid": "a64a18ee-0e5b-40e2-833f-916a86ad3b8d", "value": 5582180, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776096073, "uuid": "c1ab004b-806c-4afb-a397-29b266c1961f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a416fc3f-3752-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776096350, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776096350, "uuid": "e0c8d318-4bf4-4f2d-852c-a1aa4a449d70", "comment": "Malware payload", "value": "a3e9ae7690c9d8681bbc72696df0709f", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776096350, "uuid": "2b379cee-05ec-42be-9f10-519bbb44f57a", "comment": "Malware payload", "value": "40484d2ef6fe139567872b6611a3add15c7b29b7c6add29ac5f4eeb4e5d12282", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776096350, "uuid": "dec47359-cbe8-45d2-8f1d-66c06e872d30", "value": "T13F051257B2A420F6F273837A81654106F3727876076526EF47A493353F2BAD09F3AB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776096350, "uuid": "1029a2bf-ff99-4c3a-b0d0-6874c4cd4c25", "value": "a453654622cc4ac6ac24d3f62715ebad", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776096350, "uuid": "92128462-7a12-4e4a-b664-afb5952739ca", "value": "24576:/eJH6cn0kwiMrzoH3XlyZCM8E3KZIdhx6:Vcu/riXlZM8vChk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776096350, "uuid": "73aa5cc0-8efd-4be1-93c0-8d263b934480", "value": 809618, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776096350, "uuid": "79da2e8b-863e-405f-9328-aee9dd10d567", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a72e7d9-3753-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776096629, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776096629, "uuid": "1ceb4ebf-1829-4aae-84d6-0ecfce4e91de", "comment": "Malware payload", "value": "1d5a7546731b801f11273ed9826c91e4", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776096629, "uuid": "3adfa006-3d55-4e52-8536-071245e11c57", "comment": "Malware payload", "value": "8c2849bc78eadc75320124b029a86b62ee4485e6453db6ea152ce43e8eab4aa8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776096629, "uuid": "2c082cfb-f26e-4a8e-b6a9-99636c5017e5", "value": "T12A93E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB32", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776096629, "uuid": "96f605a4-c716-4166-bf87-92642e4cce5d", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXeIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776096629, "uuid": "bff7ed5b-7ab4-4f9e-8ec3-d4c717d144e5", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776096629, "uuid": "ba7dc39a-684c-4c7d-abd0-e3c138dcad92", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1699c40c-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776097609, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776097609, "uuid": "76a32da2-f33c-42ed-b882-d10f9dd74bc6", "comment": "Malware payload", "value": "21ab19d00f6577ebcb2e719b8a52344c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776097609, "uuid": "41b50260-2482-4c49-8d1f-8ae75e70bc95", "comment": "Malware payload", "value": "898e00110e699b1381509252bd0614c8ffe8e04c7692678bf3eeaecf131f8af0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776097609, "uuid": "61866f80-d7d9-46e0-ad67-3ff9329af582", "value": "D953020233AA29B196714AF1E7FDBB88E6493D588FF26C256C113D6CF97239D1CC4908", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776097609, "uuid": "be615db2-f9cb-4a4c-893f-888fd18ddd1f", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8Px2:yYI0ARqw1qAEv7UIFM8oJorFquyjT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776097609, "uuid": "118e551a-467b-4ec4-bae7-38dd9b193f06", "value": 65160, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a83b30a8-3756-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776098075, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776098075, "uuid": "76b7e9de-ee47-476a-a34d-5ee399d5aa30", "comment": "Malware payload", "value": "9dfbd1259c507519b9b166b6f5ff4202", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776098075, "uuid": "1aae9458-fc26-40f1-9cd6-1429d24d1c88", "comment": "Malware payload", "value": "9b99747d1b73fbca15dbc14f2cd30f2d6fc12362ba78f271d30c2b5351945c2b", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776098075, "uuid": "d1fc3467-03ee-42cb-bbf9-0fa37d3b05ff", "value": "T10DB21E3EC984DFF00B6B31E1A95F7A16A5540363B9382A4DB9CF809D3B35650CBB01", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776098075, "uuid": "3e911a8d-bcc3-4717-88d0-96194f3cfdc6", "value": "384:K/8Zi6d5fWFP4QirJ7GC6lgl2mBrblV8hW8ckYqgD+zFJp302J8Xx8RQMKACEVv/:K/8ZipvirJ7Go/rR/+gD6qca4KyvbPr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776098075, "uuid": "d2de1e62-b4d4-4305-bafc-c092c4c230de", "value": 24297, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776098075, "uuid": "5679550f-86af-4bfe-b5b4-a64bec5043a4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b526f02-3757-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776098295, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776098295, "uuid": "4dd21dea-4b93-46f7-889d-6b6590fc9c4d", "comment": "Malware payload", "value": "d06b729e5b1928edf2d44cb07c3469f2", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776098295, "uuid": "c8d3e6ba-46dc-476d-a8a8-b0b1245bed52", "comment": "Malware payload", "value": "dea5f5ffbbd67b7c9136327faf0af2a412cd86f008617f3bca50970dba85d6bb", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776098295, "uuid": "3238cfd5-c9bb-45cf-9e9a-76091ff232cd", "value": "T1E98309327488582A210B428FD267336C70EFDCE2D611E5B6F6F622344BA5EE135B76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776098295, "uuid": "4bfdb521-68ae-4aa5-bc93-e763e73e87bf", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnqWakVN/:XEKltp9txAX/yr2pbqWpVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776098295, "uuid": "99bafcc4-09af-46c6-be7a-d068c4539b17", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776098295, "uuid": "18b5dfea-7597-4cca-a609-127072454ae6", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed3a6c8b-375a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776099909, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776099909, "uuid": "91864c49-2bf3-4f0c-8c93-8f96403b90cd", "comment": "Malware payload", "value": "67bf90c3cf581efcf66bcc44b58b4628", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776099909, "uuid": "b4ddf9cf-1388-4e01-b268-1a9d763a0f46", "comment": "Malware payload", "value": "0bf4cbc5e7e44f360f619a60d32279f3553bb21d4a9197d18c400b03fa5bb425", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776099909, "uuid": "2ed805e8-bfd5-43aa-9880-e87191bdd46e", "value": "T1FC53013516C38DE0F0DB65AB92E2BD998EDB33F09DB4081992FBBC608155FB5F1449", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776099909, "uuid": "2cbcaa62-107d-4315-8253-90a907f168b5", "value": "1536:XmiLIUvDIgKKmRTOpcDnNze7DbMAnMLZghPZaF2:WiLIULIgKx4CDnNq7DbMlL4PZL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776099909, "uuid": "bdb93453-9a07-4d5a-a507-9c7ed3ed2423", "value": 61501, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776099909, "uuid": "440a2e53-c31e-4340-8253-d8bee8506916", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed3ff5f6-375a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776099909, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776099909, "uuid": "fca6b857-a5d3-4c49-b92b-ee9496e3a8aa", "comment": "Malware payload", "value": "99d9e2964706cf8b3269964096de5a4a", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776099909, "uuid": "5f332ed9-7dc0-4ca5-9fe8-30b59f61a3ac", "comment": "Malware payload", "value": "c565286809515deec7ab1aede070c9b45da2620755b4176440cd158b1d44022a", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776099909, "uuid": "2e317517-b10e-450e-bd33-eb1a847f5297", "value": "T17453F13516C38DE0F0DB65AB92E2BD998EDB33F05DB4081992FBBC608155FB5F1489", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776099909, "uuid": "0c65a2bc-8d41-4781-9422-670124467955", "value": "1536:XmiLIUvDIgKKmRTOpcDnNze7DbMAnMLZghPZaF7:WiLIULIgKx4CDnNq7DbMlL4PZ4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776099909, "uuid": "68adb124-4067-42cf-9cab-cbaf78a8f1f6", "value": 61456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776099909, "uuid": "076f6980-3562-4b2b-a2c3-57151925f27e", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a324155-375c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776100521, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776100521, "uuid": "9f8e7fd5-b226-4f8d-ade0-a983b553d2cb", "comment": "Malware payload", "value": "2a7106dcb7c9923cb41345c8e1c5c78d", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776100521, "uuid": "7fd0dee4-f8da-42b1-b03d-14b6a4487a29", "comment": "Malware payload", "value": "6a0183f07509c0ba55756bfe3a1eeef4973e943cc2aa1f0e2be0d17877b12c7b", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776100521, "uuid": "f40a15f4-7b4e-4c30-b62f-0800bc723c60", "value": "T1B596337ECA2A7C35D44B6D7394F398DD58881E1AB4BC3E8D711979B2E81681E020FC", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776100521, "uuid": "0475f778-14b1-4d45-a80d-57ef42385ff0", "value": "35a81d16af9f2ba6d515f11152d0364b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776100521, "uuid": "e0cdf970-d31b-4fde-afe7-ee5be00069f5", "value": "196608:XLPc1TOoBA+Ao/6JNceuFN/Y4vbxVlc4J5A7aqC3FDtD0z7R6L:XLPQvBAzDJNcdFNZvflc4J5AWqC3T0z1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776100521, "uuid": "3be56955-ffc2-49eb-97c6-1d9061de5903", "value": 8790936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776100521, "uuid": "891076d9-0c7f-4c66-a3ee-d3d4dc3fe895", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "797102ec-375c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776100573, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776100573, "uuid": "2f6324b6-1991-412f-be43-514413ac6878", "comment": "Malware payload", "value": "1aa265647abcdf0e3d8cbe728d2760c5", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776100573, "uuid": "74cfed44-f6e1-4c37-9194-eb16327f974f", "comment": "Malware payload", "value": "5124b89548b54b91cb8034c76c68e47ea01237688aeb6bedfa386b30de0b208b", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776100573, "uuid": "c47b6c7d-1589-4030-90e7-f3f3481e6f11", "value": "T1FF76332AF67C5DC4C879F476E1B00D5087D3230EE542C47A9692BAE8B1F17CA4D8D8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776100573, "uuid": "834d2960-151c-4a81-a948-1ff3fae83f9d", "value": "196608:+Zfts+j+LP6PDrEaiLOMDIh0uU+HB/OGUElH6XU8YYlbHXUF:+BJjpPDwbPIhrU+h/PUEl0U8YYlbEF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776100573, "uuid": "3eb81d89-cb2d-4813-9bea-0f0c4da5fb84", "value": 7734135, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776100573, "uuid": "7e0e9884-227d-41be-88d4-434f91672c3b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4cf2234f-375e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776101358, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776101358, "uuid": "6e10318c-67ca-4e41-b1e5-e162d2dee478", "comment": "Malware payload", "value": "12b859c4c631f943dad2fbdeb17dd827", "object_relation": "md5", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776101358, "uuid": "32787cd1-d157-41f3-9a9e-c97a35fdcadd", "comment": "Malware payload", "value": "ea595940815a11901bd99214b26d9528034f7182bd6c3bf2fe3179ac92e00afc", "object_relation": "sha256", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776101358, "uuid": "0b0f2fbc-f045-4564-910b-67a256a7a4ef", "value": "T1E3862257BD80D92BD457E0F95791C067E62907CAE005D02B8BA90EAB2C72E859343F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776101358, "uuid": "5d972afb-fa1b-4cf9-8235-492eb8cda796", "value": "196608:MPaRjzpxB3Rz/uqgk6K5TzjHMdKr1vozCTOZrQ1akjdSERSySud7:Mun7B3RjyRyHoKr1LKO1zBSrud7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776101358, "uuid": "2130ca81-d0ee-4e0f-9963-6924ed5086e2", "value": 8072216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776101358, "uuid": "0405f06d-1cbc-4a41-b1a4-643d1f91854e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9d3f5e4-375e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776101567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776101567, "uuid": "0373e5e5-b032-4caf-a25f-a2e0be048d3b", "comment": "Malware payload", "value": "0e9bc9252b008a09e4898681fb9d5a36", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776101567, "uuid": "59e16faf-99ca-4e41-b4a7-b3db2b0757a4", "comment": "Malware payload", "value": "bcd5bdcd24000fddd5c512609692bdb62208a1c9c6081cbcfd08d53ea171824c", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776101567, "uuid": "4ff7f5b9-99dd-4b78-b1ce-3b52d9a9e3c5", "value": "T115A20805AA56534AF4B1187553B72E356439BE32270D94CFEF900A391274EE0FE373", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776101567, "uuid": "5675f328-7af5-4486-aff9-355c75e69264", "value": "d0f945da54f20d8bcaf079f2d6ea9f63", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776101567, "uuid": "665bc1af-c982-46ce-96cf-2c7ed9528840", "value": "384:Ou1OuPf4/S1fUrQFYhJ4JVB0WsNUnwnR:ONuPf4/IUrqY+xsN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776101567, "uuid": "ebd0c551-27c0-4c3d-872c-6fc84f262cc1", "value": 22528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776101567, "uuid": "3ce0a07e-994b-47eb-8826-d8a52bbe6e4b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f309438e-375f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776102066, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776102066, "uuid": "62fa4197-c820-4301-9311-715af8590750", "comment": "Malware payload", "value": "05a5905b8156eee7494146b5eebb19bc", "object_relation": "md5", "Tag": [ { "name": "pw-update", "colour": "#10debc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776102066, "uuid": "805533e1-cb99-45f1-a858-ae697b29ce58", "comment": "Malware payload", "value": "4fc3069389d5c9a454ea34eae1875cefe61b77dc379a77c70ee5f4d222c9b9e0", "object_relation": "sha256", "Tag": [ { "name": "pw-update", "colour": "#10debc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776102066, "uuid": "8f38f70d-9048-417a-9c15-8cfe5541ae8d", "value": "T116A733DADC828C81A70DD7BF8A81EF7278D20253A1C48D685506BE07DB1E6F25C757", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776102066, "uuid": "74fb258f-1b17-402f-aa2d-11ae5aeb3385", "value": "786432:amEHvZ5eKHXYRS24ISh6KXvP1+otIuVloMW5pSkGOVxiKBFYTn1RwzP1KT4:amO9HXPOSh5/HtIuLbW5ZVxjaTHO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776102066, "uuid": "bc1b189d-d696-43f1-ab22-dd2f6ad0b8cd", "value": 47858512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776102066, "uuid": "7f0b66d9-bd9f-4f4a-ba58-1f6d29233361", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6a31a94-3760-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776102421, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776102421, "uuid": "862aa548-b44c-4334-adad-befd340dd146", "comment": "Malware payload", "value": "4b665e506432273332b2d3cb029c997e", "object_relation": "md5", "Tag": [ { "name": "196-251-107-133", "colour": "#dafeb8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776102421, "uuid": "1435e584-bda4-484b-9bb8-def3eb796ca5", "comment": "Malware payload", "value": "4edbb66bd585fd86b4c6c2ee7e661b3e45b0212c5c9ec1b6347de965f2f230b2", "object_relation": "sha256", "Tag": [ { "name": "196-251-107-133", "colour": "#dafeb8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776102421, "uuid": "0af869f4-f53b-4997-bef8-f6d715e7fa01", "value": "T15EB1B4C812A354747DF68E6372698A28B9C9B182DDC58F80D4EDF4F5588CF08BD416", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776102421, "uuid": "ea88d3bc-5eaa-4c8c-ab3b-71ac95583879", "value": "96:IKhEcfEnsTE1OCxACxm5FbTvXRtnfB9/HrZ:dz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776102421, "uuid": "f97d0fbb-5bf1-4c18-a29c-d8065fc44fbd", "value": 5158, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776102421, "uuid": "840129d2-e472-42b6-92f2-372c2ace0838", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d0cb7f4-3765-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776104338, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776104338, "uuid": "22298d46-ad9d-4064-a2d6-98dc6146abef", "comment": "Malware payload", "value": "cf0f79219585b023aa8cb61eeef180a6", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776104338, "uuid": "609c0f48-ac30-4de6-8069-2e17cf1e7d8b", "comment": "Malware payload", "value": "089c7c03e6fa063a6f3321daaab924ed6d32e0a1817eb3271b99e8a3d13213d5", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776104338, "uuid": "1af6c164-b823-488f-a8a3-722facd385f0", "value": "T1EC22BF633590716B4FCADB893B371B7D96093A442C0875D09887186EFF8606138C57", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776104338, "uuid": "612a0555-ae39-47ae-860f-523373f8c056", "value": "192:kUqqqSkB9gxOqyRhYI9mGP5tUdD1bGbdt8ZTDe15pego90mVzfBE0cA8kosKPe:kUqqqSGRhfBqab8Zne15pegoKW1Ztost", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776104338, "uuid": "4184684f-0f15-4750-af05-ca440e692a4f", "value": 10496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776104338, "uuid": "a1161d53-816f-41bc-98d0-db51c9666577", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "334cbd70-3775-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776111193, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776111193, "uuid": "53d998d8-19e0-4063-a135-73f080dcd4ba", "comment": "Malware payload", "value": "20d9e0b000baacd7efe3634815f32f7b", "object_relation": "md5", "Tag": [ { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776111193, "uuid": "d54cc5a0-dab8-4472-9237-fae0d7dce282", "comment": "Malware payload", "value": "374ebe1b250f97b73f841725b1d9038c78396d9e0c27a237e7d8a73dea33ce63", "object_relation": "sha256", "Tag": [ { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776111193, "uuid": "f268c424-2b00-4287-8b48-73a70ac78bcd", "value": "T1E0C164D4FDB8F831BC7EA738A18890887AFABB5E42333C0479565B9A135D548310B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776111193, "uuid": "9351f58c-f6f0-4b15-85b4-1a1ee5660d87", "value": "96:clNR1tlZjRqIEvwMCySUq9npY0R5BGIkRtdLRQHJ5YBDjavLfhtR6xgcre:cl5dfQSUq9npY0R5BGBsPmqZci", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776111193, "uuid": "a1b325f3-dd79-4b15-bb91-0f769672ff7c", "value": 5751, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776111193, "uuid": "822c708f-8ec6-425f-be15-05f8b9019cbd", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a2d1cd02-377b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776113957, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776113957, "uuid": "befbd90a-acb4-42ba-9859-ccfafca2d8d2", "comment": "Malware payload", "value": "5004ca0c607c6a6b1d82dc4c82423085", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776113957, "uuid": "5d027436-357b-4f63-a418-0a182fc8dbfa", "comment": "Malware payload", "value": "b010baf97cd5c6eaf9151edb39cd68ce589f8da77c85fcc08412bd278962f69b", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776113957, "uuid": "860f9e65-9b9d-4117-bfb8-89e9ebb2a3de", "value": "T14CF0C9CA55707EA68024CF14E1760DD0530981DAB0E2F7E9A9F6042F8E98721F91CF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776113957, "uuid": "d9489c0d-a6ad-44f0-9ac0-f41874f0b2c6", "value": "6:SonH5fS87hnH5xQxpEWZnH5SFGNIMSF+5cinH5qX7K6h7hnHaa84nHLkLBLlnHhc:xD7xjM6WJPNIO5UrKsxJaBBD78n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776113957, "uuid": "3db40b65-772f-458e-a3e9-6e5bd7b83e86", "value": 640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776113957, "uuid": "d1e67d82-a5c9-4ae2-88cc-1559b8acf206", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a2d703b4-377b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776113957, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776113957, "uuid": "8cefffc3-f892-4f6e-ab08-5ecdc3747078", "comment": "Malware payload (Mirai)", "value": "b3c2f54f1cba176cfa69ce97261f715e", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776113957, "uuid": "9f3e83d9-c103-46b3-a084-3e0080832a55", "comment": "Malware payload (Mirai)", "value": "699d5f1753dbe8bbce7d368e9d5549ae66f8291311b061874a8bd762d9826f19", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776113957, "uuid": "2e196707-ccff-4b36-94d0-698e36c02788", "value": "T11D0112CA52203FA6C024CF14E1770D94420AD1D0B1E2B3E9A9F6003F8E88681F91CB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776113957, "uuid": "ef5fb5b9-16ba-44e3-902e-a9902bd5d352", "value": "6:SonH5fSUJLqnH5xQxpenH5SFGNIMSF+5cTnH5qX7K6FqnHaa8xnHLkLBLI7nHhAt:x3LijMgPNIOGUrK4iWauBI7X5n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776113957, "uuid": "73fe5d68-a334-4920-912c-120033ffb04c", "value": 664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776113957, "uuid": "0a9981e6-8c23-458e-b8b4-5943f440d0e8", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a2e67606-377b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776113957, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776113957, "uuid": "97e882c6-0c15-4942-af19-61708dc9c078", "comment": "Malware payload", "value": "846b7420005320484499174f49552461", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776113957, "uuid": "16c2798a-1f77-4cfb-a41e-4695f9f4f31a", "comment": "Malware payload", "value": "bce106c776cbb7296726c3e1a16c516b29ea4b2d8507546d1fe9b4fda7421d8d", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776113957, "uuid": "cbb8d148-707c-4512-b0d2-de137ba9b863", "value": "T19FF0C9CA5570BEA68064CF18E1B60E94921981D5B1E2F7E899F6042F8EC8701F95CF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776113957, "uuid": "3dff51f8-2244-4f30-a2b0-77a7abfee4e8", "value": "6:SonH5fSvmnH5xQxpImnH5SFGNIMSF+5c0Z0mnH5qX7K6mmnHaa8G0mnHLkLBLWCH:x/jM1PNIORZ7UrKID7aKcBzJ7x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776113957, "uuid": "9065c455-8f05-43bb-8da3-4792a711ddcf", "value": 626, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776113957, "uuid": "27ae42a2-9d90-44d3-82cf-22b2c672098b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cddf7891-3682-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776114618, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776114618, "uuid": "f852a7f9-f832-47c0-bab4-d43dea9eba27", "comment": "Malware payload", "value": "e8ea2a65fddd52a17af97c4b68119942", "object_relation": "md5", "Tag": [ { "name": "196-251-107-133", "colour": "#dafeb8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776114618, "uuid": "4c4f8045-1224-408a-a89f-8070aad68b49", "comment": "Malware payload", "value": "d8e382a853e43096d94179955954165c8b688727b6d3b1d54b3fe3948ccd4564", "object_relation": "sha256", "Tag": [ { "name": "196-251-107-133", "colour": "#dafeb8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776114618, "uuid": "afdf5ddd-c729-4d1d-b914-6b17a5113948", "value": "T12031D2C9176244756ED69FA7B1A4C934B488F0D6ACC4DE84C5EB38FD894DF087C41A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776114618, "uuid": "94b09d06-2598-43bb-818c-be6b485fa911", "value": "24:vXROSlIOSKuwoOSBpOSUOSElGOSOOS5eOSzOSyz9Ol:vhR6RKgRBpRURwGRORARzRce", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776114618, "uuid": "86e87607-3207-4f4a-970a-f34b91969f8f", "value": 1803, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776114618, "uuid": "aef133a8-43c0-4e87-be15-e7ac3dea09ca", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "421aa298-378a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776120237, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776120237, "uuid": "45492de5-2ed9-4823-b883-62a9f03ab26c", "comment": "Malware payload", "value": "ce9bf60293503571ee342cb87dd191ae", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776120237, "uuid": "b6ff819e-72a7-4a35-bfac-d5c635a42b0d", "comment": "Malware payload", "value": "9efda572c8f3246738ae41656bd65fd31e111c3cfeb308d49adcf33879d8a345", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776120237, "uuid": "f71cabc6-da17-4ae6-a35c-cea31a76e99f", "value": "T1535633B778B41935FA1176B808DB8480F328A0C24F66E955FFDE9B62F0CDE700575A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776120237, "uuid": "85f223a6-7026-41f2-8bcd-59847b5492f2", "value": "24576:Sn8xQISKoSsfByz1ajmo0F1Mo7yqvfqqH3j/:eMWNBAo07M8yGh3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776120237, "uuid": "bb9b12e3-74f5-4164-87f4-dca0614c1975", "value": 6271176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776120237, "uuid": "02b1d39c-540e-4101-8332-489fb8f49922", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776124752, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776124752, "uuid": "b9e4bdbf-985d-40e1-9c80-26182d45acc6", "comment": "Malware payload", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776124752, "uuid": "913f69ae-18bf-41c7-89bf-50e11c9d1393", "comment": "Malware payload", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776124752, "uuid": "61b9fe1c-8ab0-415f-acf3-0a4120d64a79", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776124752, "uuid": "7555261a-208c-483c-aad8-e10df77bacfd", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776124752, "uuid": "a33a5f5d-4dae-45ae-8dc2-d90ad4f89ab4", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776038587, "uuid": "26b1434b-36cc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://handleill.conferen-cesman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776038831, "uuid": "b82834c1-36cc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.34.195:42330/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776038888, "uuid": "d9cb89d1-36cc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.225.94:43318/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776038891, "uuid": "dbf2a287-36cc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://57vl6.conferen-cesman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776039190, "uuid": "8e13f443-36cd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.180.15.35:60517/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776039246, "uuid": "afb7ed53-36cd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://quorcore1a.conferen-cesman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776039614, "uuid": "8af9bc10-36ce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://breezesto.conferen-cesman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776039973, "uuid": "60985e51-36cf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rnoon-wave.rebutrew0rk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776040158, "uuid": "cefeab18-36cf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.113.132:48596/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776040209, "uuid": "ed288c89-36cf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://modul-scene.rebutrew0rk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776040512, "uuid": "a2142daa-36d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.34.195:42330/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776040572, "uuid": "c5840ad5-36d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://serlineet.rebutrew0rk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776040930, "uuid": "9b7a1139-36d1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://es3tp.rebutrew0rk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776041229, "uuid": "4d98cb76-36d2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cvsbi.rebutrew0rk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776041528, "uuid": "ff954eda-36d2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://87vq.rebutrew0rk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776041533, "uuid": "0262c814-36d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.113.132:48596/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776041722, "uuid": "7321d1b0-36d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.222.59.209:43199/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776041899, "uuid": "dcc85d00-36d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.95.232:46139/Mozi.a", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776041899, "uuid": "dce07715-36d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.95.232:46139/Mozi.m", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776041901, "uuid": "ddcdfef1-36d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.95.232:46139/bin.sh", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776041948, "uuid": "fa1d9d99-36d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://talmarkum1.mucus-rafter.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776041950, "uuid": "fb68631a-36d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.44.36:58168/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776041953, "uuid": "fcbe9827-36d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.95.232:46139/i", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776042428, "uuid": "17f6a764-36d5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://norvale5on.mucus-rafter.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776042545, "uuid": "5d937cef-36d5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/7782139129/nM8PZXp.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776042587, "uuid": "770bb13a-36d5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.225.49.27:41733/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776042728, "uuid": "cb2ba67a-36d5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://load9-mount.mucus-rafter.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776042796, "uuid": "f32d5882-36d5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.119.160:1212/zyre.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776042796, "uuid": "f32fbc6a-36d5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.119.160:1212/zyre.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776042796, "uuid": "f32fc0ee-36d5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.119.160:1212/zyre.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776042796, "uuid": "f32fc396-36d5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.119.160:1212/zyre.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776042796, "uuid": "f3304331-36d5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.119.160:1212/zyre.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776042796, "uuid": "f332ba9b-36d5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.119.160:1212/zyre.apk", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776042796, "uuid": "f333c14d-36d5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.119.160:1212/zyre.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776042796, "uuid": "f335574f-36d5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.119.160:1212/zyre.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776042796, "uuid": "f337a1e0-36d5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.119.160:1212/zyre.x64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776042796, "uuid": "f339fe13-36d5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.119.160:1212/zyre.ppc440", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776042796, "uuid": "f33a15df-36d5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.119.160:1212/zyre.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776042796, "uuid": "f33adefe-36d5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.119.160:1212/zyre.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776042796, "uuid": "f33aefd4-36d5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.119.160:1212/zyre.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776042796, "uuid": "f33b91a7-36d5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.119.160:1212/zyre.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776042796, "uuid": "f33bbcd2-36d5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.119.160:1212/zyre.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776042796, "uuid": "f33c5573-36d5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.119.160:1212/zyre.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776042796, "uuid": "f351d021-36d5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.119.160:1212/zyre.dbg", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776042850, "uuid": "13c11945-36d6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.119.160:1212/cat.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776042981, "uuid": "61f2e98c-36d6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.44.36:58168/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776043097, "uuid": "a6a9e366-36d6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.17.125:43141/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776043208, "uuid": "e91a0888-36d6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mpjrpw.mucus-rafter.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776043408, "uuid": "602aa251-36d7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.17.125:43141/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776043568, "uuid": "bfcc61ae-36d7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://orvfw4.mucus-rafter.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776043929, "uuid": "96de50b0-36d8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bandwiglade.mucus-rafter.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776043939, "uuid": "9c6fcde3-36d8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.238.27.138:33047/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776044236, "uuid": "4d8f9957-36d9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.134.156:48189/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776044346, "uuid": "8f787e32-36d9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://geo-st0ck.chandelh2lifa.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776044773, "uuid": "8da31bdf-36da-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://8rnyx.chandelh2lifa.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776045128, "uuid": "6180db82-36db-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nhspq.chandelh2lifa.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776045218, "uuid": "97088f90-36db-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.48.162:58636/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776045307, "uuid": "cc5ee2b2-36db-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.134.156:48189/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776045549, "uuid": "5c7b0926-36dc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bold4-loop.chandelh2lifa.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776045624, "uuid": "89394bd9-36dc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.220.216:37586/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776045914, "uuid": "35abc0eb-36dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.75.213:35606/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776045972, "uuid": "588e3f6e-36dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gvxnzo.chandelh2lifa.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776046098, "uuid": "a380f815-36dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.180.220:56437/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776046333, "uuid": "2fa85da9-36de-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sterileric.chandelh2lifa.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776046337, "uuid": "31d29975-36de-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.124.98:58896/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776046686, "uuid": "020a088c-36df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.106.229.247/loader.sh", "Tag": [ { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776046809, "uuid": "4b93770f-36df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://listenercorte.danger-style.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776046818, "uuid": "510053a3-36df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.226.157:49348/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776047045, "uuid": "d7c78ca9-36df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/8717422379/fcAMh42.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776047107, "uuid": "fd38b64e-36df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.180.220:56437/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776047167, "uuid": "20e17e3a-36e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hw62b.danger-style.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776047528, "uuid": "f82feba2-36e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://5cqwuhoc.danger-style.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776047775, "uuid": "8b13c1dc-36e1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://204.76.203.168/ultron.arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776047775, "uuid": "8b13e427-36e1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://204.76.203.168/ultron.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776047775, "uuid": "8b13eea8-36e1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://204.76.203.168/ultron.arm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776047775, "uuid": "8b1822b6-36e1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://204.76.203.168/bj", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776047779, "uuid": "8d5e9927-36e1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://204.76.203.168.ptr.pfcloud.network/bj", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776047779, "uuid": "8d708bcb-36e1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://204.76.203.168.ptr.pfcloud.network/ultron.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776047779, "uuid": "8d9aeb77-36e1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://204.76.203.168.ptr.pfcloud.network/ultron.arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776047835, "uuid": "af19cf5c-36e1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://204.76.203.168/ultron.arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776047835, "uuid": "af23b6ce-36e1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://204.76.203.168.ptr.pfcloud.network/ultron.arm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776047892, "uuid": "d0c91dda-36e1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://204.76.203.168.ptr.pfcloud.network/ultron.arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048014, "uuid": "197d4d43-36e2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ydiftfl.danger-style.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048308, "uuid": "c8bf525f-36e2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://39mx.danger-style.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048312, "uuid": "cb70b7ce-36e2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://103.106.229.247/bins/jbd2_sda1d", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048312, "uuid": "cb7744a8-36e2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://103.106.229.247/bins/kswapd0", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048312, "uuid": "cb78986f-36e2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://103.106.229.247/bins/devfreq_wq", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048312, "uuid": "cb789c19-36e2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://103.106.229.247/bins/kworker_u8", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048313, "uuid": "cb8cff5b-36e2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://103.106.229.247/bins/bioset0", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048314, "uuid": "cc3ce197-36e2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://103.106.229.247/bins/edac_polld", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048324, "uuid": "d2481d98-36e2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://103.106.229.247/bins/ecryptfsd", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048324, "uuid": "d248205c-36e2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://103.106.229.247/bins/zswap_shrinkd", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048324, "uuid": "d2485e64-36e2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://103.106.229.247/bins/rcuop_0", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048324, "uuid": "d2486e1b-36e2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://103.106.229.247/bins/kblockd0", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048324, "uuid": "d24d1855-36e2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://103.106.229.247/bins/ksoftirqd0", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048324, "uuid": "d2502d15-36e2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://103.106.229.247/bins/cfg80211d", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048377, "uuid": "f2354efe-36e2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.226.157:49348/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048497, "uuid": "399e4d0c-36e3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.48.162:58636/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776048728, "uuid": "c2f81331-36e3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://payloastag.danger-style.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776049092, "uuid": "9bdf57d1-36e4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.8.16:58154/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776049151, "uuid": "bf8d1f12-36e4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://akkcq5.insti1partition.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776049512, "uuid": "9645189f-36e5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://3zowl.insti1partition.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776049697, "uuid": "04afbf89-36e6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.66.8:44451/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776049928, "uuid": "8ea4c2eb-36e6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://iqwo0.insti1partition.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776050059, "uuid": "dcbcad0c-36e6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.239.191:37382/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776050354, "uuid": "8c0d5718-36e7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ultra-shall0w.insti1partition.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776051010, "uuid": "133f58d6-36e9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://toos.insti1partition.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776051068, "uuid": "35c5dec0-36e9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.79.113:35702/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776051128, "uuid": "59c5dbd9-36e9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vapb64us.insti1partition.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776051852, "uuid": "095a42dd-36eb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://assetrid.sanctua-ryunt.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776051918, "uuid": "3072bd86-36eb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.59.83.65:45907/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776052029, "uuid": "72a9b28a-36eb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://1707.sanctua-ryunt.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776052066, "uuid": "88dee8ed-36eb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.187.57:51040/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776052209, "uuid": "ddca0de9-36eb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.40.209:53307/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776052278, "uuid": "071cd4e8-36ec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.169:36365/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776052339, "uuid": "2b5a134d-36ec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.79.113:35702/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776052511, "uuid": "91f0d51d-36ec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cryeast.sanctua-ryunt.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776052990, "uuid": "afc5db7d-36ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://daernon-grid.sanctua-ryunt.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776053058, "uuid": "d817cf31-36ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.202.60:35666/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776053291, "uuid": "62f3c4ef-36ee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.187.57:51040/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776053419, "uuid": "af527337-36ee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wolorch.sanctua-ryunt.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776053659, "uuid": "3e70d969-36ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.40.209:53307/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776053788, "uuid": "8aee969e-36ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.54.166:36078/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776053835, "uuid": "a7662a1e-36ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://15cqw.sanctua-ryunt.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776054202, "uuid": "81e64496-36f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.84.113.62:36160/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776054378, "uuid": "eafba31f-36f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.61.159:54517/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776054618, "uuid": "79b258fc-36f1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vend0r-crest.xeltronix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776054732, "uuid": "bdf1bad9-36f1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://x79h.xeltronix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776054861, "uuid": "0a7c70c5-36f2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.69.230:34470/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776054987, "uuid": "55a9b7a5-36f2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.202.60:35666/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776055273, "uuid": "005d69b8-36f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://c0ysh.pra7vexal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776055280, "uuid": "0467eae1-36f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.173.8:42365/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776055636, "uuid": "d8707479-36f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.169:36365/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776055693, "uuid": "fab15aa5-36f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nisjdefz.pra7vexal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776055701, "uuid": "ffae9ba1-36f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.197.8:53251/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776056059, "uuid": "d4ac69c1-36f4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.69.230:34470/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776056059, "uuid": "d4ae7f41-36f4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.61.159:54517/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776056173, "uuid": "18b878a0-36f5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://meta-tru5.drumoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776056348, "uuid": "80fb21b7-36f5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.26.48:58182/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776056423, "uuid": "adbf478d-36f5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.25.133:44346/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776056600, "uuid": "175b10e3-36f6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.129.229:54199/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776056651, "uuid": "35740d78-36f6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dih0t.drumoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776056902, "uuid": "cb01a9d8-36f6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.173.8:42365/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776056967, "uuid": "f1cf3e87-36f6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.179.152.194:37784/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776057015, "uuid": "0e86cfe5-36f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.159.153:40022/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776057073, "uuid": "313863be-36f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wkodj.vo3xiran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776057259, "uuid": "a013ec2e-36f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.129.229:54199/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776057549, "uuid": "4d0fa11b-36f8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://71wxz.vo3xiran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776057678, "uuid": "99e87c18-36f8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.26.48:58182/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776057679, "uuid": "9a68f95c-36f8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.197.113:40935/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776057974, "uuid": "49fae433-36f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lumnexa.klinavor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776058276, "uuid": "fe523073-36f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.210.144.124:37815/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776058392, "uuid": "4319ee80-36fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.62.197:55213/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776058393, "uuid": "43db35ac-36fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ygxq.klinavor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776058461, "uuid": "6c32d00d-36fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.109.227.177:44025/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776058461, "uuid": "6ca7bcc8-36fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.235.81:40133/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776058639, "uuid": "d6a0257b-36fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.103.137:38084/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776058694, "uuid": "f74085c6-36fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.2.184:58830/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776058880, "uuid": "665a2225-36fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.219.14.111:38777/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776058932, "uuid": "85520143-36fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pxedkzjn.zeq8morin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776059002, "uuid": "aededfb0-36fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.109.227.177:44025/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776059061, "uuid": "d1d15b6e-36fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.59.231.32/Hammz/Hammz.mips", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776059061, "uuid": "d1d15eb9-36fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.59.231.32/Hammz/Hammz.i686", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776059061, "uuid": "d1d42771-36fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.59.231.32/Hammz/Hammz.sh4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776059061, "uuid": "d1d42a17-36fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.59.231.32/Hammz/Hammz.ppc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776059061, "uuid": "d1d5e183-36fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.59.231.32/Hammz/Hammz.x86", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776059061, "uuid": "d1d925a1-36fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.59.231.32/Hammz/Hammz.arc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776059061, "uuid": "d1d9c322-36fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.59.231.32/Hammz/Hammz.arm6", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776059061, "uuid": "d1e03919-36fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.59.231.32/Hammz/Hammz.arm5", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776059061, "uuid": "d1e4550a-36fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.59.231.32/Hammz/Hammz.mpsl", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776059061, "uuid": "d1e765a2-36fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.59.231.32/Hammz/Hammz.arm7", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776059061, "uuid": "d1efe3aa-36fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.59.231.32/Hammz/Hammz.x86_64", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776059061, "uuid": "d1f643dd-36fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.59.231.32/Hammz/Hammz.spc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776059061, "uuid": "d1feb99f-36fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.59.231.32/Hammz/Hammz.m68k", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776059061, "uuid": "d203c1b5-36fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.59.231.32/Hammz/Hammz.arm", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776059300, "uuid": "607b01c4-36fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.210.144.124:37815/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776059354, "uuid": "80e0ca3e-36fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://deliver4-mesh.zeq8morin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776059653, "uuid": "32e08c27-36fd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.79.195.189:52819/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776059897, "uuid": "c478c7a8-36fd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vmkzuhhq.travixon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776060129, "uuid": "4e9bfa73-36fe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.103.137:38084/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776060247, "uuid": "94f5a116-36fe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://runwspoo.travixon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776060437, "uuid": "063c3c34-36ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.1.162:58224/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776060455, "uuid": "10f4b194-36ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.242.164.219:33668/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776060493, "uuid": "27ab05bc-36ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.219.14.111:38777/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776060678, "uuid": "9618ab47-36ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.117.225:35094/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776061096, "uuid": "8f14c0f9-3700-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.63.246.36:49016/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776061516, "uuid": "896325ac-3701-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.62.197:55213/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776061690, "uuid": "f0ee5971-3701-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zennexis.norxevin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776062110, "uuid": "eb89c3d5-3702-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://buffmargi.norxevin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776062232, "uuid": "345f376b-3703-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.186.228.86:54618/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776062297, "uuid": "5ad85296-3703-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.117.225:35094/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776062647, "uuid": "2b3f61c6-3704-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://did8.qul2marox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776062770, "uuid": "7494189c-3704-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.197.8:53251/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776063008, "uuid": "02c32f8c-3705-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lywetogx.qul2marox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776063371, "uuid": "db315f78-3705-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.126.120.31:54022/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776063550, "uuid": "457b40ef-3706-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.63.246.36:49016/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776063788, "uuid": "d36301be-3706-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.168.250:58356/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776063792, "uuid": "d64afe2e-3706-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.183.196.223:57863/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776064394, "uuid": "3c9841ec-3708-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://w0rk3-wave.habe7dpermanent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776064396, "uuid": "3dcb7d61-3708-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.242.164.219:33668/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776064868, "uuid": "5774b60b-3709-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bandwi-span.conferen-cesman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776065354, "uuid": "78bc8c5a-370a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://trilith0en.rebutrew0rk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776065535, "uuid": "e5367157-370a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.160.33:35575/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776065831, "uuid": "95a4c466-370b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vivi3-watch.mucus-rafter.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776066078, "uuid": "28d70e0b-370c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.117.14:55300/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776066078, "uuid": "28d8e54f-370c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.48.216:42702/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776066138, "uuid": "4c25b8fe-370c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.2.184:58830/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776066317, "uuid": "b6f46dc7-370c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://flamemanifest.chandelh2lifa.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776066735, "uuid": "b02777df-370d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://neo-r0ck.danger-style.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776067212, "uuid": "cc7a9539-370e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://solspireum.insti1partition.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776067572, "uuid": "a2ea36f5-370f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rende7-beam.sanctua-ryunt.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776067878, "uuid": "59995c4d-3710-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.8.114:43027/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776068058, "uuid": "c48a1493-3710-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.202.1:55169/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776068410, "uuid": "964f3be3-3711-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.227.61.168:57443/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776068960, "uuid": "de25b853-3712-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.126.120.31:54022/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776069320, "uuid": "b501bffc-3713-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rende.sanctua-ryunt.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776069550, "uuid": "3debf983-3714-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.244.36.34:48579/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776069552, "uuid": "3f24ea97-3714-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.174.76.212:39558/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776069555, "uuid": "40eefd7d-3714-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://beam.sanctua-ryunt.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776069791, "uuid": "cd73214b-3714-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://defend.sanctua-ryunt.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776070332, "uuid": "102526f4-3716-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tp3gkrx.cry7adiophone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776070460, "uuid": "5cb57139-3716-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.125.141:60171/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776070750, "uuid": "090621e5-3717-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://freightdat.cry7adiophone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776070878, "uuid": "55c4492b-3717-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.180.13.85:45414/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776070939, "uuid": "7a3a09ff-3717-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.204.202:38778/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776071119, "uuid": "e554db18-3717-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.8.114:43027/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776071166, "uuid": "018dab70-3718-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://valeoptic.cry7adiophone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776071167, "uuid": "01fe557b-3718-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.174.76.212:39558/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776071255, "uuid": "36918604-3718-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.64.174.210:45719/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776071895, "uuid": "b3a76fcc-3719-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sfayxss.cry7adiophone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776072082, "uuid": "234ad654-371a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://meta-trust3d.cry7adiophone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776072131, "uuid": "40486aad-371a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.125.141:60171/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776072551, "uuid": "3a989bec-371b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nimbl-sheet.cry7adiophone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776072556, "uuid": "3dec5969-371b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.204.202:38778/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776072848, "uuid": "eba94c19-371b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.233.58:39587/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776073036, "uuid": "5be641d0-371c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://iwiax.personal-danger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776073224, "uuid": "cc009459-371c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.176.250.75:58181/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776073449, "uuid": "51c8ce81-371d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://qu0t6-trail.personal-danger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776073747, "uuid": "03bac733-371e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.144.60/Psd8eZaW/Plugins/cred64.dll", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776073816, "uuid": "2cebe603-371e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ghanioilandgas.com/ghanioilandgas.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776073865, "uuid": "49f80a83-371e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dpaste.com/AMA5CXNLK.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776073865, "uuid": "4a24e068-371e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dpaste.com/3VY69RY7J.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776073867, "uuid": "4b269289-371e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vp4psm.personal-danger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776073869, "uuid": "4ca8f9aa-371e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastefy.app/CLQ4FHyf/raw", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776073870, "uuid": "4cb7613c-371e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://alimqulov.uz/storage/buyruqlar/v1/client32.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776073870, "uuid": "4cc658ad-371e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://jxoov.stravexi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776073871, "uuid": "4d651d2e-371e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://composerefine.zeltorinax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776073871, "uuid": "4dc1b810-371e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastefy.app/eKkAgMVM/raw", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776073872, "uuid": "4e68827f-371e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://dpaste.com/AMA5CXNLK.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776073873, "uuid": "4e9aabdd-371e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://alimqulov.uz/storage/buyruqlar/v1/client32.ini", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776073875, "uuid": "4fa69f2a-371e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pwndrop.llcsintez-n.org/zKGorQDO/Built_Stub.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776073875, "uuid": "4fc6c621-371e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastefy.app/OJE0pV28/raw", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776073876, "uuid": "5086597e-371e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://alimqulov.uz/storage/buyruqlar/v1/NSM.lic", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776073877, "uuid": "50f61b30-371e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://velvale7on.vortaqen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776073877, "uuid": "51450ed8-371e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://q6ivtu.vortaqen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776073925, "uuid": "6dff9e0b-371e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lumvalea.kyno4rexil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776073930, "uuid": "7104fe3e-371e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bank-node.bankingrugnia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776073934, "uuid": "733290b4-371e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://869n.stravexi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776073940, "uuid": "76890363-371e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://loan-api.bankingrugnia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776073987, "uuid": "92da9ef8-371e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://view-vault.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776073988, "uuid": "934ee4ab-371e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cash-flow.bankingrugnia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776073990, "uuid": "9486f7c4-371e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://entity-node.ontocorex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776073990, "uuid": "9498c8d7-371e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://model-node.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776073997, "uuid": "98b644fc-371e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://safe-vault.bankingrugnia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776074048, "uuid": "b6f23611-371e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://matrix-vault.systemoraengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776074052, "uuid": "b96d6edb-371e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://velmarkis.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776074057, "uuid": "bc7622c6-371e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rep4-signal.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776074113, "uuid": "ddb9ac0b-371e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mind-hub.cogniversehub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776074114, "uuid": "de5b20a9-371e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://point-hub.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776074169, "uuid": "ff6481b4-371e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://theory-svc.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776074173, "uuid": "01d0efdb-371f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://space-gate.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776074177, "uuid": "03e2671b-371f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://layer-io.theorexuslayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776074226, "uuid": "21219fe0-371f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://thesis-vault.dialectraforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776074228, "uuid": "227e3a43-371f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://shift-svc.epistemiconflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776074229, "uuid": "2305db21-371f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://map-log.ontoversegrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776074235, "uuid": "269232ac-371f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://trust-gate.bankingrugnia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776074235, "uuid": "269a1ffc-371f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pay-svc.bankingrugnia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776074288, "uuid": "4614dcef-371f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-hub.ontocorex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776074289, "uuid": "470123c2-371f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://stream-svc.axiomatrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776074290, "uuid": "470d7dc8-371f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://link-gate.ontocorex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776074291, "uuid": "481d6461-371f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://shift-node.axiomatrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776074293, "uuid": "4919c0d2-371f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://matrix-flow.axiomatrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776074295, "uuid": "4a5cfce3-371f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://data-api.axiomatrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776074297, "uuid": "4b8ac3f9-371f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://root-svc.ontocorex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776074349, "uuid": "6a6d3718-371f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rule-node.systemoraengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776074353, "uuid": "6d14d7f5-371f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://00zk7cis.personal-danger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776074661, "uuid": "242e9114-3720-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.147.137.35:46748/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776074893, "uuid": "aec0ef02-3720-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pars-packe.personal-danger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776075318, "uuid": "ac35728f-3721-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mer-draex.personal-danger.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776075791, "uuid": "c5c259dd-3722-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://aliglagoo.babrevea1ing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776076036, "uuid": "581a5c4a-3723-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.42.192:51568/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776076216, "uuid": "c38a7932-3723-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cg892665.babrevea1ing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776076216, "uuid": "c396561b-3723-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.255.153:45388/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776076583, "uuid": "9dd18cd1-3724-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.9.228:60737/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776076631, "uuid": "ba807f44-3724-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.87.242:44666/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776076700, "uuid": "e387794a-3724-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://patterndelivery.babrevea1ing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776076820, "uuid": "2b3ec54a-3725-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.41.179:49897/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776076997, "uuid": "94d0fc8b-3725-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.106.8:47882/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077172, "uuid": "fd2514c5-3725-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zenforgeix.babrevea1ing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077472, "uuid": "afb302a7-3726-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://talk-node.dialectosphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077472, "uuid": "b01569d7-3726-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://think-node.cogniversehub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077473, "uuid": "b067d047-3726-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://logic-vault.noetisphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077531, "uuid": "d31959fa-3726-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://space-gate.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077532, "uuid": "d3dce91a-3726-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://core-hub.systemoraengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077534, "uuid": "d52d0d0b-3726-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mind-sync.noetisphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077537, "uuid": "d6ae5c8b-3726-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://trade-svc.ryesears.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077538, "uuid": "d770ea25-3726-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://global-io.noospherecore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077539, "uuid": "d7abfe5c-3726-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://order-svc.systemoraengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077539, "uuid": "d7d07153-3726-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pure-svc.noetisphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077540, "uuid": "d8afae37-3726-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.42.192:51568/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077541, "uuid": "d8dddf56-3726-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hub-gate.theorexuslayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077592, "uuid": "f7749e73-3726-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://view-vault.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077593, "uuid": "f7da45d6-3726-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sense-log.cogniversehub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077596, "uuid": "f9d91545-3726-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://point-hub.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077597, "uuid": "fa41d7aa-3726-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://engine-api.systemoraengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077599, "uuid": "fb7668f2-3726-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.133/bins/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077599, "uuid": "fb768188-3726-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.133/bins/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077599, "uuid": "fb76847f-3726-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.133/bins/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077599, "uuid": "fb76931b-3726-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.133/bins/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077599, "uuid": "fb769922-3726-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.133/bins/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077599, "uuid": "fb76a38e-3726-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.133/bins/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077599, "uuid": "fb76a7c6-3726-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.133/bins/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077599, "uuid": "fb76acfb-3726-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.133/bins/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077599, "uuid": "fb7828c6-3726-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.133/bins/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077600, "uuid": "fc6d8a29-3726-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://store-vault.ryesears.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077601, "uuid": "fca1cb3b-3726-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.133/bins/arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077602, "uuid": "fd6b8a49-3726-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://brain-gate.cogniversehub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077612, "uuid": "03a43442-3727-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.59.231.32/Hammz/Hammz.i468", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077646, "uuid": "17a61831-3727-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://theory-svc.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077650, "uuid": "1a1b57f1-3727-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://flow-data.epistemiconflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077650, "uuid": "1a215ff8-3727-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mind-sync.noospherecore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077650, "uuid": "1a2b035b-3727-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://crop-api.bereathfertil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077652, "uuid": "1b4ba993-3727-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://root-gate.ryesears.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077653, "uuid": "1ba325a4-3727-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://quormeshos3.babrevea1ing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077653, "uuid": "1be81eea-3727-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://debate-hub.dialectosphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077712, "uuid": "3eff81e0-3727-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://model-node.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077715, "uuid": "40895196-3727-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sphere-node.noetisphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077715, "uuid": "40c9ebc7-3727-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://view-svc.theorexuslayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077718, "uuid": "4256ee7e-3727-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://soil-hub.bereathfertil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077721, "uuid": "4494a7cc-3727-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://thought-api.noetisphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077722, "uuid": "450f46eb-3727-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vector-api.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077722, "uuid": "4515b553-3727-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://grid-core.ontoversegrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077723, "uuid": "4577d76d-3727-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://thesis-log.dialectosphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077765, "uuid": "5e4b84cf-3727-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://logic-gate.dialectraforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077769, "uuid": "61291f76-3727-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://world-api.ontoversegrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077771, "uuid": "6267b61a-3727-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://space-node.theorexuslayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077772, "uuid": "628d1f49-3727-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://base-svc.bereathfertil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077773, "uuid": "63363d6d-3727-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sphere-api.dialectosphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077773, "uuid": "6348bf6f-3727-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://grow-vault.bereathfertil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077776, "uuid": "64fdfd81-3727-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cell-vault.ontocorex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077777, "uuid": "65786124-3727-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://point-gate.axiomatrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077777, "uuid": "65795164-3727-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vector-svc.cogniversehub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077777, "uuid": "659f902b-3727-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://farm-api.ryesears.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077777, "uuid": "65a501ab-3727-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://unit-hub.axiomatrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077825, "uuid": "827e8e9a-3727-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://flux-svc.gnoseonflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077825, "uuid": "828cd03b-3727-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/8405865752/I0mTjOf.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077830, "uuid": "8507b06e-3727-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://grain-log.ryesears.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077833, "uuid": "86f260f6-3727-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://land-node.bereathfertil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776077891, "uuid": "a9747ae0-3727-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-gate.systemoraengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776078080, "uuid": "1a6f1c50-3728-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://deliveryquant.babrevea1ing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776078144, "uuid": "405190be-3728-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.255.153:45388/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776078322, "uuid": "aac3e796-3728-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.9.228:60737/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776078379, "uuid": "cc5d149a-3728-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.87.242:44666/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776078492, "uuid": "101b74d0-3729-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rnatr1-branch.attit-negligent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776078860, "uuid": "eaf643a1-3729-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.182.169:48355/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776079029, "uuid": "4fb4758e-372a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://royalvita.attit-negligent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776079388, "uuid": "25eff7fd-372b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dhcy36nr.attit-negligent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776079816, "uuid": "251ba6c1-372c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ynykxz.attit-negligent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776079940, "uuid": "6edda033-372c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.227.60:50168/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776080061, "uuid": "b6d04b75-372c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.190.222:39404/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776080242, "uuid": "22b25196-372d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.183.150:60468/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776080352, "uuid": "64c9814d-372d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.182.169:48355/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776080353, "uuid": "64dc2c8c-372d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zzqm.attit-negligent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776080470, "uuid": "ab0f2b78-372d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.239.249:57064/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776080541, "uuid": "d5302fee-372d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.82.99:55571/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776080779, "uuid": "6313c1c4-372e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://5tud1-zone.attit-negligent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776081251, "uuid": "7c34e6f2-372f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nimblcave.piculi5tep.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776081490, "uuid": "0b1cf217-3730-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.64.55:45537/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776081727, "uuid": "984a6436-3730-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://94auswsb.piculi5tep.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776081730, "uuid": "9a21fecb-3730-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.227.60:50168/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776081735, "uuid": "9d0490d8-3730-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.205.192:44857/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776081803, "uuid": "c51ce5ef-3730-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.71.28.128:48624/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776081919, "uuid": "0a8b2940-3731-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.183.150:60468/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776082032, "uuid": "4e104dc4-3731-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.71.28.128:48624/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776082153, "uuid": "95e7be11-3731-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gatewa1-wave.piculi5tep.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776082184, "uuid": "a85cf2c1-3731-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://adobeready.online/zip/download.php?file=original_payload.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776082265, "uuid": "d8aca675-3731-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/8079848160/OsnAGaf.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776082571, "uuid": "8f63d3da-3732-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mermeshar9.piculi5tep.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776082810, "uuid": "1d7495a6-3733-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.49.217.42/lk/bhaikEcn191.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776082997, "uuid": "8cf574b5-3733-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.123.29:57324/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776083053, "uuid": "ae3f3511-3733-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ertfu9pm.piculi5tep.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776083587, "uuid": "ed08c187-3734-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://loejfrw2.ignorelist.com/HotlifyCracked.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776083589, "uuid": "ede28ce4-3734-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://loejfrw2.ignorelist.com/opt/adm/lct/WinHos32.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776083589, "uuid": "ee2963ff-3734-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://loejfrw2.ignorelist.com/opt/adm/lct/Mont.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776083592, "uuid": "efce62d0-3734-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://loejfrw2.ignorelist.com/opt/adm/lct/shjef2aVFDe.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776083595, "uuid": "f1688046-3734-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://loejfrw2.ignorelist.com/opt/adm/lct/ssad4edD!4d.exe", "Tag": [ { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776083607, "uuid": "f8680fb3-3734-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://loejfrw2.ignorelist.com/Mont.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776083710, "uuid": "35dbfef1-3735-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.205.192:44857/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776083831, "uuid": "7e5d479f-3735-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://subtlemark.piculi5tep.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776083948, "uuid": "c3f9f054-3735-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.179.152.194:37784/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776084018, "uuid": "ed8e33b6-3735-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.235.81:40133/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776084127, "uuid": "2ed1356d-3736-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.159/clpr2.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776084128, "uuid": "2f0e5454-3736-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.159/ptp.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776084128, "uuid": "2f51a157-3736-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.159/inkrog.exe", "Tag": [ { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776084320, "uuid": "a18a7659-3736-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.180.15.35:60517/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776084371, "uuid": "c035fe4b-3736-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://keldraon.bell-extraterrit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776084486, "uuid": "044ee460-3737-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.104/crypted_x64.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776084486, "uuid": "044ee98c-3737-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.104/10.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776084610, "uuid": "4e94630e-3737-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ly12yqh.bell-extraterrit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776084849, "uuid": "dcb16ea1-3737-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://alt-br4ve.bell-extraterrit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776085098, "uuid": "714fc390-3738-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.123.29:57324/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776085150, "uuid": "90645433-3738-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.dropbox.com/scl/fi/6sd0a0od839wwehcndldi/Merluis-Setup-2.0.0.exe", "Tag": [ { "name": " BYOR", "colour": "#b95167", "exportable": true, "hide_tag": false }, { "name": " discord-scam", "colour": "#a52e3a", "exportable": true, "hide_tag": false }, { "name": " fake-game", "colour": "#9eb50e", "exportable": true, "hide_tag": false }, { "name": " infostealer", "colour": "#0254d5", "exportable": true, "hide_tag": false }, { "name": " rat", "colour": "#f3f3be", "exportable": true, "hide_tag": false }, { "name": "ZKM-Stealer", "colour": "#f59da6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776085268, "uuid": "d67d114e-3738-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://genorne-watch.bell-extraterrit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776085578, "uuid": "8f3cdb4b-3739-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://biom9-hinge.bell-extraterrit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776085639, "uuid": "b3ff243a-3739-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.105.39:37173/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776085698, "uuid": "d6c37eeb-3739-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.99.251:39980/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776085745, "uuid": "f2f97a78-3739-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://teslasuit.to/optimized_MSIforyu.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776085748, "uuid": "f4ca7cb1-3739-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://teslasuit.to/yunew.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776085749, "uuid": "f5551283-3739-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://valfanto.com/optimized_MSInewtoo.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776085752, "uuid": "f767fb04-3739-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://valfanto.com/img_080646dbnewvps.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776085815, "uuid": "1c79ea48-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-0a6599d7d6394e379b6da3d6bfb5354a.r2.dev/nenkin.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776085871, "uuid": "3ddf4011-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://form4t4-mount.echi6under.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776085992, "uuid": "86658802-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.130.75:44466/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776085994, "uuid": "877db841-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99131.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086049, "uuid": "a80a7b13-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20786.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086049, "uuid": "a80fd346-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_33091.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086049, "uuid": "a80fdfad-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_79569.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086049, "uuid": "a814eedd-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69452.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086049, "uuid": "a82bd4ac-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_33122.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086049, "uuid": "a82c00cf-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_61449.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086049, "uuid": "a83525d6-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_06716.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086049, "uuid": "a83526cf-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_02839.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086050, "uuid": "a9107b75-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_06585.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086051, "uuid": "a95fb819-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_12110.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086051, "uuid": "a99d8a7c-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_04811.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086051, "uuid": "a9a542e3-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_37248.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086051, "uuid": "a9a57cfd-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07693.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086051, "uuid": "a9a92cf1-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_38374.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086052, "uuid": "a9cbaa01-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07352.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086052, "uuid": "a9cc2ad8-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_43666.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086052, "uuid": "a9f354dd-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_62775.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086052, "uuid": "aa055880-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_56403.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086053, "uuid": "aa6f46ff-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_24993.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086055, "uuid": "abb7091b-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64898.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086055, "uuid": "abbd1ea0-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15283.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086055, "uuid": "ac1078cf-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68283.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086056, "uuid": "ac185c3d-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_34163.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086056, "uuid": "ac1a7930-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_30329.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086056, "uuid": "ac1ada25-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54776.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086056, "uuid": "ac25fbec-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_44883.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086056, "uuid": "ac2b501e-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72606.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086056, "uuid": "ac36088f-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13843.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086056, "uuid": "ac64124d-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_59180.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086056, "uuid": "ac781b9a-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20237.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086056, "uuid": "ac78424d-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_39804.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086057, "uuid": "acb263e9-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45405.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086057, "uuid": "acb3ccc3-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_23564.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086057, "uuid": "ad1337df-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_12510.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086057, "uuid": "ad1b8bfc-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13316.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086057, "uuid": "ad1d30a7-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_47796.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086057, "uuid": "ad441eab-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_66147.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086058, "uuid": "ad4ca859-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_42552.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086058, "uuid": "ad5e77d7-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_29496.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086058, "uuid": "ad6267f2-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_62609.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086058, "uuid": "ad6537bf-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68809.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086058, "uuid": "ad732937-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_14388.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086058, "uuid": "ad86a3da-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_61451.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086059, "uuid": "ae014545-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_03894.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086059, "uuid": "ae017594-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08373.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086059, "uuid": "ae36bfc0-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_46273.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086059, "uuid": "ae442cb6-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_61938.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086059, "uuid": "ae45771b-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45248.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086060, "uuid": "aed81244-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54837.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086060, "uuid": "af0645fe-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_27669.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086060, "uuid": "af064704-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_62963.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086061, "uuid": "af15cb3b-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_49515.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086062, "uuid": "b02cefca-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_73779.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086063, "uuid": "b067535e-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_78116.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086063, "uuid": "b0a3e7e0-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_73989.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086064, "uuid": "b0fab9ea-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_53894.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086064, "uuid": "b10b511d-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_25525.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086064, "uuid": "b121b1ec-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_27573.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086064, "uuid": "b165760d-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_78550.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086065, "uuid": "b178d332-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_14079.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086065, "uuid": "b182f362-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_53592.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086065, "uuid": "b18401e4-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08686.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086066, "uuid": "b2745409-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_43724.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086066, "uuid": "b27858e1-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69626.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086067, "uuid": "b2f0873f-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_25906.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086068, "uuid": "b362e9f5-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54122.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086068, "uuid": "b384edf8-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64830.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086068, "uuid": "b386ebda-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_17005.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086068, "uuid": "b398a6dd-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69981.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086068, "uuid": "b3ae8d37-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13097.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086068, "uuid": "b3b08a77-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_40082.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086068, "uuid": "b3b20626-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_60161.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086069, "uuid": "b401f4b2-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_17822.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086069, "uuid": "b4478f5f-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_09506.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086069, "uuid": "b447bda5-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_56406.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086069, "uuid": "b449915a-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45658.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086069, "uuid": "b4505d32-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_61111.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086070, "uuid": "b49a5aa3-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_59150.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086070, "uuid": "b49c1dbd-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_22845.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086070, "uuid": "b49eff9d-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_67465.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086070, "uuid": "b4dfb64a-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_40469.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086070, "uuid": "b4f49928-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/JoseTomas.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086070, "uuid": "b4fc7e27-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08811.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086070, "uuid": "b506b855-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_73024.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086071, "uuid": "b51c74c1-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_22301.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086071, "uuid": "b51c8c54-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_01812.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086071, "uuid": "b52af944-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_26730.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086071, "uuid": "b53d8e05-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_65803.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086071, "uuid": "b55ebcf9-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_01211.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086071, "uuid": "b56cde78-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_70894.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086071, "uuid": "b572d266-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_55459.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086072, "uuid": "b5d0fd36-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_01986.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086072, "uuid": "b5e5c5f1-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45793.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086072, "uuid": "b5f12568-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21559.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086072, "uuid": "b63564f1-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07712.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086073, "uuid": "b646d888-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_40358.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086073, "uuid": "b6bbe1ac-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_27329.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086074, "uuid": "b734632d-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_18344.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086074, "uuid": "b739ae0c-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72145.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086075, "uuid": "b784fa6d-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20396.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086075, "uuid": "b7851589-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_19180.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086075, "uuid": "b7851a8b-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_73549.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086075, "uuid": "b78eefc1-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_22996.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086075, "uuid": "b7a866d5-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_53501.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086075, "uuid": "b7b98b6f-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07212.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086075, "uuid": "b7ba3b20-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_26253.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086075, "uuid": "b7ba6fe0-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69394.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086076, "uuid": "b85d3012-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_67100.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086076, "uuid": "b86fcfb9-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_43024.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086077, "uuid": "b8dc13d0-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72788.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086077, "uuid": "b9280e8d-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_55648.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086078, "uuid": "b99b0b03-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_36331.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086078, "uuid": "b9a4cf4a-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_53430.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086078, "uuid": "b9ab09a9-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21012.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086078, "uuid": "b9afe74b-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_39203.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086078, "uuid": "b9b677e5-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_59903.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086078, "uuid": "b9be0af5-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_26701.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086079, "uuid": "ba38f515-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_28820.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086080, "uuid": "babf017c-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_70351.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086081, "uuid": "bb8eff6e-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_49929.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086082, "uuid": "bb99ecd6-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_34496.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086082, "uuid": "bbb60d30-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15965.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086082, "uuid": "bbb8e3b1-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_41200.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086082, "uuid": "bbcb6f43-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_02185.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086082, "uuid": "bbe26cdc-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_50999.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086082, "uuid": "bbf531ce-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07301.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086082, "uuid": "bc187287-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_63948.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086082, "uuid": "bc18a925-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_50818.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086083, "uuid": "bc35df26-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_00492.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086083, "uuid": "bc38801e-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_62565.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086083, "uuid": "bc96c194-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15181.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086083, "uuid": "bcbe33ca-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21490.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086084, "uuid": "bd115c83-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_47978.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086084, "uuid": "bd18a054-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64055.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086084, "uuid": "bd23caa9-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_01458.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086084, "uuid": "bd545f7c-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13579.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086084, "uuid": "bd5bb24a-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_75034.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086085, "uuid": "bdb81681-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72201.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086085, "uuid": "bdb91107-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_22533.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086085, "uuid": "bdce5da2-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_25723.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086085, "uuid": "bdcedc10-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_22600.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086085, "uuid": "bdd01bd1-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_16220.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086085, "uuid": "bdd32aef-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_24938.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086085, "uuid": "bdf23b86-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_16764.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086085, "uuid": "bdf6e3ab-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_04630.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086086, "uuid": "be65c50e-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_75025.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086086, "uuid": "be897d56-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_06949.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086087, "uuid": "be9731a8-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13720.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086087, "uuid": "bef8524c-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_39670.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086087, "uuid": "befa6214-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_74743.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086087, "uuid": "bf0ba1d0-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_55365.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086087, "uuid": "bf109e5b-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69212.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086087, "uuid": "bf14f0bb-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_23908.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086088, "uuid": "bf5f6f42-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_66742.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086088, "uuid": "bf68b2dd-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_52758.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086089, "uuid": "bffdbbb2-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69975.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086089, "uuid": "c00e9190-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_49317.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086089, "uuid": "c0213345-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68476.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086089, "uuid": "c054346e-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15098.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086089, "uuid": "c0543f83-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_41904.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086090, "uuid": "c05b13c6-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_47014.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086090, "uuid": "c06772a5-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_01577.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086090, "uuid": "c0722bd4-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_29996.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086090, "uuid": "c0b5686b-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13309.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086091, "uuid": "c1623bd2-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_77462.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086091, "uuid": "c1630865-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_01535.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086091, "uuid": "c16476ff-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_70376.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086091, "uuid": "c16479f1-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08380.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086091, "uuid": "c170a049-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_77494.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086091, "uuid": "c171bcca-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_12971.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086091, "uuid": "c1759f11-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_74209.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086091, "uuid": "c175aad3-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_73976.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086091, "uuid": "c175baf5-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_18088.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086094, "uuid": "c2d25405-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_60081.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086094, "uuid": "c2e26fa7-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_02643.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086094, "uuid": "c2e3ea52-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_36834.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086094, "uuid": "c2ea2784-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_28685.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086094, "uuid": "c2eb249e-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_63278.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086094, "uuid": "c31c182a-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_75813.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086095, "uuid": "c384d975-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_46899.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086096, "uuid": "c4371d4c-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_18811.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086096, "uuid": "c4378a14-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_41126.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086096, "uuid": "c44754e2-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_79294.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086096, "uuid": "c45ebe71-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_38966.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086096, "uuid": "c46176f1-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_16383.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086096, "uuid": "c4742b71-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_50628.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086096, "uuid": "c475d540-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_63265.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086096, "uuid": "c4782d41-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_19463.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086097, "uuid": "c4912176-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_35790.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086098, "uuid": "c52bb4bb-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72068.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086098, "uuid": "c56d0749-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_26591.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086098, "uuid": "c57a0d78-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_27177.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086098, "uuid": "c584fd46-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08683.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086098, "uuid": "c5a458fc-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20713.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086098, "uuid": "c5a5c008-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_80122.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086098, "uuid": "c5a60888-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_46359.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086098, "uuid": "c5b607da-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_26726.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086099, "uuid": "c6022903-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_49151.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086099, "uuid": "c6022a76-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_62931.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086099, "uuid": "c614b350-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_09934.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086099, "uuid": "c6486a6b-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_04878.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086100, "uuid": "c6815e3b-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_37131.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086100, "uuid": "c695c1af-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_76012.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086100, "uuid": "c69d010a-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13663.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086100, "uuid": "c6d23e6d-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_24198.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086101, "uuid": "c6f9c963-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_78413.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086101, "uuid": "c6face30-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68362.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086102, "uuid": "c7ada5ed-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_11286.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086103, "uuid": "c84655eb-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_47488.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086103, "uuid": "c8487fda-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69721.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086103, "uuid": "c8497340-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_79078.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086104, "uuid": "c8eeec0d-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_78394.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086104, "uuid": "c8f33e8c-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72520.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086104, "uuid": "c8f5956d-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_32532.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086104, "uuid": "c931e9a8-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54126.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086105, "uuid": "c9b509a7-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69918.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086106, "uuid": "c9ef9e5f-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_06235.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086106, "uuid": "c9fe5063-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_71572.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086106, "uuid": "ca62b331-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_53604.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086107, "uuid": "ca7eabc8-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_46358.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086107, "uuid": "caa5b84f-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_59685.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086107, "uuid": "cabe4c22-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_32763.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086107, "uuid": "cafc92d5-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_74570.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086107, "uuid": "cafe1a60-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_43152.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086107, "uuid": "cb09cec5-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_73308.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086108, "uuid": "cb21aaf7-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21336.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086108, "uuid": "cb414687-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_23536.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086108, "uuid": "cb51fee9-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_06087.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086108, "uuid": "cb71b32e-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_76835.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086108, "uuid": "cb7ec8fb-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_19796.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086108, "uuid": "cb912fae-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_57064.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086108, "uuid": "cb938ef3-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13186.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086109, "uuid": "cbc7e4ac-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_59517.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086109, "uuid": "cc1a4a1f-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08429.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086110, "uuid": "cc6bf0a8-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_43627.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086110, "uuid": "cc71d688-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_28403.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086110, "uuid": "cca326a9-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_26708.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086110, "uuid": "ccc3b9a1-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_34055.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086110, "uuid": "ccd6498c-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_25599.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086111, "uuid": "ccfaad43-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08820.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086111, "uuid": "cd1ee1a0-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54969.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086111, "uuid": "cd1fd2e2-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68793.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086113, "uuid": "ce4c463f-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_00279.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086113, "uuid": "ce5f68ad-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_49639.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086114, "uuid": "ceac4fca-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_71088.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086114, "uuid": "cee9d51c-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_65012.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086114, "uuid": "cf0249fd-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_65872.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086114, "uuid": "cf026a8e-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72160.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086114, "uuid": "cf3caf5d-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64040.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086115, "uuid": "cfc52365-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_33197.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086115, "uuid": "cfc8c272-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_26022.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086115, "uuid": "cfc8e7d0-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_62911.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086116, "uuid": "d02ba683-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_77949.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086116, "uuid": "d03358f9-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21473.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086116, "uuid": "d037f5e1-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_57896.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086116, "uuid": "d03a88fb-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_28608.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086116, "uuid": "d03f214b-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_77434.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086116, "uuid": "d03f2822-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_63128.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086116, "uuid": "d04b7fc2-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_00007.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086116, "uuid": "d04cb520-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_59474.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086116, "uuid": "d04e8970-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21927.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086116, "uuid": "d055aaca-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_28346.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086117, "uuid": "d08d4e7c-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_26097.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086117, "uuid": "d09ac682-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_27442.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086117, "uuid": "d0adfd81-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08788.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086118, "uuid": "d15108b6-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20314.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086118, "uuid": "d1985faa-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_56966.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086119, "uuid": "d1a69a20-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_18664.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086119, "uuid": "d224f5d4-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_40919.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086119, "uuid": "d2252735-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_25110.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086120, "uuid": "d2828914-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_76383.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086120, "uuid": "d28d5453-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_22739.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086120, "uuid": "d299f227-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_35807.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086120, "uuid": "d2b0e95e-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_56208.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086120, "uuid": "d2b833ef-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_11055.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086121, "uuid": "d34cfdbb-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68148.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086122, "uuid": "d3d9050c-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_31677.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086122, "uuid": "d3d99532-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_00088.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086122, "uuid": "d3fd9b23-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_23356.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086123, "uuid": "d416c594-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_14989.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086124, "uuid": "d4b2887e-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_12549.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086124, "uuid": "d4be914b-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_66268.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086124, "uuid": "d4bebfda-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64549.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086124, "uuid": "d4c332f1-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_48752.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086124, "uuid": "d4c33914-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_27129.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086124, "uuid": "d4c3a518-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_36347.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086124, "uuid": "d4c3ad8b-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_19872.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086125, "uuid": "d5625381-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_46395.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086125, "uuid": "d56441aa-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_50149.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086125, "uuid": "d5b29c9d-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_74798.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086125, "uuid": "d5b300af-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_10539.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086126, "uuid": "d5ecabb6-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07384.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086128, "uuid": "d717b9e5-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68221.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086128, "uuid": "d71f2692-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_18177.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086128, "uuid": "d71f6bc5-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_03674.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086128, "uuid": "d72886af-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_00826.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086128, "uuid": "d728bebb-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_18701.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086128, "uuid": "d7290005-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_36722.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086128, "uuid": "d72951b7-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_62563.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086128, "uuid": "d74cc0c9-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_55259.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086128, "uuid": "d7684955-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_49196.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086129, "uuid": "d7c00243-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45629.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086129, "uuid": "d7fc5af7-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_78515.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086129, "uuid": "d82684f4-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_16922.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086129, "uuid": "d826ed5e-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_67925.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086129, "uuid": "d82f4725-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_65651.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086130, "uuid": "d839ec44-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72999.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086130, "uuid": "d83e9653-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_04829.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086130, "uuid": "d85aeaa6-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08074.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086134, "uuid": "daed292f-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_60401.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086136, "uuid": "dbfe4ca6-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_52297.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086136, "uuid": "dc5819f1-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_37964.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086140, "uuid": "de46a4d4-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_00535.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086140, "uuid": "de4c7425-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_11369.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086140, "uuid": "de4fd0b4-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_51894.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086140, "uuid": "de530888-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72679.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086140, "uuid": "de5e4ceb-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_76995.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086140, "uuid": "de62c192-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_55292.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086140, "uuid": "de6fe6b2-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64538.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086140, "uuid": "de92d7f8-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_67033.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086140, "uuid": "de93765d-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_18892.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086140, "uuid": "dea9b56d-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68622.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086141, "uuid": "deef48ee-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_12397.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086141, "uuid": "deef9984-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_31048.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086141, "uuid": "def08007-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_44090.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086141, "uuid": "df00d05b-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_43919.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086141, "uuid": "df055313-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_58844.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086141, "uuid": "df066075-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_44587.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086141, "uuid": "df08fde9-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_56048.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086141, "uuid": "df09198b-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07853.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086141, "uuid": "df093155-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54154.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086141, "uuid": "df09c8db-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72892.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086141, "uuid": "df09d1fa-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_73959.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086141, "uuid": "df0a09ca-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_12487.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086141, "uuid": "df0a4001-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_31268.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086141, "uuid": "df0a42bd-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20137.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086141, "uuid": "df0ad702-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_71339.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086141, "uuid": "df0aff89-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_22704.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086141, "uuid": "df0b6949-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_77813.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086141, "uuid": "df0efd95-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08939.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086141, "uuid": "df0f10e5-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_26463.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086141, "uuid": "df0f1475-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07828.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086141, "uuid": "df15d1be-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_28026.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086141, "uuid": "df172954-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_06835.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086141, "uuid": "df1fab49-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64307.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086144, "uuid": "e112b86f-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_28076.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086145, "uuid": "e12331f6-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_34916.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086145, "uuid": "e1b10a05-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_48796.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086146, "uuid": "e1e7f045-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68359.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086146, "uuid": "e1e8167a-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_60967.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086146, "uuid": "e1e82d39-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_25276.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086146, "uuid": "e2482a0b-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_67328.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086146, "uuid": "e248573c-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07013.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086147, "uuid": "e2777111-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_11740.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086147, "uuid": "e27a6801-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08999.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086148, "uuid": "e3349b5a-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_77773.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086148, "uuid": "e36c2d5b-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07505.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086148, "uuid": "e3713055-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_39818.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086148, "uuid": "e38527bf-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_31475.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086149, "uuid": "e3af718a-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_62511.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086149, "uuid": "e3b4c092-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_58173.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086149, "uuid": "e3bd0026-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_61896.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086149, "uuid": "e3bd19c2-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_71885.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086149, "uuid": "e3cc9600-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_52809.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086149, "uuid": "e3dd9400-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08117.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086149, "uuid": "e40acd71-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_73678.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086150, "uuid": "e4afbe09-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_43581.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086151, "uuid": "e52d0485-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45309.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086151, "uuid": "e52e1d1d-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15848.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086151, "uuid": "e5400564-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_70256.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086152, "uuid": "e5626ae5-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_50298.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086152, "uuid": "e5627915-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_01355.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086152, "uuid": "e562e115-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_11651.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086152, "uuid": "e5913c1e-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_18487.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086152, "uuid": "e5ac9acd-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15608.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086152, "uuid": "e5baff67-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20126.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086152, "uuid": "e5bb060a-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_18258.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086152, "uuid": "e5bfc387-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_28332.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086152, "uuid": "e5c72782-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_30450.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086152, "uuid": "e5c7bc75-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07400.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086153, "uuid": "e6114c52-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69740.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086153, "uuid": "e613db5c-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_05895.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086154, "uuid": "e711dee2-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_36728.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086155, "uuid": "e71c447b-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_60666.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086155, "uuid": "e71ce6b7-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_03497.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086155, "uuid": "e7211040-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_16430.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086155, "uuid": "e72dda2f-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_03767.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086155, "uuid": "e72df421-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_24086.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086156, "uuid": "e7b97424-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_17823.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086156, "uuid": "e7bc3bfc-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_47630.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086157, "uuid": "e8846d82-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_77914.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086157, "uuid": "e8850584-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_23919.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086157, "uuid": "e885ba5b-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45349.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086157, "uuid": "e885c7b5-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_37616.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086157, "uuid": "e885ea80-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_01622.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086157, "uuid": "e885ecbd-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_22174.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086157, "uuid": "e885f89f-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_57473.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086157, "uuid": "e8e0cbc5-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_37394.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086158, "uuid": "e96c6869-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_10718.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086158, "uuid": "e979861b-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68583.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086159, "uuid": "e97c4ccc-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72883.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086159, "uuid": "e980b927-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_24901.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086160, "uuid": "ea1f18a8-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_48879.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086161, "uuid": "eaf13b82-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68501.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086162, "uuid": "eb5a8eb5-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_61762.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086162, "uuid": "eb644a12-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15314.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086162, "uuid": "eb64d125-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_77802.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086163, "uuid": "ec07a03e-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_41604.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086163, "uuid": "ec2ddae4-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08859.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086164, "uuid": "ec82b57f-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_12525.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086164, "uuid": "ecb59857-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_52315.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086164, "uuid": "ecb99ec7-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21974.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086164, "uuid": "eccf5c4e-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_10936.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086165, "uuid": "ed4c1e0b-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15163.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086165, "uuid": "eda4b836-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_02881.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086166, "uuid": "eda81bd8-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_52073.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086166, "uuid": "ee0b8bea-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_66234.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086167, "uuid": "ee8fbe46-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_11549.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086167, "uuid": "eea501e1-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_40134.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086167, "uuid": "eea5262b-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_35769.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086167, "uuid": "eec6549c-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20882.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086168, "uuid": "eee24384-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_19977.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086168, "uuid": "eefa332a-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15217.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086168, "uuid": "eefa7a84-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_60502.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086168, "uuid": "eeffc830-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_55953.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086168, "uuid": "ef02b16c-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_16010.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086168, "uuid": "ef02e5b4-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_59572.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086168, "uuid": "ef11c552-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15861.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086168, "uuid": "ef188cc1-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_19556.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086168, "uuid": "ef1951d3-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68667.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086168, "uuid": "ef43997b-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_05194.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086169, "uuid": "ef9bc1d8-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_23744.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086169, "uuid": "efa2b37f-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_38901.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086169, "uuid": "efb66ddb-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_38899.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086169, "uuid": "efb68929-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_43188.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086170, "uuid": "f037764d-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_30968.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086171, "uuid": "f0c19c3a-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_10789.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086171, "uuid": "f10142b9-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_73011.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086171, "uuid": "f101a658-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_24070.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086172, "uuid": "f13d17f7-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_35000.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086173, "uuid": "f1df7511-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21603.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086173, "uuid": "f24809a3-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_02148.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086174, "uuid": "f272cbac-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_03796.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086174, "uuid": "f2747dc4-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_50289.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086174, "uuid": "f27e81bd-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_43634.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086174, "uuid": "f2c7df9d-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_10888.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086174, "uuid": "f2d26c9a-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_25736.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086174, "uuid": "f2d30172-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_41668.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086175, "uuid": "f31c14dd-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_05941.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086175, "uuid": "f366d39f-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_52843.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086175, "uuid": "f37d97f2-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_28358.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086175, "uuid": "f38ff828-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_43388.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086175, "uuid": "f390d0a7-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_30425.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086176, "uuid": "f427e740-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_47384.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086176, "uuid": "f43393a2-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_06113.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086177, "uuid": "f4553618-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_24663.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086177, "uuid": "f4556b62-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_52221.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086177, "uuid": "f480b3ca-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_50931.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086177, "uuid": "f48b43c4-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_01899.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086177, "uuid": "f48f20e0-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_60056.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086177, "uuid": "f493d23c-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_37707.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086177, "uuid": "f499028f-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69167.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086177, "uuid": "f4a30a95-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_59665.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086177, "uuid": "f4a321fb-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_29943.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086177, "uuid": "f4a3af79-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_27247.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086178, "uuid": "f4e31924-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_18869.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086178, "uuid": "f522aa82-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_77324.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086179, "uuid": "f575b9a0-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_73129.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086179, "uuid": "f5988baa-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54542.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086179, "uuid": "f59fd20d-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_74028.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086179, "uuid": "f5a92417-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_33337.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086179, "uuid": "f5e95b80-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_29513.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086179, "uuid": "f5eb86ce-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20035.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086180, "uuid": "f63a2d47-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_49178.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086180, "uuid": "f650b1df-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_50144.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086180, "uuid": "f65c6ec5-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_30908.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086180, "uuid": "f683ef70-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_44107.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086181, "uuid": "f6fafc99-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_55147.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086181, "uuid": "f6fb09b6-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_71512.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086182, "uuid": "f7580416-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_42426.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086182, "uuid": "f75ed7c5-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45698.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086182, "uuid": "f7831b2b-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_39368.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086182, "uuid": "f7832089-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_37612.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086183, "uuid": "f7d1fcf1-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45276.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086183, "uuid": "f84ee85b-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_39600.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086183, "uuid": "f854f77f-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_49780.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086183, "uuid": "f85771c4-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20296.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086184, "uuid": "f8b2fe21-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64761.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086184, "uuid": "f8b31140-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_57655.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086184, "uuid": "f8bd79a0-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_46475.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086184, "uuid": "f8bda622-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_47537.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086185, "uuid": "f911b127-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_17562.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086185, "uuid": "f9129c79-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_70618.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086187, "uuid": "fa883d29-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_61212.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086187, "uuid": "fa8872d1-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_79597.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086187, "uuid": "fa95d6f7-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_53051.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086187, "uuid": "fa95f5a1-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54467.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086187, "uuid": "fac23d2c-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_41312.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086188, "uuid": "fad08442-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_57352.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086188, "uuid": "fad1d38c-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07367.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086188, "uuid": "fad22e75-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_02024.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086188, "uuid": "fadb4317-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_65304.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086188, "uuid": "fae39304-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20295.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086189, "uuid": "fbc0baba-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_33845.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086189, "uuid": "fbd4da42-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_17312.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086190, "uuid": "fc71a885-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_12660.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086190, "uuid": "fc8b26db-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_37816.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086191, "uuid": "fc921a4d-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_44238.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086191, "uuid": "fc95e143-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_63675.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086191, "uuid": "fc96318b-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_23255.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086191, "uuid": "fc96f314-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_33967.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086191, "uuid": "fcaf4421-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_25188.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086191, "uuid": "fcb12a9a-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_38075.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086191, "uuid": "fce5c95a-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_46415.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086191, "uuid": "fce61155-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_10319.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086191, "uuid": "fd07ac19-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15791.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086192, "uuid": "fd75afa3-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_60726.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086192, "uuid": "fd7be412-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69149.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086192, "uuid": "fd942df3-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_76148.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086192, "uuid": "fda7732d-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_67655.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086192, "uuid": "fdaf31d2-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_41495.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086192, "uuid": "fdb4f8db-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_09953.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086192, "uuid": "fdbdd18b-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_19266.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086193, "uuid": "fdd7e964-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_33769.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086193, "uuid": "fdda4b88-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_35795.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086193, "uuid": "fdf37729-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_35403.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086194, "uuid": "fe838d97-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_78106.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086194, "uuid": "feaf6e3a-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_48154.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086194, "uuid": "feee4a16-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54535.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086194, "uuid": "feef7fd6-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_71405.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086195, "uuid": "ff3ec834-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_01788.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086195, "uuid": "ff61753e-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_00142.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086195, "uuid": "ff6437b5-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_56161.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086195, "uuid": "ff7beeee-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_42322.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086195, "uuid": "ff830882-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_31218.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086196, "uuid": "ff9a0c37-373a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_38954.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086197, "uuid": "00952188-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_05801.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086197, "uuid": "0096d6fd-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_51171.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086197, "uuid": "009ace72-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64266.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086197, "uuid": "009b252f-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_79483.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086197, "uuid": "00a5522e-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_46031.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086197, "uuid": "00a5f709-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_02324.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086197, "uuid": "00a6972e-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_59828.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086197, "uuid": "00b0982e-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_34235.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086198, "uuid": "00d6fd8f-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_22807.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086198, "uuid": "00e33920-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_05947.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086198, "uuid": "0102695c-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_57557.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086198, "uuid": "01028a1a-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_16272.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086199, "uuid": "019ca40c-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_36782.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086199, "uuid": "01a614de-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_36677.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086201, "uuid": "02c3f5c3-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_24978.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086201, "uuid": "02c428c0-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69962.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086201, "uuid": "02e75359-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15837.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086201, "uuid": "02e94875-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_49889.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086202, "uuid": "03a220de-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_27245.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086202, "uuid": "03a65aa2-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_65225.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086203, "uuid": "03da7f90-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_35478.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086203, "uuid": "03f7bb75-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08667.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086203, "uuid": "040ef36b-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_11594.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086203, "uuid": "040f20b5-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_53196.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086203, "uuid": "042909e2-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_66425.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086203, "uuid": "043296d5-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_03478.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086203, "uuid": "04329856-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_48499.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086203, "uuid": "04333fe6-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54606.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086203, "uuid": "043a5509-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_16464.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086204, "uuid": "045c4f29-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_38427.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086204, "uuid": "04608c90-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_75892.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086204, "uuid": "04738046-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_79681.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086204, "uuid": "0477043c-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72346.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086204, "uuid": "048acc28-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_10931.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086204, "uuid": "049e1701-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21463.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086206, "uuid": "05882b78-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_17662.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086206, "uuid": "0590ea12-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54935.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086206, "uuid": "0597c8c4-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_34305.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086206, "uuid": "05a0fc28-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64220.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086206, "uuid": "05d8b9f2-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15388.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086206, "uuid": "05d9e0ba-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_02162.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086207, "uuid": "066625f4-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_34561.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086207, "uuid": "0696e9d8-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64432.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086211, "uuid": "08839a75-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_46190.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086211, "uuid": "089d6ef3-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_24655.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086211, "uuid": "089e84df-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_76760.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086211, "uuid": "08a9a64c-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_00620.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086211, "uuid": "08b6e437-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_79811.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086211, "uuid": "08c2123c-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_03569.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086211, "uuid": "08c98de1-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_57350.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086211, "uuid": "08c99af2-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_52435.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086211, "uuid": "08c9bf0f-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_02192.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086211, "uuid": "08ce839e-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45429.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086211, "uuid": "08d9133b-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_10624.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086211, "uuid": "08d92c45-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_31816.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086211, "uuid": "08d9c397-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_06705.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086211, "uuid": "08fe229e-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_41093.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086212, "uuid": "096b926e-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21415.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086212, "uuid": "09768425-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_61120.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086212, "uuid": "09768795-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_51173.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086212, "uuid": "09769d14-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_36175.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086212, "uuid": "09874ff4-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_04263.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086213, "uuid": "09d3650a-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_16459.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086213, "uuid": "09f111ee-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13302.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086213, "uuid": "0a01e57b-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_79849.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086213, "uuid": "0a08e875-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_04008.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086215, "uuid": "0b674799-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_24820.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086216, "uuid": "0bbfcff8-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69254.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086217, "uuid": "0c538e6b-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20299.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086218, "uuid": "0cb4aff9-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_37383.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086218, "uuid": "0cc45682-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_36597.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086218, "uuid": "0cd3d224-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_57990.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086218, "uuid": "0cd3f5b2-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_60727.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086218, "uuid": "0cf5bedf-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_46084.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086218, "uuid": "0cfe4984-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_39469.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086218, "uuid": "0d138a04-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_36406.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086218, "uuid": "0d13a183-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_00231.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086218, "uuid": "0d37f8ed-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_25490.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086218, "uuid": "0d38ec8d-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68656.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086218, "uuid": "0d393331-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_41620.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086219, "uuid": "0d7c5842-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_42486.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086220, "uuid": "0df45319-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_06020.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086220, "uuid": "0e0f10a5-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_47973.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086220, "uuid": "0e0f2429-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45012.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086220, "uuid": "0e1f3d84-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_56400.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086220, "uuid": "0e2a41dc-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_47111.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086220, "uuid": "0e386386-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_22872.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086220, "uuid": "0e389c09-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_28210.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086220, "uuid": "0e3ceabe-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_17665.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086220, "uuid": "0e400d08-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_31160.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086220, "uuid": "0e47ba6b-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45753.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086220, "uuid": "0e552ffd-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_23430.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086220, "uuid": "0e5ec473-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_62809.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086220, "uuid": "0e5ecefc-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_23911.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086221, "uuid": "0e9ca90c-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_30736.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086221, "uuid": "0ed2dc3c-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_60763.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086222, "uuid": "0f6e333c-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_01796.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086222, "uuid": "0f75eb80-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68947.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086222, "uuid": "0f810e96-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_48040.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086223, "uuid": "0fffc802-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72715.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086223, "uuid": "0fffd731-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_52860.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086223, "uuid": "101cf869-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_70818.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086223, "uuid": "1032b052-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_78812.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086223, "uuid": "10330f46-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_34784.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086223, "uuid": "10397bd8-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_58115.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086224, "uuid": "103a0398-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_63640.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086225, "uuid": "10f827b1-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_53098.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086225, "uuid": "11161908-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_09625.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086225, "uuid": "11161930-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_33018.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086226, "uuid": "11d0ee48-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_74348.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086226, "uuid": "11de33df-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_23840.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086228, "uuid": "12b30362-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_60555.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086228, "uuid": "12ba953f-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_77272.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086230, "uuid": "13cd4cfe-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54805.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086230, "uuid": "1412dd30-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_50616.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086230, "uuid": "141a4131-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21152.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086230, "uuid": "142b42ba-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_66262.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086230, "uuid": "1438f2e0-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64948.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086230, "uuid": "1438f5b8-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15833.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086230, "uuid": "143984fc-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_55691.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086230, "uuid": "143a4c28-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_06239.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086230, "uuid": "143b641e-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_74229.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086231, "uuid": "14d0c06d-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20799.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086231, "uuid": "14eca224-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69035.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086231, "uuid": "14f79609-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_27995.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086232, "uuid": "152193a8-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_26917.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086232, "uuid": "1548f998-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08622.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086232, "uuid": "154972c2-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_55337.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086232, "uuid": "154fa47a-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07793.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086232, "uuid": "154fb8b0-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_38670.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086232, "uuid": "1560ab07-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_77303.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086232, "uuid": "15857d25-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_05816.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086233, "uuid": "15a1a18e-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_60163.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086233, "uuid": "15a70f54-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_56298.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086233, "uuid": "1616a844-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_42022.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086233, "uuid": "1616ac40-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_34096.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086233, "uuid": "161cf094-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_37826.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086233, "uuid": "161d6a41-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_34293.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086234, "uuid": "164019a6-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72579.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086234, "uuid": "16442852-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72800.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086234, "uuid": "16862ba6-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72333.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086234, "uuid": "16a5d751-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45694.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086235, "uuid": "16d4064f-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_06290.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086235, "uuid": "16dbfafa-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_70706.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086235, "uuid": "1714651a-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_22166.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086235, "uuid": "17146819-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21763.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086235, "uuid": "172c14bc-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_12317.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086235, "uuid": "1736933b-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_75982.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086236, "uuid": "1794c004-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_70273.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086238, "uuid": "18cb7edb-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_24764.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086238, "uuid": "18cc5769-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_06072.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086238, "uuid": "18cd98c1-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_02259.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086238, "uuid": "18fffc09-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_27140.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086238, "uuid": "19079b51-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_17113.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086238, "uuid": "1913d9d8-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_36223.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086240, "uuid": "19f2464d-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_43756.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086240, "uuid": "19fbf0d0-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13802.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086240, "uuid": "1a2cdced-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_76404.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086241, "uuid": "1ad21d3e-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_39773.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086242, "uuid": "1af9d008-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_29854.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086242, "uuid": "1b385a5e-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21024.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086242, "uuid": "1b385c7e-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_38832.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086242, "uuid": "1b52ed6c-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_35369.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086242, "uuid": "1b72e9e3-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_01673.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086242, "uuid": "1b7bb876-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_23593.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086242, "uuid": "1b7bbae0-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72493.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086243, "uuid": "1b92e508-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20859.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086243, "uuid": "1badbdd7-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_12570.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086243, "uuid": "1c042e9f-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_65349.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086243, "uuid": "1c14ca60-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_53313.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086243, "uuid": "1c18489b-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_46586.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086243, "uuid": "1c19a284-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_50934.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086244, "uuid": "1c3a10e0-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_71145.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086244, "uuid": "1c6d4870-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_66017.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086244, "uuid": "1c717347-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_52326.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086244, "uuid": "1c770aea-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_61627.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086244, "uuid": "1c7811da-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_40212.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086244, "uuid": "1cb2fe94-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_36769.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086244, "uuid": "1cbb2e16-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13881.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086244, "uuid": "1cbd0ce4-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_71207.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086244, "uuid": "1cbd956d-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_53631.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086245, "uuid": "1cdc595c-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08335.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086246, "uuid": "1d717f13-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_63451.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086246, "uuid": "1d998a05-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_67130.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086246, "uuid": "1d9b7b11-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54354.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086248, "uuid": "1f1dfbe4-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_03331.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086249, "uuid": "1f2bf08b-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_31225.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086249, "uuid": "1f48d724-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_52937.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086249, "uuid": "1f49ed13-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_49326.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086249, "uuid": "1f78f240-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_66977.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086249, "uuid": "1f7a5bb7-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_16480.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086249, "uuid": "1f9a0590-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13236.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086249, "uuid": "1f9a912b-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_03117.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086249, "uuid": "1f9f12a3-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_66723.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086250, "uuid": "200fbace-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_00757.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086251, "uuid": "205ca953-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_66250.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086251, "uuid": "2063592a-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13235.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086251, "uuid": "20635a76-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_66758.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086251, "uuid": "20a9e839-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_70402.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086251, "uuid": "20ab32ec-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_53097.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086251, "uuid": "20cb994b-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_55920.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086251, "uuid": "20d795ae-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_75496.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086251, "uuid": "20da20b2-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_63809.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086252, "uuid": "21660bbb-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_79342.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086252, "uuid": "2174c032-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_33853.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086252, "uuid": "217fe6ca-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_23580.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086253, "uuid": "218c3ec8-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_48547.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086253, "uuid": "21b8e33d-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_43572.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086253, "uuid": "21c2f59c-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_65740.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086254, "uuid": "228c7435-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_05378.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086254, "uuid": "22a4cc41-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_62843.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086255, "uuid": "22ee6a0f-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_39574.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776086255, "uuid": "23185c18-373b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_63667.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087010, "uuid": "e53cdf87-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_43666.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087011, "uuid": "e594b3c7-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_01622.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087011, "uuid": "e595724c-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07505.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087011, "uuid": "e59613c4-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96539.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087011, "uuid": "e59931f6-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/JoseTomas.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087011, "uuid": "e5cc5e0b-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_10539.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087011, "uuid": "e5cf7dd1-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_52435.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087011, "uuid": "e5d20ba3-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_88971.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087012, "uuid": "e5f67c0f-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_84428.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087013, "uuid": "e6a53587-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_42322.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087013, "uuid": "e6a736af-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68809.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087013, "uuid": "e6ff03c4-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72493.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087013, "uuid": "e705ef0e-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_01622.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087013, "uuid": "e716adc4-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87519.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087014, "uuid": "e71a93fa-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_39670.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087014, "uuid": "e71d1e52-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08335.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087014, "uuid": "e72109a2-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_00231.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087014, "uuid": "e7220704-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_52297.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087014, "uuid": "e77f610a-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87554.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087014, "uuid": "e77f9ed0-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99131.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087016, "uuid": "e86ac86f-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_77494.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087016, "uuid": "e88e2e61-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_49889.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087016, "uuid": "e89c0927-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_35769.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087016, "uuid": "e8d60536-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_94601.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087018, "uuid": "e97f63c8-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_36728.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087018, "uuid": "e97f82af-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_43152.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087018, "uuid": "e9dd1f0f-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96477.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087018, "uuid": "e9fbb1c6-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15848.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087018, "uuid": "ea05cae9-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_49178.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087018, "uuid": "ea05dd2e-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68622.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087019, "uuid": "ea21e476-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_86842.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087019, "uuid": "ea5ab1d2-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72606.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087019, "uuid": "ea5b60a2-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_53051.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087019, "uuid": "ea5f1fb8-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_78812.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087019, "uuid": "ea75efb2-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08788.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087020, "uuid": "eae68796-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_77434.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087020, "uuid": "eae76953-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_70894.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087020, "uuid": "eb439620-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_23919.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087020, "uuid": "eb445073-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_83467.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087021, "uuid": "eb46f5b7-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_49639.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087021, "uuid": "eb4756f3-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45248.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087021, "uuid": "eb728d41-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_98882.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087021, "uuid": "eb8421e1-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_90950.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087021, "uuid": "ebab2619-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64266.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087021, "uuid": "ebbfe80c-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_88278.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087022, "uuid": "ec55a076-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_98937.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087025, "uuid": "edd73c55-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_98882.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087025, "uuid": "edf165ff-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81245.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087025, "uuid": "ee032101-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72579.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087025, "uuid": "ee40e69b-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_30736.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087027, "uuid": "eeda9c84-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_91107.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087027, "uuid": "eef3bc38-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07301.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087027, "uuid": "eef447d8-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_78106.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087027, "uuid": "eef7a6ae-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://capi-recor.echi6under.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087027, "uuid": "ef6768d5-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_02185.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087028, "uuid": "ef839dfa-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45698.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087028, "uuid": "efa985dc-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08117.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087028, "uuid": "efad9955-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_82208.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087028, "uuid": "efdf2133-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_10888.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087028, "uuid": "efe753a8-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_31268.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087028, "uuid": "efff3c2a-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_05895.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087028, "uuid": "f000a314-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_95365.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087028, "uuid": "f003ea57-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54935.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087028, "uuid": "f0058bb8-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_55292.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087029, "uuid": "f063fc6d-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_78394.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087029, "uuid": "f06902f2-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81271.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087029, "uuid": "f07f6d6b-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_61451.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087029, "uuid": "f07f6e61-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_37612.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087029, "uuid": "f07f7803-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_38901.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087029, "uuid": "f07f7eae-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_33853.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087029, "uuid": "f09fcaec-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_58844.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087030, "uuid": "f12b6189-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21490.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087031, "uuid": "f14177fc-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_10936.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087031, "uuid": "f14366ea-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_14388.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087031, "uuid": "f1c9b29f-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_27329.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087033, "uuid": "f2753b2a-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_53592.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087033, "uuid": "f283be60-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_47796.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087033, "uuid": "f2a7a05d-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.12.83.76/55/goodforbestthings.js", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087033, "uuid": "f2c7b840-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_06235.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087033, "uuid": "f2eca4ac-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_38899.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087033, "uuid": "f2ee319d-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_67100.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087033, "uuid": "f2f38475-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96539.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087033, "uuid": "f2f39cba-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87547.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087034, "uuid": "f325cad0-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64898.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087034, "uuid": "f32edccd-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21024.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087034, "uuid": "f36b9ffc-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13235.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087034, "uuid": "f36ce551-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_50149.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087034, "uuid": "f36e059c-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07693.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087034, "uuid": "f38b83ec-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_30329.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087035, "uuid": "f3d01177-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_98775.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087035, "uuid": "f434f27c-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_91484.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087036, "uuid": "f43bd6a5-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_73959.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087036, "uuid": "f459cb73-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_61451.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087036, "uuid": "f45ac448-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_82041.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087036, "uuid": "f4676435-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_85369.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087036, "uuid": "f48e0b67-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_66250.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087036, "uuid": "f4a3e0b6-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_62609.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087037, "uuid": "f51565b3-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21763.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087037, "uuid": "f5159840-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21974.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087037, "uuid": "f54a98c4-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72201.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087037, "uuid": "f54d17e8-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_74348.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087038, "uuid": "f583916f-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_04008.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087038, "uuid": "f583b660-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15314.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087038, "uuid": "f598cc0f-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_12549.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087039, "uuid": "f6497c8a-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_75813.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087039, "uuid": "f67535d2-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_82276.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087039, "uuid": "f67773b3-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_47384.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087040, "uuid": "f69a5069-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69167.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087040, "uuid": "f6b5bc1e-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81040.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087041, "uuid": "f757f1a0-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96498.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087041, "uuid": "f7648170-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45309.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087041, "uuid": "f776e0fb-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_01673.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087041, "uuid": "f776ee4f-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96783.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087041, "uuid": "f783a164-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08939.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087041, "uuid": "f78d5836-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_12549.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087041, "uuid": "f7a2f0a7-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_34784.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087041, "uuid": "f7ab4d86-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_79569.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087042, "uuid": "f7cdcb7c-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_46415.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087042, "uuid": "f7cdcc4b-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_98790.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087044, "uuid": "f95d704a-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_11740.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087044, "uuid": "f97a4daa-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_40469.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087044, "uuid": "f98273a9-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81547.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087045, "uuid": "fa237102-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08788.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087045, "uuid": "fa262366-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81867.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087046, "uuid": "fa3113db-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_01788.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087046, "uuid": "fa3ed7f6-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07950.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087046, "uuid": "fa9bcc27-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_34305.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087048, "uuid": "fbaa3b32-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99433.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087048, "uuid": "fbaf46f8-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_59828.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087048, "uuid": "fbb42211-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81050.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087048, "uuid": "fbb44228-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_62565.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087048, "uuid": "fbc09e13-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_03674.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087048, "uuid": "fbc4eeee-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_28346.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087048, "uuid": "fbc4f3a1-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96939.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087048, "uuid": "fbc4f61b-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_93523.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087048, "uuid": "fbc4f707-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_35000.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087048, "uuid": "fbc5100c-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_61212.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087048, "uuid": "fbc5a5ce-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_67925.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087048, "uuid": "fbdc9372-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07712.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087049, "uuid": "fbff8de7-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_74798.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087049, "uuid": "fc6d504b-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13802.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087049, "uuid": "fc78cf89-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_91385.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087050, "uuid": "fc900237-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_93224.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087050, "uuid": "fc94688c-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_90077.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087050, "uuid": "fca5f598-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_89431.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087050, "uuid": "fca5f7c8-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_28346.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087051, "uuid": "fd4742c1-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_56048.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087051, "uuid": "fd681979-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_94601.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087051, "uuid": "fd9295c7-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69918.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087051, "uuid": "fd98fc8f-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_34305.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087052, "uuid": "fdf9abce-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_86428.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087053, "uuid": "fe6f7389-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_50298.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087054, "uuid": "ff2e5dff-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45429.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087054, "uuid": "ff321c59-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13843.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087055, "uuid": "ffa4e13b-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_71572.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087055, "uuid": "ffb1d4cb-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13302.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087055, "uuid": "ffd1bea7-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_00620.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087055, "uuid": "ffd2e07b-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_12525.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087055, "uuid": "ffe22ef2-373c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_28332.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087056, "uuid": "0031e0ec-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20035.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087056, "uuid": "007585e9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_23593.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087057, "uuid": "01362ada-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_34235.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087057, "uuid": "01388add-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_18258.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087058, "uuid": "0165a166-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_88746.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087058, "uuid": "0166ad88-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_36406.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087058, "uuid": "0166d698-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_36347.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087058, "uuid": "0166d879-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_83418.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087058, "uuid": "01676c33-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_88222.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087058, "uuid": "017f4385-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_84107.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087059, "uuid": "021202a1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81650.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087059, "uuid": "0212d37c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08999.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087059, "uuid": "026840b7-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_76383.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087059, "uuid": "02722de0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_37964.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087059, "uuid": "0273ff8f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_46273.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087059, "uuid": "02757da5-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_28358.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087060, "uuid": "0291d9f2-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_52315.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087060, "uuid": "02930b5d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_43581.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087060, "uuid": "02a23787-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72160.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087060, "uuid": "02b754ab-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_30908.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087060, "uuid": "02b7594a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64220.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087060, "uuid": "02ce89b7-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.175.88.100/458/cloudconnect.hta", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087062, "uuid": "03f7388a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08901.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087062, "uuid": "03f75c11-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_83640.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087062, "uuid": "044782b3-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_27573.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087062, "uuid": "0448df98-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_70273.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087063, "uuid": "04946d77-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81612.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087063, "uuid": "0494a9fd-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99162.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087063, "uuid": "04c2e21b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_57896.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087064, "uuid": "054457d3-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_90583.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087064, "uuid": "056d72ee-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_86842.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087064, "uuid": "0574ed87-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_78106.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087065, "uuid": "05933d46-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96061.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087065, "uuid": "05aed964-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96851.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087065, "uuid": "0603f18e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07013.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087065, "uuid": "06066e47-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54467.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087065, "uuid": "0607c703-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_90347.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087066, "uuid": "062e28bf-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_41620.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087066, "uuid": "062f0782-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_38075.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087067, "uuid": "06b27129-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_26701.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087067, "uuid": "06b8f162-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_98423.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087067, "uuid": "06f84b9f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_85934.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087067, "uuid": "07090c79-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_56400.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087067, "uuid": "071e6028-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_40082.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087067, "uuid": "071e6d27-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/testx.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087068, "uuid": "076ef502-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_88599.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087068, "uuid": "077812f3-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_56966.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087068, "uuid": "07a0fc1c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_85013.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087069, "uuid": "083eb8c3-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_36597.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087069, "uuid": "08558159-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_77462.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087069, "uuid": "085f041e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20713.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087069, "uuid": "08613af4-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96474.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087069, "uuid": "087223ec-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_40469.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087069, "uuid": "087286b7-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_44107.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087071, "uuid": "09220666-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_94834.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087071, "uuid": "09797dcb-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_24764.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087071, "uuid": "0999a0d2-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72145.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087071, "uuid": "099a9c6f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_22166.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087072, "uuid": "09eb83dc-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_84428.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087072, "uuid": "09f1c1d6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_73976.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087072, "uuid": "09f2d540-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64948.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087072, "uuid": "09f33d0b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_88971.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087072, "uuid": "09f476c9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99806.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087073, "uuid": "0ac9646f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_94559.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087073, "uuid": "0acb6a3a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_03117.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087073, "uuid": "0acbdd31-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_84106.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087073, "uuid": "0ad788bd-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_78116.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087076, "uuid": "0c1c77e7-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_94040.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087076, "uuid": "0c3e6032-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_65304.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087076, "uuid": "0c54eb35-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_80830.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087076, "uuid": "0c61151d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_27247.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087076, "uuid": "0c613ccd-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_90077.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087076, "uuid": "0c713dc8-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_01986.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087076, "uuid": "0c787a4e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_47978.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087076, "uuid": "0c788508-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69740.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087077, "uuid": "0cb2bc32-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/testx.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087077, "uuid": "0cbcd73a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_53894.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087077, "uuid": "0cc0a415-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_97420.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087077, "uuid": "0cc22739-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68501.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087077, "uuid": "0d251ebe-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96856.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087077, "uuid": "0d30077f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72579.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087078, "uuid": "0db53516-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_59150.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087078, "uuid": "0db8e1a4-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_91385.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087078, "uuid": "0dc06cc3-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_00826.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087078, "uuid": "0dc8379a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72715.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087078, "uuid": "0dcd912e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54542.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087078, "uuid": "0dcda2f3-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_76835.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087078, "uuid": "0dd3cbf1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_97455.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087078, "uuid": "0dd3dea5-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_04008.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087079, "uuid": "0ddb1fab-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_53097.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087079, "uuid": "0de91418-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_61627.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087079, "uuid": "0e191cac-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_77272.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087079, "uuid": "0e2654fd-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_66425.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087079, "uuid": "0e2b2f08-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_75892.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087079, "uuid": "0e2b9d23-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_90644.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087079, "uuid": "0e581e18-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_18701.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087079, "uuid": "0e58860d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_49780.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087081, "uuid": "0f1fc78e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_91129.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087081, "uuid": "0f1fdc10-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_88222.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087081, "uuid": "0f29ed13-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_61120.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087081, "uuid": "0f4919ac-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_75892.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087081, "uuid": "0f4e39a9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_01986.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087081, "uuid": "0f608edc-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_10624.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087082, "uuid": "0fa3b205-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_49639.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087082, "uuid": "0fbcc1ba-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96145.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087083, "uuid": "1094ef9a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_03117.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087083, "uuid": "1094f557-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_73308.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087083, "uuid": "1094f651-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_59517.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087084, "uuid": "1119af19-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_31218.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087084, "uuid": "1165ee47-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_06072.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087087, "uuid": "12e9d6b8-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_95692.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087088, "uuid": "1350cbd8-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_12397.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087090, "uuid": "14804d9c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08686.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087090, "uuid": "14bf7786-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_59828.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087090, "uuid": "14c1d1b8-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_73024.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087090, "uuid": "14f839d9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68947.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087090, "uuid": "14fe24fa-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_57064.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087090, "uuid": "14feac18-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69918.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087091, "uuid": "150972c6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_85498.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087091, "uuid": "1512218c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_01673.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087091, "uuid": "151a0c40-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_06113.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087091, "uuid": "152004b1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_30968.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087091, "uuid": "1520891c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69394.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087091, "uuid": "1539ec76-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_92696.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087091, "uuid": "153bff29-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_63128.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087091, "uuid": "15455064-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64549.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087091, "uuid": "15500e65-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_24198.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087091, "uuid": "156b9634-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_35000.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087092, "uuid": "15bd985d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_93259.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087092, "uuid": "15ce2216-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_97426.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087092, "uuid": "15f23105-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15861.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087092, "uuid": "15fc1b4a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_74743.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087092, "uuid": "15fdfdaf-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_86428.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087092, "uuid": "16035199-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_04829.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087092, "uuid": "1603acfd-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_33091.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087092, "uuid": "160424a8-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_70818.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087092, "uuid": "1604e0d4-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08686.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087093, "uuid": "163f2be2-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_89226.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087093, "uuid": "163f8284-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_94326.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087093, "uuid": "163fdff8-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_56048.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087093, "uuid": "16471dd4-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07013.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087093, "uuid": "164d8fe3-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_66742.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087093, "uuid": "164e085d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_06949.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087093, "uuid": "165984ad-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_55953.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087093, "uuid": "1661d438-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96477.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087094, "uuid": "17206288-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_31048.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087097, "uuid": "18982517-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54837.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087097, "uuid": "18a16840-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_60727.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087097, "uuid": "18b4dbfd-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_79811.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087097, "uuid": "191902b1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_48796.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087097, "uuid": "191f8d6c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07212.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087098, "uuid": "19482df9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_33122.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087098, "uuid": "196652f6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_95365.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087099, "uuid": "1a2da97a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_25525.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087099, "uuid": "1a2ee07c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_58115.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087099, "uuid": "1a307077-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_80840.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087099, "uuid": "1a343164-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64761.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087099, "uuid": "1a34326f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20237.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087099, "uuid": "1a343c04-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_97143.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087099, "uuid": "1a493909-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_39818.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087099, "uuid": "1a53909a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_91484.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087099, "uuid": "1a53ff87-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08429.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087099, "uuid": "1a5832a7-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_34784.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087100, "uuid": "1a876df2-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_19872.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087100, "uuid": "1a9586bb-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_83897.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087100, "uuid": "1a9dd195-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_63451.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087101, "uuid": "1b77a38a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20299.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087102, "uuid": "1bbb42f5-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_52937.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087102, "uuid": "1c0b0839-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_42022.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087103, "uuid": "1c353a55-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68359.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087106, "uuid": "1e083fc9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_75034.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087106, "uuid": "1e0be9df-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_48752.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087106, "uuid": "1e0bf4ff-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_76995.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087106, "uuid": "1e0bf531-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_40082.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087106, "uuid": "1e148a72-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_52860.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087106, "uuid": "1e1b3ba8-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69254.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087106, "uuid": "1e23045a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_36769.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087106, "uuid": "1e285188-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_46273.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087107, "uuid": "1ee46e3f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_53430.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087107, "uuid": "1ee47123-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_93813.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087107, "uuid": "1ee472a4-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99237.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087107, "uuid": "1ee47bc0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08667.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087107, "uuid": "1ef426a6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99268.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087109, "uuid": "1fc14eb2-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_85697.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087109, "uuid": "1fd0fd31-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_49196.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087109, "uuid": "20028d22-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_83645.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087112, "uuid": "218f59ab-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_47384.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087112, "uuid": "21bacf9e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_62809.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087112, "uuid": "21bc635a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_55648.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087115, "uuid": "23af37f2-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_35795.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087115, "uuid": "23d790ec-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13309.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087115, "uuid": "23e30cff-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_62843.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087116, "uuid": "23f14bd6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_82041.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087116, "uuid": "23f1f518-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_01577.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087116, "uuid": "2403b94a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_62963.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087116, "uuid": "24134c13-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_36223.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087116, "uuid": "2417370a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_42552.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087116, "uuid": "2419e7f8-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_10319.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087117, "uuid": "24ef5546-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_12570.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087117, "uuid": "24f33f9b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_27995.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087118, "uuid": "2561accf-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_63675.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087118, "uuid": "25675f44-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_65304.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087118, "uuid": "25698c72-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_37248.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087118, "uuid": "25786589-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_05947.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087118, "uuid": "258622f4-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_04630.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087118, "uuid": "25ab73c3-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96145.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087118, "uuid": "25adf09d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21463.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087118, "uuid": "25af9ab5-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_70351.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087119, "uuid": "25c992fd-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_43724.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087119, "uuid": "25cdaacf-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96061.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087119, "uuid": "25ce0b37-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_02185.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087119, "uuid": "25cf660d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_52843.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087119, "uuid": "25cf8790-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_02881.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087119, "uuid": "25cfffd5-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_95823.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087119, "uuid": "25dbc135-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_86529.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087119, "uuid": "25f2adf2-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_57990.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087119, "uuid": "25f2b32a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_59180.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087119, "uuid": "25f2ee65-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_92463.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087119, "uuid": "25ff6723-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_76383.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087119, "uuid": "25ff77ba-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_60763.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087119, "uuid": "261f0ae6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_06020.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087119, "uuid": "26249321-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_47973.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087119, "uuid": "264172a1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_93523.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087122, "uuid": "27d7fd96-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_92157.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087122, "uuid": "27eae4bc-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_48752.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087122, "uuid": "28118da9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_30968.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087123, "uuid": "28689697-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_51173.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087126, "uuid": "2a39586f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_52297.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087126, "uuid": "2a3a1c1c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_59150.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087126, "uuid": "2a521cce-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96629.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087126, "uuid": "2a5277cf-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81040.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087126, "uuid": "2a5279d8-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_49889.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087126, "uuid": "2a53e508-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_48154.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087127, "uuid": "2a81777a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/JoseTomas.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087127, "uuid": "2ad494e3-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45012.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087128, "uuid": "2b332f9d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_57473.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087128, "uuid": "2b33d50c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54969.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087128, "uuid": "2b5a68ec-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_10718.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087128, "uuid": "2b9f4c33-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_34055.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087129, "uuid": "2bb31261-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_12510.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087129, "uuid": "2bb342f1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_50628.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087129, "uuid": "2bca4928-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_47973.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087129, "uuid": "2be0e0c4-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_31225.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087129, "uuid": "2be596f5-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_55691.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087129, "uuid": "2be7e00c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_06239.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087129, "uuid": "2bebc6bb-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_28403.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087130, "uuid": "2c79c285-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54126.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087130, "uuid": "2cabd77f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87253.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087130, "uuid": "2cccc425-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_88088.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087131, "uuid": "2ced7273-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_56403.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087131, "uuid": "2d038014-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/testx.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087131, "uuid": "2d16c152-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_40134.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087131, "uuid": "2d431d46-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_24198.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087132, "uuid": "2da07f44-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_88746.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087132, "uuid": "2da3126d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_67465.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087132, "uuid": "2da44ac0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54837.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087132, "uuid": "2da4a9cb-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_00535.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087132, "uuid": "2da52662-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_88067.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087132, "uuid": "2db191d2-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20314.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087132, "uuid": "2db9a0f5-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.206.142.250:45268/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087132, "uuid": "2de9eadf-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_66262.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087132, "uuid": "2deb73c6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_39600.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087133, "uuid": "2e3136de-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_70894.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087133, "uuid": "2e31bbe0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_60967.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087133, "uuid": "2e417009-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_93958.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087133, "uuid": "2e42a441-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_25599.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087133, "uuid": "2e4ddc40-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_31816.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087134, "uuid": "2ed6454b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_38966.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087134, "uuid": "2eee2f63-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_80840.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087134, "uuid": "2ef82838-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_80995.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087135, "uuid": "2f53ce93-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_53501.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087135, "uuid": "2f548f9a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21012.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087136, "uuid": "304c5fb7-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_79597.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087139, "uuid": "31bcfe0e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_62843.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087139, "uuid": "31d6e25d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_95394.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087139, "uuid": "31d6e707-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_37383.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087139, "uuid": "31d6e761-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_84450.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087139, "uuid": "31e51d40-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72715.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087141, "uuid": "33027657-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_46395.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087141, "uuid": "3311a315-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_83418.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087141, "uuid": "3313d55b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21974.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087141, "uuid": "3343046d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_85498.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087141, "uuid": "334308ce-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54805.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087141, "uuid": "3343aab5-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_84846.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087141, "uuid": "3356339a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_14989.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087141, "uuid": "33563b96-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_24663.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087141, "uuid": "335ac3b9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_48499.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087142, "uuid": "33bb335d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_05895.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087142, "uuid": "33c5b00b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21559.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087142, "uuid": "33c892b6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_09953.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087142, "uuid": "33c9be95-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13579.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087142, "uuid": "33cc24eb-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_63809.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087142, "uuid": "33f98e3a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_49929.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087143, "uuid": "34007f48-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_48154.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087143, "uuid": "34019745-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_97508.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087143, "uuid": "3447d37c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_92696.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087143, "uuid": "3459ebc9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64761.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087143, "uuid": "346223de-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_28026.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087143, "uuid": "34625641-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_26591.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087143, "uuid": "346a838a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_92910.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087143, "uuid": "346fc6e1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_62511.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087143, "uuid": "3479e7b9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_43388.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087143, "uuid": "349074bd-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_70402.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087144, "uuid": "349ed1bc-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_01788.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087144, "uuid": "349f4569-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_23908.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087144, "uuid": "34b02c3a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_91790.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087144, "uuid": "34d7a9f9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_94833.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087144, "uuid": "34df7a96-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96608.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087144, "uuid": "3518dad7-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_24764.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087144, "uuid": "3527b9a4-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81909.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087145, "uuid": "35439f5a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64538.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087146, "uuid": "363a9b37-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_43634.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087146, "uuid": "363b4fd6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_76012.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087146, "uuid": "363c1d7f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20035.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087146, "uuid": "363c20f6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_29496.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087147, "uuid": "3673f29c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_98722.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087148, "uuid": "378cd569-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08820.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087149, "uuid": "37d3ee82-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_55147.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087150, "uuid": "38b1dec8-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_36728.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087151, "uuid": "38c59cdf-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_79569.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087151, "uuid": "38cc2bb7-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_36834.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087151, "uuid": "38d56b00-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_28026.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087151, "uuid": "38fb0489-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_03796.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087151, "uuid": "392003b0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21927.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087151, "uuid": "392edb03-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96580.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087151, "uuid": "39313383-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20859.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087152, "uuid": "3970e2a5-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_01796.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087152, "uuid": "39c9e8a5-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_85095.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087153, "uuid": "3a48c69a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_55147.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087153, "uuid": "3a5b1d94-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_83640.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087153, "uuid": "3a794cbf-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08683.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087154, "uuid": "3ab57229-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45309.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087154, "uuid": "3abf5e62-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_04263.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087154, "uuid": "3af707ee-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_79294.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087154, "uuid": "3afdbe3f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_28608.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087154, "uuid": "3b063518-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_83888.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087154, "uuid": "3b1ba61b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_98916.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087155, "uuid": "3b47a217-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_63948.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087155, "uuid": "3b49ff9b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_52937.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087155, "uuid": "3b57e0f1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_26917.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087155, "uuid": "3ba97d63-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_10539.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087155, "uuid": "3bb2193d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_22845.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087155, "uuid": "3bb5a74f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_53604.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087156, "uuid": "3bcc08eb-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_49929.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087156, "uuid": "3bcc4bcd-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_23919.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087156, "uuid": "3bfb0513-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_94580.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087157, "uuid": "3c6c4aee-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mypanel.vip/a9a4wp/ndofghk.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087157, "uuid": "3c715812-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72160.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087157, "uuid": "3c815e65-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_18177.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087157, "uuid": "3c81db1f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_78550.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087157, "uuid": "3c821f31-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54467.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087157, "uuid": "3c827e2d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_44090.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087157, "uuid": "3caf500e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_41904.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087157, "uuid": "3cbef8aa-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_34293.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087157, "uuid": "3ccdaf28-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13316.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087157, "uuid": "3ce73ece-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_61938.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087157, "uuid": "3ce7b560-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_41126.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087158, "uuid": "3d43674c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07400.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087159, "uuid": "3d8c479d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20799.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087159, "uuid": "3d99f17d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_61449.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087159, "uuid": "3d9b84b9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20296.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087159, "uuid": "3dd4c72b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_82208.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087159, "uuid": "3dd4cc36-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13236.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087159, "uuid": "3e1d07cf-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_22533.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087160, "uuid": "3e24e0d4-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_53098.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087160, "uuid": "3e2fe136-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_84792.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087162, "uuid": "3fc90273-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_76404.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087162, "uuid": "3fcbc8b6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68656.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087162, "uuid": "3fd2f274-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99164.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087162, "uuid": "3fd38232-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_41904.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087163, "uuid": "3fea4519-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99084.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087163, "uuid": "3ff34313-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_83940.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087164, "uuid": "4109d488-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_70376.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087165, "uuid": "41a94a0f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_39574.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087166, "uuid": "41b5d938-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_25490.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087166, "uuid": "41bcc6d3-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72145.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087166, "uuid": "41d0a50c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_65740.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087166, "uuid": "41d55479-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_85275.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087166, "uuid": "41d62b5a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72883.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087166, "uuid": "41dca63d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_65349.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087166, "uuid": "41dd7213-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_23356.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087166, "uuid": "41fe02af-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54122.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087168, "uuid": "42ee1dc9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_16480.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087168, "uuid": "4324d497-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_31225.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087169, "uuid": "43b285d6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96629.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087169, "uuid": "43c4c876-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_14989.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087169, "uuid": "43e0d4ca-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_65872.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087169, "uuid": "43fa79f5-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_16383.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087169, "uuid": "4411bd61-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_05378.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087170, "uuid": "441cec48-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_60555.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087170, "uuid": "445042ff-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_89226.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087170, "uuid": "446b9527-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_88691.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087170, "uuid": "44721132-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_83897.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087170, "uuid": "447d4221-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_897893.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087170, "uuid": "4480cef8-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_32532.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087170, "uuid": "44816dce-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_88067.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087170, "uuid": "44933a94-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72892.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087170, "uuid": "449e96bb-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_46358.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087170, "uuid": "449f58e3-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_53894.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087171, "uuid": "44c7dcff-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_26591.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087171, "uuid": "44e01f36-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_94399.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087171, "uuid": "44edd6dd-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_39469.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087171, "uuid": "44ee0edf-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07505.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087171, "uuid": "44ef1c16-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_95289.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087171, "uuid": "450ff202-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_91865.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087171, "uuid": "4524f69f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_17823.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087171, "uuid": "452b1e97-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_22807.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087171, "uuid": "4534e011-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_17562.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087171, "uuid": "45353dc9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_29943.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087172, "uuid": "4548026e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_43581.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087172, "uuid": "45575f9f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_44587.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087172, "uuid": "45b50d9f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_22600.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087173, "uuid": "4617cd29-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_65652.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087174, "uuid": "46889b5d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45658.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087174, "uuid": "46895441-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45012.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087174, "uuid": "4689d828-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87547.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087175, "uuid": "4761af7d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_95289.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087175, "uuid": "4761b359-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_84450.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087175, "uuid": "4773d60f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07950.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087175, "uuid": "47757f20-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_19872.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087176, "uuid": "47dfbcd6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68667.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087176, "uuid": "4813e39c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_02643.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087176, "uuid": "48144b61-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72493.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087176, "uuid": "482dd047-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_38075.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087178, "uuid": "4951e5fa-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_35790.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087179, "uuid": "49fc78a3-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_28210.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087180, "uuid": "4a30e954-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_89271.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087180, "uuid": "4a90f3af-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_43627.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087181, "uuid": "4b227a2c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_98916.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087181, "uuid": "4b27896b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_02162.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087182, "uuid": "4bad8f77-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_33018.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087183, "uuid": "4bd6368f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_73011.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087183, "uuid": "4bd6f9c0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_24938.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087183, "uuid": "4c16ac74-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_34163.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087183, "uuid": "4c1ec96c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_70618.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087183, "uuid": "4c409993-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_97333.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087183, "uuid": "4c409fd0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_80947.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087183, "uuid": "4c41506e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_06949.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087184, "uuid": "4c76f2d0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_89541.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087184, "uuid": "4c8529b2-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45629.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087184, "uuid": "4ca6abbe-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_31268.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087184, "uuid": "4ccd0020-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_97413.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087184, "uuid": "4cd05cab-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_66723.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087184, "uuid": "4cd616b9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_50931.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087185, "uuid": "4d4965fe-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15163.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087185, "uuid": "4d7e6f52-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_66723.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087185, "uuid": "4d7e84f6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_70706.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087186, "uuid": "4d9fe4b1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_56406.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087186, "uuid": "4da18e05-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69149.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087186, "uuid": "4da18e62-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_76760.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087186, "uuid": "4da1913d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_55648.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087186, "uuid": "4db3e755-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_71088.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087186, "uuid": "4db4ff5d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_06705.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087186, "uuid": "4db5241f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_85934.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087186, "uuid": "4dc9a7fd-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_03478.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087186, "uuid": "4ddc8f6f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15388.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087186, "uuid": "4e200c77-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_63675.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087186, "uuid": "4e21a8a5-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45793.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087186, "uuid": "4e37abd6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96474.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087188, "uuid": "4ef4a962-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_06290.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087188, "uuid": "4ef4abbc-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96580.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087188, "uuid": "4f457f87-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_91762.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087189, "uuid": "4f7fedb1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_06235.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087189, "uuid": "4fcfaee4-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_56298.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087189, "uuid": "4fdf552c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_25723.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087191, "uuid": "509ccc3f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_43572.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087191, "uuid": "50ec422b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_91762.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087191, "uuid": "50ef1ab6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_48879.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087191, "uuid": "511bee48-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_97455.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087193, "uuid": "51d4f6b0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87253.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087193, "uuid": "51d9aeeb-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68283.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087193, "uuid": "51d9c032-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_11055.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087193, "uuid": "5201f6c3-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_60555.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087193, "uuid": "52046a70-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_70256.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087193, "uuid": "52081638-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_59572.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087195, "uuid": "531cf255-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_38832.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087195, "uuid": "538a0279-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_35369.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087196, "uuid": "53c65380-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_55459.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087196, "uuid": "53c6f2d8-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_88971.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087196, "uuid": "53ca09c4-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96673.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087196, "uuid": "53f10a0b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_92157.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087196, "uuid": "53f20e0a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_26701.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087196, "uuid": "53f3e17c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_89226.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087196, "uuid": "540a47aa-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_05378.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087196, "uuid": "540ca27a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_53631.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087196, "uuid": "5422b092-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_46031.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087196, "uuid": "5424ed4a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_37707.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087197, "uuid": "544f2c95-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15098.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087197, "uuid": "54589999-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64055.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087197, "uuid": "5458b013-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87454.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087197, "uuid": "546c7651-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_12110.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087197, "uuid": "546e377f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_01812.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087197, "uuid": "547adc42-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_85369.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087197, "uuid": "54c09704-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_57350.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087198, "uuid": "54ef895e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_12570.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087198, "uuid": "54fb2318-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_00142.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087198, "uuid": "54fb8dc3-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_84071.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087198, "uuid": "54fba6ec-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20295.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087198, "uuid": "550496ca-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99084.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087198, "uuid": "55071ba9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_43572.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087198, "uuid": "55122637-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_88598.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087198, "uuid": "5536ce13-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_85753.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087198, "uuid": "554484fc-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_01458.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087199, "uuid": "55cc76ad-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_63948.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087201, "uuid": "571c2b33-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_38832.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087202, "uuid": "573ec93c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_85892.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087202, "uuid": "5760df31-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_37612.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087202, "uuid": "576125c7-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_16430.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087202, "uuid": "5769d046-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_39574.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087202, "uuid": "577adb73-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_89271.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087202, "uuid": "579a8509-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_95559.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087202, "uuid": "579b0ab2-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_44090.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087203, "uuid": "57cb1169-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_12317.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087203, "uuid": "57d2c4ad-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_93549.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087203, "uuid": "5819d29a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_24070.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087203, "uuid": "581bbcb6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.175.88.100/458/4/cloudconnections.js", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087203, "uuid": "582df78e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_09506.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087205, "uuid": "59135983-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_01577.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087205, "uuid": "59145ce2-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_04263.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087205, "uuid": "592a4dca-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_91129.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087205, "uuid": "594d3817-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_77802.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087205, "uuid": "594fbe6e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_57655.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087206, "uuid": "59d1751e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_16272.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087206, "uuid": "59d2f590-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_36782.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087206, "uuid": "5a01af20-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_23593.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087207, "uuid": "5a4a65da-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15791.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087207, "uuid": "5a4e9aea-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99131.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087207, "uuid": "5a7b722f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72788.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087207, "uuid": "5a7fffa6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_78413.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087207, "uuid": "5a8374d2-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45276.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087207, "uuid": "5aa46b58-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96477.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087207, "uuid": "5ab71d84-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_11369.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087208, "uuid": "5af65dc9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_86906.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087208, "uuid": "5afbf7e1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_10319.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087208, "uuid": "5afd14fd-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_49326.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087208, "uuid": "5b0d46cf-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_03569.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087208, "uuid": "5b39936f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_92625.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087208, "uuid": "5b399a86-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20296.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087208, "uuid": "5b39a2aa-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_91478.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087208, "uuid": "5b39bbc5-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_77773.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087211, "uuid": "5c8b389d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_23911.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087211, "uuid": "5c90a9b7-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_92696.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087211, "uuid": "5c90abba-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_02162.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087211, "uuid": "5c914e44-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_80830.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087211, "uuid": "5c91577e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96145.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087211, "uuid": "5c9166f4-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15181.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087211, "uuid": "5c916889-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_30736.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087211, "uuid": "5c916b43-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87519.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087211, "uuid": "5c917d3e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_98722.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087211, "uuid": "5c918806-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_91129.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087211, "uuid": "5c919a80-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87554.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087214, "uuid": "5e572119-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_01458.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087214, "uuid": "5e574435-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_36331.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087214, "uuid": "5e81e1f9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_59517.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087214, "uuid": "5ece9d73-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_27245.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087214, "uuid": "5ed41a9d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_85934.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087214, "uuid": "5ed6243f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_89431.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087214, "uuid": "5ee1ffab-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_97143.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087219, "uuid": "61be6b72-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_53097.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087220, "uuid": "61e67759-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87491.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087220, "uuid": "61edd3b6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87057.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087220, "uuid": "6205326f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20786.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087220, "uuid": "62075efb-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81867.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087220, "uuid": "6208e1d5-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69975.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087220, "uuid": "62109ef8-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96629.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087220, "uuid": "6226628b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_02192.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087220, "uuid": "622a81eb-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20137.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087220, "uuid": "62492163-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_01812.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087220, "uuid": "62516cdc-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_93224.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087220, "uuid": "62575a1b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_18177.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087220, "uuid": "625a22be-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08811.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087220, "uuid": "6264fa93-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_74229.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087220, "uuid": "627b998f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_19266.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087221, "uuid": "62af48b0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_74229.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087221, "uuid": "62b05060-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_73678.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087221, "uuid": "62d207f1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_90950.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087221, "uuid": "62d34354-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_93351.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087221, "uuid": "630b1e43-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_83865.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087222, "uuid": "635714b1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_04829.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087222, "uuid": "636b4e88-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_01796.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087222, "uuid": "63766de0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_31816.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087222, "uuid": "63767166-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_38427.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087222, "uuid": "637af0d2-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_78116.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087222, "uuid": "637b3cc9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_27573.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087222, "uuid": "639623e7-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_62563.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087223, "uuid": "63d66f76-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81271.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087223, "uuid": "63d77c35-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_60081.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087223, "uuid": "63d89bbc-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_36597.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087223, "uuid": "64101662-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45658.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087223, "uuid": "6412aa9a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_94559.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087224, "uuid": "644f7864-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_19266.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087224, "uuid": "64be4166-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_66268.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087225, "uuid": "64edd138-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_89431.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087226, "uuid": "660a46be-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_16220.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087226, "uuid": "660bcfd2-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_00007.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087227, "uuid": "665c9951-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07693.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087227, "uuid": "6662051b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.12.83.76/55/ec/nicespeakingwithbetstthingsforme.hta", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087227, "uuid": "66625fb1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_67033.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087228, "uuid": "66ac96b5-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_82893.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087228, "uuid": "672b6425-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_77303.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087229, "uuid": "67482ba4-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_77914.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087229, "uuid": "67533601-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_78413.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087229, "uuid": "675afcb0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_51894.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087229, "uuid": "678c706d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_57473.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087229, "uuid": "67930c54-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_58832.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087229, "uuid": "6796443b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_71572.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087229, "uuid": "67a8198e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_23536.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087229, "uuid": "67acb867-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_27129.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087229, "uuid": "67b64ed5-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21559.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087230, "uuid": "67eb5c27-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_40358.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087230, "uuid": "6831d2fa-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_19463.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087230, "uuid": "684ef7ce-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_88691.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087230, "uuid": "685c33be-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_61111.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087231, "uuid": "68ebf19f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_97776.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087231, "uuid": "68edfd35-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_19180.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087231, "uuid": "69014340-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_59665.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087232, "uuid": "690b3a00-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_55365.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087232, "uuid": "690b3d3d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68359.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087232, "uuid": "690b6f30-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_85706.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087232, "uuid": "692e1f53-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_55691.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087232, "uuid": "694a1233-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_50144.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087232, "uuid": "694fd42c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_46395.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087232, "uuid": "69a153a8-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_35807.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087232, "uuid": "69a1d92a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_80308.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087235, "uuid": "6b15f2a8-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_57352.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087235, "uuid": "6b1711a3-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_62775.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087235, "uuid": "6b1bccc0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87118.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087235, "uuid": "6b1ea48c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81148.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087235, "uuid": "6b1eaf6b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_37383.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087235, "uuid": "6b2c1834-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_53051.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087236, "uuid": "6bdc6a27-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08117.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087236, "uuid": "6bf51daf-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96728.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087237, "uuid": "6c09d296-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96673.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087237, "uuid": "6c2c4fdc-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_36722.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087237, "uuid": "6c661242-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_00088.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087237, "uuid": "6c6bb7c8-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_83432.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087237, "uuid": "6c7acde3-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_88815.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087237, "uuid": "6c7c46f1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_18344.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087238, "uuid": "6ca07d70-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_50616.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087238, "uuid": "6d237fb1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_47111.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087238, "uuid": "6d252609-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_76148.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087239, "uuid": "6d5264a0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07793.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087239, "uuid": "6d5ef6a1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_43919.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087239, "uuid": "6da6426c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_76835.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087240, "uuid": "6ddd3009-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96608.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087240, "uuid": "6ddd32d6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_86906.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087240, "uuid": "6dde4654-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_23255.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087240, "uuid": "6ddf13cf-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69721.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087240, "uuid": "6df6aa10-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_88278.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087240, "uuid": "6df7cdec-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_52809.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087240, "uuid": "6df7df17-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_91865.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087240, "uuid": "6e0d1ae1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_02259.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087241, "uuid": "6e7933d7-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_23580.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087241, "uuid": "6e7cd533-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_22704.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087241, "uuid": "6eb5b3ec-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_46359.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087242, "uuid": "6f00556f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87533.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087242, "uuid": "6f20c048-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_16383.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087243, "uuid": "6fab9cba-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99893.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087243, "uuid": "7011a589-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69167.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087244, "uuid": "7033083b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_40212.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087245, "uuid": "7112a23d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87951.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087245, "uuid": "71149c28-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96856.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087245, "uuid": "712e0f54-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_18088.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087247, "uuid": "72500f90-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_02148.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087247, "uuid": "725d59f5-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_39600.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087247, "uuid": "725d8840-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_73779.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087247, "uuid": "725e8011-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_46358.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087247, "uuid": "725ef0c8-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_12971.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087249, "uuid": "7337bcdc-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_23840.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087249, "uuid": "73772882-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_44107.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087249, "uuid": "73a0382d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_04878.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087250, "uuid": "73c855e4-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_66147.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087250, "uuid": "73f9b14f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45629.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087250, "uuid": "74245fa6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_38374.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087250, "uuid": "744623a0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_63278.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087250, "uuid": "744a3026-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_41668.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087251, "uuid": "7472cbf7-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64830.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087251, "uuid": "7482ad82-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45248.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087251, "uuid": "748fe8db-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_34916.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087251, "uuid": "749c17d1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_33769.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087251, "uuid": "74a70994-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87414.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087251, "uuid": "74cf5169-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_70402.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087251, "uuid": "74cfbadf-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_35403.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087251, "uuid": "74d23a67-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_74570.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087251, "uuid": "74e9db1e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_91985.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087251, "uuid": "74eaffce-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_28076.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087252, "uuid": "7541e9a7-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_55365.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087252, "uuid": "754f4b71-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_26726.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087253, "uuid": "75c02b74-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_65012.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087253, "uuid": "75d9b36a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_44238.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087253, "uuid": "75da788a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81592.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087254, "uuid": "762ac891-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15163.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087254, "uuid": "762ad49e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_33967.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087254, "uuid": "765f35ed-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_55459.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087254, "uuid": "765f4264-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_98937.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087254, "uuid": "765ff2d0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_34561.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087254, "uuid": "767c9c65-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_34293.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087254, "uuid": "768407b1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_63128.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087255, "uuid": "771dc483-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_57350.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087255, "uuid": "77210ce6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_80308.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087256, "uuid": "778f51e9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_82041.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087256, "uuid": "77a5ba13-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96851.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087256, "uuid": "77df9119-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_91747.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087257, "uuid": "77f60446-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_35790.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087257, "uuid": "7857fd56-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_97455.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087257, "uuid": "7858844e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15965.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087257, "uuid": "786b68d9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64549.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087257, "uuid": "786bc228-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81909.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087259, "uuid": "794b9db5-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_22301.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087259, "uuid": "796e8431-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15833.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087261, "uuid": "7a55a686-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_62511.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087262, "uuid": "7af507b1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_84276.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087262, "uuid": "7b1226f1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_86529.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087262, "uuid": "7b6cfe34-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_41604.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087262, "uuid": "7b82545d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_05801.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087263, "uuid": "7b86b12f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20295.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087263, "uuid": "7b882a20-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_93523.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087263, "uuid": "7bbcf90a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_02839.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087263, "uuid": "7bbdd48e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_82893.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087263, "uuid": "7c0287fd-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_80995.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087263, "uuid": "7c02d4e6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_37964.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087264, "uuid": "7c1dd8b9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_34096.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087264, "uuid": "7c1ea96e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_02324.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087264, "uuid": "7c4b0402-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_43188.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087264, "uuid": "7c657d1c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_47111.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087264, "uuid": "7c79fb73-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_53098.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087264, "uuid": "7c7aa2ed-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_91762.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087265, "uuid": "7cb97cc8-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68809.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087265, "uuid": "7cba43c3-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_52221.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087265, "uuid": "7cc5136f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07384.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087265, "uuid": "7cc53e24-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_05947.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087265, "uuid": "7ccfff11-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_49317.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087265, "uuid": "7cd01d2f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_24938.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087265, "uuid": "7d2e7dca-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96851.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087265, "uuid": "7d313fc9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96856.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087266, "uuid": "7d55ee22-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_48547.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087266, "uuid": "7d70c15e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_86171.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087266, "uuid": "7d781109-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68793.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087266, "uuid": "7d8442da-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96182.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087266, "uuid": "7db8f4f6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_52326.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087267, "uuid": "7e58acfe-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68667.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087267, "uuid": "7e5a4f49-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72892.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087267, "uuid": "7e734b96-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87547.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087267, "uuid": "7e7486fb-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_40212.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087267, "uuid": "7e77a8da-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_12660.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087269, "uuid": "7f767c73-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_42486.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087269, "uuid": "7fa214d0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_06113.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087269, "uuid": "7fabac98-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_91385.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087270, "uuid": "7fd97f7e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_23580.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087270, "uuid": "7fe21e22-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_98775.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087270, "uuid": "7ff83fa8-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_66234.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087271, "uuid": "804b70b1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_85095.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087271, "uuid": "80513612-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68947.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087271, "uuid": "80a47876-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_65012.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087271, "uuid": "80ce5e1e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69981.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087272, "uuid": "80f4f011-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99433.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087272, "uuid": "80f5a831-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87414.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087272, "uuid": "810d4bef-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08373.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087272, "uuid": "812cc67a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_30450.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087272, "uuid": "812e15f3-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_80830.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087272, "uuid": "815bc061-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45405.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087273, "uuid": "820c9aee-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_41495.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087273, "uuid": "820d5edd-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_43724.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087274, "uuid": "82a5895b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81547.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087274, "uuid": "82a82d55-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54969.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087275, "uuid": "82b0e91d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_66017.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087275, "uuid": "82b2b597-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_94833.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087275, "uuid": "82fbe94e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72679.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087275, "uuid": "8308b4cb-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_67130.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087276, "uuid": "83809116-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_83888.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087276, "uuid": "839c6407-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_65651.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087276, "uuid": "839f4e2f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_57896.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087276, "uuid": "839fa2a2-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_60161.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087277, "uuid": "840482fa-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20314.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087277, "uuid": "8404da74-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21603.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087277, "uuid": "8412636d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_93995.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087277, "uuid": "841d043d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96182.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087277, "uuid": "84247c4c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_06716.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087277, "uuid": "84247e03-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_97333.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087277, "uuid": "842484ee-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13235.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087277, "uuid": "8430849e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69981.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087277, "uuid": "844ba618-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15217.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087277, "uuid": "844c3277-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_91484.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087277, "uuid": "844c5642-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_28820.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087277, "uuid": "8461e665-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_97017.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087278, "uuid": "849e30b7-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72068.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087278, "uuid": "84b746c6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_71885.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087278, "uuid": "84c45b1f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_88691.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087279, "uuid": "85264ee4-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68583.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087279, "uuid": "85374afd-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72999.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087280, "uuid": "85a77caa-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_52073.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087284, "uuid": "883b99e8-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_73129.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087284, "uuid": "8848f0b6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_19977.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087284, "uuid": "887fd0d0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_73678.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087284, "uuid": "88852987-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_95692.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087284, "uuid": "8886923d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_93259.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087285, "uuid": "88a3332d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_66262.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087285, "uuid": "88a424da-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_98775.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087285, "uuid": "88af6d39-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_88067.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087285, "uuid": "88af6d43-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_48040.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087285, "uuid": "88c11889-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_16272.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087285, "uuid": "88d669a9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54154.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087285, "uuid": "88e3a528-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87626.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087285, "uuid": "89088b87-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_47488.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087285, "uuid": "890a15e1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_25188.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087286, "uuid": "895c5fff-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81612.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087286, "uuid": "8968cb6a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87118.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087286, "uuid": "89948c73-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_40919.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087286, "uuid": "8998124f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_46899.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087286, "uuid": "899861e1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_37616.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087286, "uuid": "89a7495c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_56161.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087286, "uuid": "89b4c490-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_43188.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087286, "uuid": "89b7710a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68283.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087286, "uuid": "89baa347-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_52758.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087288, "uuid": "8ab04c60-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_40919.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087288, "uuid": "8abfc6a6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_70618.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087288, "uuid": "8ad0d085-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_90583.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087288, "uuid": "8ad7fd4d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64948.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087288, "uuid": "8af7121c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_85275.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087288, "uuid": "8af88c77-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_84846.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087288, "uuid": "8af9d6e9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_16764.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087289, "uuid": "8b5a5ae5-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_24820.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087289, "uuid": "8b89f336-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_30908.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087289, "uuid": "8b8b62ea-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13663.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087290, "uuid": "8b9cecc7-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72679.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087290, "uuid": "8b9d1a43-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_18892.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087290, "uuid": "8bc03382-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_36175.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087290, "uuid": "8c0433e0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_12510.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087290, "uuid": "8c253e1b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_77813.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087290, "uuid": "8c25413a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07828.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087290, "uuid": "8c25562b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96474.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087290, "uuid": "8c25607f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_71145.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087291, "uuid": "8c3d83ac-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_29854.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087291, "uuid": "8c50d7e1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64432.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087291, "uuid": "8c50da74-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_58173.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087292, "uuid": "8d1ccc46-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_22872.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087294, "uuid": "8e019c3f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69452.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087294, "uuid": "8e264a70-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54776.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087294, "uuid": "8e36c46d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_26097.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087294, "uuid": "8e615fce-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08939.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087295, "uuid": "8ecf0da1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_00142.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087295, "uuid": "8ef30bca-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87414.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087295, "uuid": "8f02e2e2-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_41604.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087295, "uuid": "8f02e44b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99806.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087295, "uuid": "8f24b31f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_56208.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087296, "uuid": "8f572b97-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_00757.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087296, "uuid": "8f5e86b2-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08683.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087296, "uuid": "8f7b06ca-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_30450.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087297, "uuid": "8fe3c3da-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_42552.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087297, "uuid": "8ff4aa74-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_24086.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087297, "uuid": "900061cb-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13302.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087297, "uuid": "9010dac0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_67033.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087297, "uuid": "901352fb-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99043.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087297, "uuid": "901ee389-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_27669.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087298, "uuid": "90954f02-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_37826.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087298, "uuid": "9098b3ee-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_84428.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087298, "uuid": "90c693cc-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_88278.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087298, "uuid": "90dcad64-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81245.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087298, "uuid": "90e1e496-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_92625.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087298, "uuid": "90f248f0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_22174.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087301, "uuid": "92527622-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_50818.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087301, "uuid": "92568d45-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_51894.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087301, "uuid": "9256a548-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81650.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087301, "uuid": "9256b0a7-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://r1v3-route.echi6under.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087301, "uuid": "9256facf-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72068.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087301, "uuid": "9266c367-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64307.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087301, "uuid": "9266e440-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_34055.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087301, "uuid": "92af4db9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_62563.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087303, "uuid": "93b3bbf8-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13720.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087304, "uuid": "945c7100-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_82276.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087304, "uuid": "946e80df-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_80840.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087304, "uuid": "946eec78-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_88222.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087305, "uuid": "9496a49c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_00231.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087305, "uuid": "94add005-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_36769.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087305, "uuid": "94cf70aa-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_74743.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087307, "uuid": "9627c66d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_52073.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087307, "uuid": "962a28e6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_60726.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087307, "uuid": "9635de94-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20396.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087308, "uuid": "967ddfa2-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_70706.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087308, "uuid": "9680c83b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_62963.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087308, "uuid": "96810218-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15965.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087308, "uuid": "96af5946-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_93958.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087308, "uuid": "96b748cf-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_36722.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087308, "uuid": "96d09bbc-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96986.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087308, "uuid": "96e209d9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_62911.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087308, "uuid": "96eebcbb-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_16010.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087309, "uuid": "9729c515-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_60163.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087309, "uuid": "9730fe54-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_38966.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087309, "uuid": "97321285-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15608.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087311, "uuid": "9885756b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08901.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087311, "uuid": "9894e5e7-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_41200.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087311, "uuid": "98b919b9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21152.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087312, "uuid": "98b99e4d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99162.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087312, "uuid": "98e3bda3-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_49151.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087313, "uuid": "997412d1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_03331.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087313, "uuid": "9974fcd4-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_32763.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087313, "uuid": "99c37da6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_33337.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087313, "uuid": "99c52d90-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99029.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087313, "uuid": "99c5ed38-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_58844.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087314, "uuid": "99ed824d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_23744.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087314, "uuid": "9a4f6ee4-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81050.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087315, "uuid": "9aad9cdb-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81547.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087315, "uuid": "9addd2aa-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_88599.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087315, "uuid": "9adfafd8-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_27669.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087316, "uuid": "9b52fbc4-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_09506.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087317, "uuid": "9bb7a65e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_94834.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087317, "uuid": "9bc2e40f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45349.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087317, "uuid": "9c45912f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87454.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087318, "uuid": "9c678ca3-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81664.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087318, "uuid": "9c96158b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_50934.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087319, "uuid": "9d55265c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_61111.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087319, "uuid": "9d7a0ad0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08999.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087320, "uuid": "9d82c994-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_83897.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087320, "uuid": "9de429b6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_26726.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087321, "uuid": "9e47dfb8-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_59903.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087321, "uuid": "9e47f96a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08622.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087321, "uuid": "9e5a80c5-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_53592.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087321, "uuid": "9e5be01d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_83865.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087321, "uuid": "9eae674a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_17662.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087322, "uuid": "9f0487ad-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_46190.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087322, "uuid": "9f048a8b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08622.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087322, "uuid": "9f1430c8-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_33091.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087322, "uuid": "9f17a993-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45694.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087322, "uuid": "9f273918-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_82208.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087322, "uuid": "9f2776d9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_01355.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087323, "uuid": "9f7bc8d4-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45694.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087323, "uuid": "9fb51728-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_46415.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087323, "uuid": "9fd37e81-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_70376.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087323, "uuid": "9fd720bc-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_19796.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087324, "uuid": "9fe260b0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13097.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087324, "uuid": "9fe2b937-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_25276.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087324, "uuid": "a0176317-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64055.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087324, "uuid": "a03004e0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20713.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087324, "uuid": "a06d5aa6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_77813.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087325, "uuid": "a0acbab0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_22166.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087325, "uuid": "a0e3e079-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_77324.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087327, "uuid": "a1b32e5b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_16464.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087327, "uuid": "a1ca5aad-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99029.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087327, "uuid": "a1fa9b99-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_84071.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087327, "uuid": "a1fd0b9c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_94559.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087327, "uuid": "a1fdb69c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_80995.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087329, "uuid": "a3128631-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_88815.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087329, "uuid": "a34f6ec1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08820.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087329, "uuid": "a3505a47-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_28076.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087329, "uuid": "a36f3d17-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_48499.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087330, "uuid": "a3ac5533-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_65225.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087331, "uuid": "a4157c64-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_86428.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087331, "uuid": "a4377df9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_97776.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087331, "uuid": "a43e41f6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_48879.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087331, "uuid": "a4401646-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_77462.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087331, "uuid": "a4401cb5-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99091.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087331, "uuid": "a446305c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_83888.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087331, "uuid": "a4a0b85a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54535.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087332, "uuid": "a4a908fc-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_84106.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087332, "uuid": "a4b1318c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_59685.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087332, "uuid": "a4e22d0c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_47537.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087333, "uuid": "a54c658e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_70273.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087334, "uuid": "a5d7d677-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_16220.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087334, "uuid": "a60cd607-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_38899.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087334, "uuid": "a63fef73-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_27129.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087334, "uuid": "a66a6165-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_11369.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087335, "uuid": "a679d9fe-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_73976.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087335, "uuid": "a69ef6b0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_33845.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087335, "uuid": "a6fe96b6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_12971.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087336, "uuid": "a70fc92b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_43024.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087336, "uuid": "a7256484-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87626.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087336, "uuid": "a7717cec-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_17662.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087336, "uuid": "a7723fb5-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_10888.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087337, "uuid": "a7d415be-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_35807.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087338, "uuid": "a83a40c9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_75496.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087338, "uuid": "a83a63f3-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_60967.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087338, "uuid": "a85cf897-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_47488.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087338, "uuid": "a85cffd7-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_51171.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087338, "uuid": "a8804113-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_59685.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087338, "uuid": "a88055f1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96182.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087338, "uuid": "a88109fc-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99164.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087338, "uuid": "a8c0b5e2-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21763.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087339, "uuid": "a944853d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_95394.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087340, "uuid": "a96a1ec0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_65652.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087340, "uuid": "a96e4445-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_71885.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087340, "uuid": "a985ae2f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_66250.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087340, "uuid": "a99e0412-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81383.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087340, "uuid": "a9be9e36-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_52843.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087340, "uuid": "a9bf6bd8-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_43388.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087340, "uuid": "a9c1b125-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_12317.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087340, "uuid": "a9c59554-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_39203.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087341, "uuid": "aa5d2c29-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_37826.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087341, "uuid": "aa5eb1ae-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_71512.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087341, "uuid": "aa636425-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_85772.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087341, "uuid": "aa707cb7-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_00620.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087342, "uuid": "aaac1aba-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_83432.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087342, "uuid": "aabe2873-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21415.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087344, "uuid": "ac1a4667-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_22872.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087344, "uuid": "ac1d0e62-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_23356.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087345, "uuid": "ac819707-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_95289.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087345, "uuid": "ac8a913e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21463.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087345, "uuid": "acc17a63-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13186.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087345, "uuid": "ace2fd09-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_16464.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087346, "uuid": "ad1020bc-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_39804.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087346, "uuid": "ad6b56c4-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_73989.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087347, "uuid": "ada5861d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_93351.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087347, "uuid": "adb30b10-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_44883.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087347, "uuid": "adeed12f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_84106.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087347, "uuid": "adfccc97-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_93995.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087347, "uuid": "ae0f4eaa-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_97333.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087348, "uuid": "ae6c4f8b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_66742.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087348, "uuid": "ae7f5a5e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_25599.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087348, "uuid": "aea1f621-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_77272.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087348, "uuid": "aea26eb0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_94326.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087348, "uuid": "aea778ba-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_73959.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087349, "uuid": "aeca22c1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_62931.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087349, "uuid": "aeca23cc-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_05941.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087349, "uuid": "aefa51b1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://fv5-5.files.fm/down.php?i=qqrxaww3tr&n=rIFbbkp.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087350, "uuid": "af7cdd84-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_18811.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087350, "uuid": "afac9488-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_02881.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087350, "uuid": "afaf515d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_55259.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087350, "uuid": "afc4d313-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96565.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087350, "uuid": "afcbd465-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_47630.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087350, "uuid": "afd6862a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_63809.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087350, "uuid": "aff2ffb3-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_41668.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087351, "uuid": "affd0849-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_23536.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087351, "uuid": "b01e2d57-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_88088.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087351, "uuid": "b0370294-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81650.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087351, "uuid": "b0550362-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99162.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087352, "uuid": "b101efe5-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_00492.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087353, "uuid": "b16f1986-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_42322.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087354, "uuid": "b1c97363-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_92625.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087354, "uuid": "b1ec6de3-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_36677.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087354, "uuid": "b1ee04de-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_43756.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087354, "uuid": "b1f0c667-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_16459.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087354, "uuid": "b211209e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_93813.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087355, "uuid": "b2c8c353-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_03674.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087356, "uuid": "b38442a3-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_66977.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087356, "uuid": "b3886154-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_28358.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087357, "uuid": "b39082ba-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_47796.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087357, "uuid": "b390f65c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_02024.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087357, "uuid": "b3a5c156-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13720.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087357, "uuid": "b3e06d40-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_12660.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087357, "uuid": "b4224dd6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_60763.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087357, "uuid": "b423b046-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_92910.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087357, "uuid": "b423d867-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_33018.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087358, "uuid": "b4298ab1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_23564.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087358, "uuid": "b44dccf3-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_53313.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087358, "uuid": "b45de69b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81383.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087358, "uuid": "b45e6af0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_37816.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087358, "uuid": "b4897f6d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_94040.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087358, "uuid": "b49e60ea-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_76148.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087358, "uuid": "b4a80340-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_46475.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087358, "uuid": "b4ae53c1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07950.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087359, "uuid": "b4cd0b2e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20126.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087359, "uuid": "b5293965-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_76995.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087360, "uuid": "b57863b1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_88693.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087360, "uuid": "b59f6bc1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08380.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087360, "uuid": "b5ab3f18-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_37131.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087360, "uuid": "b5adc449-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81040.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087360, "uuid": "b5e10cb0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64898.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087362, "uuid": "b70260a3-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_31677.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087363, "uuid": "b77656a1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_90347.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087363, "uuid": "b776d018-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_22533.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087363, "uuid": "b790f6e2-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99084.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087363, "uuid": "b796be44-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99043.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087364, "uuid": "b8197e42-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_56298.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087364, "uuid": "b84dd400-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20786.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087364, "uuid": "b84e07c2-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_23908.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087365, "uuid": "b851f5dc-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_44883.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087365, "uuid": "b87b74d5-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_28685.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087365, "uuid": "b87d3149-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_11651.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087366, "uuid": "b9002f9f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_52435.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087366, "uuid": "b91c58d1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_90767.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087366, "uuid": "b93136f8-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68583.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087366, "uuid": "b934a384-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81148.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087367, "uuid": "b9ad2c97-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_06290.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087367, "uuid": "b9c7817e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_57655.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087367, "uuid": "ba083618-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_04630.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087367, "uuid": "ba0868c1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72333.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087368, "uuid": "ba7abd7d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69394.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087368, "uuid": "ba7e43cb-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_91865.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087368, "uuid": "ba87de99-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_80321.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087368, "uuid": "bab189bb-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21603.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087369, "uuid": "bac66bae-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_75496.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087369, "uuid": "bb14e063-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_56400.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087369, "uuid": "bb15e0fc-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20882.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087369, "uuid": "bb36fa6c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_48547.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087370, "uuid": "bb6a73cf-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_09625.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087370, "uuid": "bb73355c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69962.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087370, "uuid": "bb7ae96e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_86842.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087370, "uuid": "bb9c7d6c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_09625.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087370, "uuid": "bba96af6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_29513.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087370, "uuid": "bbd99aa0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_26708.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087371, "uuid": "bbf80bf1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_33337.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087372, "uuid": "bc7f7641-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_11549.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087372, "uuid": "bc8e363c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_27245.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087372, "uuid": "bcbbc63a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_22845.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087372, "uuid": "bcbbd180-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_90950.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087372, "uuid": "bcd06df0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87533.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087373, "uuid": "bd700c02-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_83473.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087373, "uuid": "bd761aa6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_60666.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087373, "uuid": "bd917294-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_59665.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087374, "uuid": "bdee26e6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_02324.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087374, "uuid": "be10dd88-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20396.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087374, "uuid": "be2b0760-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_79342.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087375, "uuid": "be82b439-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_38374.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087375, "uuid": "bea0cfa3-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_66758.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087376, "uuid": "bef1d795-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_10718.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087376, "uuid": "bef6d3d0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_37616.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087377, "uuid": "bff81e1a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_12525.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087377, "uuid": "c00c9755-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_98937.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087378, "uuid": "c023b1a0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54354.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087378, "uuid": "c03ad90e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_82276.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087378, "uuid": "c040b655-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_33845.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087378, "uuid": "c05a3711-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_40358.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087378, "uuid": "c060c20b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_53196.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087378, "uuid": "c06abad6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_79342.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087378, "uuid": "c072e9c6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_46084.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087378, "uuid": "c094de7f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_05194.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087379, "uuid": "c0d0b129-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_79483.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087379, "uuid": "c0f2b7eb-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08667.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087379, "uuid": "c0f8f7eb-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_97508.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087379, "uuid": "c0fc2800-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_83473.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087379, "uuid": "c0fecd7f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_17312.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087380, "uuid": "c1644e81-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_16010.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087380, "uuid": "c16f5227-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_18664.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087380, "uuid": "c1904f81-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_55292.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087381, "uuid": "c1ebccf1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_62609.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087381, "uuid": "c2236386-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_61896.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087381, "uuid": "c2267763-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_02024.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087381, "uuid": "c23f9d27-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21473.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087381, "uuid": "c250636f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_12397.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087381, "uuid": "c2507258-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_10624.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087382, "uuid": "c2cf3927-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87491.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087382, "uuid": "c2ff617a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_97508.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087383, "uuid": "c314643b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_58115.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087383, "uuid": "c3251eaa-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_85262.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087383, "uuid": "c375866e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_25906.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087384, "uuid": "c3bc6ee9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96728.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087384, "uuid": "c3bc8d6e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_84426.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087384, "uuid": "c3bf0210-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68501.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087384, "uuid": "c40b5797-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_34496.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087384, "uuid": "c424a32b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_17005.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087384, "uuid": "c43761ed-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_86869.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087385, "uuid": "c45e4746-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_05801.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087385, "uuid": "c49ba961-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_17312.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087386, "uuid": "c4db7c4d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72201.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087386, "uuid": "c50c20c7-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_59474.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087386, "uuid": "c56ce2a5-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68148.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087387, "uuid": "c56fe6c8-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_75982.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087387, "uuid": "c578a66d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68622.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087387, "uuid": "c578f243-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_18664.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087387, "uuid": "c57acc3e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13881.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087387, "uuid": "c5ac3471-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_35403.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087388, "uuid": "c60d1e9b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21336.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087388, "uuid": "c65b08a6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_98790.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087388, "uuid": "c6678156-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_22996.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087388, "uuid": "c6679d11-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_05194.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087388, "uuid": "c66f657d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_03478.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087388, "uuid": "c6720604-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07828.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087388, "uuid": "c6725336-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69035.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087388, "uuid": "c6726212-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_24978.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087388, "uuid": "c6728362-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_23430.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087389, "uuid": "c6d02873-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_55953.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087389, "uuid": "c6e0b072-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_12110.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087390, "uuid": "c7605d5f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87253.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087390, "uuid": "c7954ad5-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68362.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087390, "uuid": "c79568f7-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_93995.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087390, "uuid": "c7958654-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_18811.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087390, "uuid": "c7b3b33b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_56161.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087390, "uuid": "c7b85887-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_34496.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087394, "uuid": "c9d89fcf-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_84839.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087394, "uuid": "c9d8a34f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_53430.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087394, "uuid": "ca00c4fa-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_67655.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087394, "uuid": "ca025ae9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20882.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087394, "uuid": "ca122996-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_49151.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087394, "uuid": "ca27d2eb-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_27329.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087394, "uuid": "ca289f83-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_34916.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087394, "uuid": "ca299c64-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_62911.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087395, "uuid": "ca40e45e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_11549.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087395, "uuid": "ca7ee97e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_30329.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087395, "uuid": "caa8f74d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_37707.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087396, "uuid": "cb04c103-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_85262.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087396, "uuid": "cb5a0b72-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_78812.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087397, "uuid": "cb7fad86-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_89593.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087397, "uuid": "cbc49707-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_97426.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087397, "uuid": "cbd8c9b7-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69035.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087397, "uuid": "cbd99886-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_42426.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087397, "uuid": "cbf076e7-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_03796.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087398, "uuid": "cc056594-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_01535.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087398, "uuid": "cc12eac6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_85892.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087398, "uuid": "cc239290-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15181.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087398, "uuid": "cc242d73-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81271.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087398, "uuid": "cc313f51-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_90583.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087398, "uuid": "cc3ce919-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64509.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087398, "uuid": "cc45d054-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_50999.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087398, "uuid": "cc4749af-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_74028.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087398, "uuid": "cc6395d8-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_25110.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087399, "uuid": "ccbeb981-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_83777.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087399, "uuid": "cce77a9d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13097.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087399, "uuid": "cd1adb25-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_60502.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087399, "uuid": "cd1b8069-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_33197.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087400, "uuid": "cd35a1cc-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_85772.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087400, "uuid": "cd3c4513-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_90767.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087400, "uuid": "cd3c62b4-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_39203.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087400, "uuid": "cd7220ef-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_78515.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087401, "uuid": "cdc6b0bf-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_65651.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087401, "uuid": "cdeb284c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64538.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087402, "uuid": "ce75b286-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99043.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087402, "uuid": "ce76afe7-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_91997.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087402, "uuid": "cec59340-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64040.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087402, "uuid": "ced31774-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_88746.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087402, "uuid": "cedc6a9d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07301.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087403, "uuid": "cefb8a11-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_39368.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087404, "uuid": "cf9f0802-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_29996.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087404, "uuid": "cfa0c280-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_61896.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087404, "uuid": "cfab1781-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13316.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087404, "uuid": "cfab9c6f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_88088.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087404, "uuid": "cfca4c1f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_79483.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087404, "uuid": "cfd6c6b7-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_94834.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087405, "uuid": "d0885fb8-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_97017.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087406, "uuid": "d1171544-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_41093.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087407, "uuid": "d1777f67-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_74209.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087407, "uuid": "d1c4a9fc-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_43919.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087409, "uuid": "d2a1051a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_67328.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087409, "uuid": "d2c9f482-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_48796.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087409, "uuid": "d2cbb73d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_65225.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087409, "uuid": "d2d2e3ee-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_60056.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087409, "uuid": "d2d6fcb3-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_61762.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087409, "uuid": "d2d70d52-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_71405.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087409, "uuid": "d2d7586a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_88815.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087409, "uuid": "d2ed09a7-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_11651.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087409, "uuid": "d2efa5b2-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99806.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087409, "uuid": "d2f04662-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_75025.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087409, "uuid": "d311dc3e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_84426.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087409, "uuid": "d32095ee-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_16430.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087410, "uuid": "d32622ec-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_46586.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087410, "uuid": "d362fa23-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_36406.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087410, "uuid": "d362fc55-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13309.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087410, "uuid": "d3658b1e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_95509.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087410, "uuid": "d3714046-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72788.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087410, "uuid": "d3ace96f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_89593.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087410, "uuid": "d3ad645f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_63640.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087411, "uuid": "d3fe50cd-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_79078.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087411, "uuid": "d4004fd3-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_85013.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087412, "uuid": "d463bd88-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_61938.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087412, "uuid": "d4716e40-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_10931.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087412, "uuid": "d4719c84-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_36175.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087412, "uuid": "d4b1bc6f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_41312.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087412, "uuid": "d4b5892f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_85697.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087412, "uuid": "d4cbb250-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_66425.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087412, "uuid": "d4d526d9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_24820.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087413, "uuid": "d5154961-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_79294.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087413, "uuid": "d537b1f9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_38670.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087413, "uuid": "d53fdde7-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_47014.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087413, "uuid": "d57bcddf-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_83640.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087415, "uuid": "d64fdea6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45276.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087415, "uuid": "d688e24f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_55920.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087415, "uuid": "d6920b86-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_05941.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087415, "uuid": "d694c73b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_27140.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087417, "uuid": "d7642766-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_55920.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087417, "uuid": "d764456f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_56406.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087417, "uuid": "d76b4bd8-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13236.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087417, "uuid": "d76b5b85-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_63640.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087417, "uuid": "d76b873c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_98423.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087417, "uuid": "d7765caf-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_53631.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087417, "uuid": "d79327e1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_83865.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087417, "uuid": "d7934529-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_66977.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087417, "uuid": "d7a368c6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_84450.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087417, "uuid": "d7a393d3-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_83940.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087417, "uuid": "d7b8799b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_98234.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087417, "uuid": "d7d8a300-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_77324.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087417, "uuid": "d7e63466-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_94833.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087419, "uuid": "d8e0cd04-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_92157.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087419, "uuid": "d8e9782e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_93549.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087419, "uuid": "d90abce1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_98882.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087420, "uuid": "d9685052-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_01211.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087420, "uuid": "d9712b6f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_95509.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087420, "uuid": "d9714748-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_02643.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087420, "uuid": "d973f3d7-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_76012.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087421, "uuid": "d9e5cfe9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_66234.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087421, "uuid": "d9f055ad-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_26097.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087421, "uuid": "d9f05889-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_26463.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087421, "uuid": "d9f05cda-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_35478.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087421, "uuid": "d9f09f93-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72520.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087421, "uuid": "d9f0a95b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87626.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087421, "uuid": "da061697-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_91747.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087422, "uuid": "da7aaeab-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81383.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087423, "uuid": "db56fdb4-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_00279.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087423, "uuid": "db619e72-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_32532.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087423, "uuid": "db709dc5-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_00826.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087424, "uuid": "dbdf4de6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_65803.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087426, "uuid": "dcbec06a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_84107.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087426, "uuid": "dcf775ee-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_63451.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087426, "uuid": "dd15feba-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_83473.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087426, "uuid": "dd41db4e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_77949.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087427, "uuid": "dd52d8f2-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_28210.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087427, "uuid": "dd530b14-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68221.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087427, "uuid": "dd8125bb-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_34163.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087427, "uuid": "dd8aeff7-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_80321.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087427, "uuid": "dd952c27-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96498.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087427, "uuid": "dd9d4c8d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08859.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087428, "uuid": "de4effd0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15848.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087428, "uuid": "de4f2201-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45405.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087429, "uuid": "def96145-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_11594.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087429, "uuid": "df0a52a9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_36834.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087430, "uuid": "df7e96fb-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20137.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087431, "uuid": "dfb43104-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_91790.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087434, "uuid": "e1b7040d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13802.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087434, "uuid": "e1da4ba0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_06087.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087434, "uuid": "e1e734a0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_82893.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087435, "uuid": "e2114d1f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07352.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087435, "uuid": "e2116062-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_65740.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087435, "uuid": "e2565a27-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_79681.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087435, "uuid": "e26b99a4-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_43634.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087435, "uuid": "e26cd2fe-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_95015.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087435, "uuid": "e26d09d9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_90644.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087435, "uuid": "e26d0d06-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_46031.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087435, "uuid": "e275cf53-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_89789.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087435, "uuid": "e276b682-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99268.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087435, "uuid": "e281be5b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87519.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087435, "uuid": "e28202ea-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64509.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087435, "uuid": "e28d7c78-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_25490.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087436, "uuid": "e2ab3e3d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_03767.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087436, "uuid": "e2c32486-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_84705.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087436, "uuid": "e2d3555a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_35369.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087436, "uuid": "e2eed073-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81592.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087437, "uuid": "e350e7c0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_98722.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087438, "uuid": "e3da0d9e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_29943.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087439, "uuid": "e4f2a1d8-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_16764.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087440, "uuid": "e5135f52-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72883.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087440, "uuid": "e52057f1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_62809.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087440, "uuid": "e52066a2-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_91107.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087440, "uuid": "e5206e58-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_25276.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087440, "uuid": "e59c42fa-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_91478.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087441, "uuid": "e5c3e169-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_11286.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087441, "uuid": "e5c56cf1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_57064.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087441, "uuid": "e618b72f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_73989.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087441, "uuid": "e618e8aa-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_71339.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087442, "uuid": "e637d45e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_40134.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087442, "uuid": "e669d8de-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_29496.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087442, "uuid": "e6932697-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_24993.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087442, "uuid": "e6a2d4cf-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_71405.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087442, "uuid": "e6b73373-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_27995.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087443, "uuid": "e72c235c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81867.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087443, "uuid": "e7614ad8-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69149.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087446, "uuid": "e89e330e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13843.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087446, "uuid": "e8e0784f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_93259.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087448, "uuid": "ea23491b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_52758.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087448, "uuid": "ea234a90-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_50934.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087449, "uuid": "eaa190e6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_14079.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087449, "uuid": "eaa19be1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_67130.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087449, "uuid": "eaa86fe1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_09953.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087450, "uuid": "eafd0f19-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_79849.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087450, "uuid": "eafd1266-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_18487.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087450, "uuid": "eb028c78-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_66147.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087450, "uuid": "eb0de2f1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_43152.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087450, "uuid": "eb44e146-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_31475.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087450, "uuid": "eb557fea-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_31677.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087451, "uuid": "ebbbc488-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_88599.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087453, "uuid": "ed0d6c3e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_84839.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087453, "uuid": "ed1c1aa8-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_95509.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087453, "uuid": "ed2257ca-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87951.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087453, "uuid": "ed226928-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_50931.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087454, "uuid": "edefcc51-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_39773.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087455, "uuid": "edf64305-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_22996.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087455, "uuid": "edf650b3-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_70256.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087455, "uuid": "ee20b39c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_47978.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087455, "uuid": "ee25aab1-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_53604.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087455, "uuid": "ee2b2974-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07793.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087455, "uuid": "ee343ee6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_83497.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087456, "uuid": "eea57b6d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.249.61.91/Client-built.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087456, "uuid": "ef18ec66-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_41200.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087457, "uuid": "ef7e6631-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_77303.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087457, "uuid": "efaf0064-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_57990.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087457, "uuid": "efb942ce-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_90347.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087458, "uuid": "efcc24cc-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_41495.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087458, "uuid": "f010e87a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_79078.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087458, "uuid": "f010ea9f-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_85772.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087458, "uuid": "f04a388b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_60401.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087458, "uuid": "f04a5c28-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_50818.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087458, "uuid": "f0566728-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_90644.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087461, "uuid": "f1a2bd3a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68362.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087461, "uuid": "f1a2c611-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_52221.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087461, "uuid": "f1a9d962-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_63278.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087461, "uuid": "f1b461f6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87533.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087464, "uuid": "f39b254e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_89541.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087464, "uuid": "f3d07744-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_84426.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087464, "uuid": "f3d8cd0d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08429.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087465, "uuid": "f3f54425-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_01535.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087465, "uuid": "f406e216-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_18344.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087465, "uuid": "f412f669-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15283.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087465, "uuid": "f4165fe6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99029.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087465, "uuid": "f4578c42-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_88693.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087465, "uuid": "f45b4412-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72606.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087465, "uuid": "f461181d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_897893.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087466, "uuid": "f48fd8f0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_52326.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087467, "uuid": "f52c49cb-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69740.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087468, "uuid": "f6087c00-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_03569.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087469, "uuid": "f6b07175-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_19977.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087470, "uuid": "f75de48c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81245.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087470, "uuid": "f766881b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64040.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087470, "uuid": "f7669c93-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87927.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087470, "uuid": "f76f0d80-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69212.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087470, "uuid": "f773c5f4-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_49178.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087470, "uuid": "f7770acc-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69626.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087471, "uuid": "f7c6a540-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.25.88:33602/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087471, "uuid": "f7ccef3e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_84839.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087471, "uuid": "f7ce0e22-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08074.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087471, "uuid": "f7d3354d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20126.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087471, "uuid": "f7d6e7c4-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_37131.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087471, "uuid": "f7f4eacb-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_50289.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087472, "uuid": "f843d17e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54122.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087472, "uuid": "f848164b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68476.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087472, "uuid": "f848366e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99389.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087472, "uuid": "f84ccdba-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_89271.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087472, "uuid": "f84ce404-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87454.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087472, "uuid": "f85648b0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_84276.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087472, "uuid": "f85af6f7-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_73308.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087472, "uuid": "f85b4ffa-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15283.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087472, "uuid": "f861f4f7-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_75025.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087472, "uuid": "f89feb78-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_53501.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087473, "uuid": "f8e099c3-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07384.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087473, "uuid": "f8e0cc11-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_92463.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087473, "uuid": "f8ed69c6-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_60163.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087473, "uuid": "f8ed8b57-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15217.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087473, "uuid": "f903cf6e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_56966.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087476, "uuid": "fafe759b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_85275.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087476, "uuid": "fb0d2d98-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_01355.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087476, "uuid": "fb10b4ea-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_89789.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087477, "uuid": "fb583cc0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_83645.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087477, "uuid": "fb67d5b0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_94399.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087478, "uuid": "fbd44bd5-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_39773.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087478, "uuid": "fbd4e1ed-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_60666.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087478, "uuid": "fbd51e2c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81148.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087478, "uuid": "fbdb7101-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96728.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087478, "uuid": "fbe0c52a-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45349.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087478, "uuid": "fbe5e117-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_97420.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087478, "uuid": "fbe5e8d2-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_02259.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087478, "uuid": "fbe5e8f5-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_32763.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087478, "uuid": "fbfc9b3b-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_80122.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087478, "uuid": "fc029a5e-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99389.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087478, "uuid": "fc1a7221-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_33197.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087478, "uuid": "fc1bcc5d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64509.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087478, "uuid": "fc1ddeb0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69626.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087478, "uuid": "fc39e734-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08074.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087480, "uuid": "fd53a0d9-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.25.88:33602/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087481, "uuid": "fdd2137d-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_31475.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087481, "uuid": "fdd233aa-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_86529.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087481, "uuid": "fdd25e1c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_88598.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087482, "uuid": "fe34f92c-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99893.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087482, "uuid": "fe6569ec-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_86869.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087482, "uuid": "fe966a77-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_38670.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087483, "uuid": "fee176c8-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_16922.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087484, "uuid": "ffb4d4f0-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_47014.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087485, "uuid": "fff4d172-373d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_67328.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087485, "uuid": "0029bd8a-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_18487.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087486, "uuid": "009c9b40-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_79811.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087486, "uuid": "00a83336-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96490.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087486, "uuid": "00b80549-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99268.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087486, "uuid": "00ea9e10-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_50144.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087486, "uuid": "01055e32-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_71339.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087487, "uuid": "013a5464-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_24978.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087487, "uuid": "01495ef5-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_06835.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087487, "uuid": "0149700c-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mypanel.vip/a9a4wp/hbgfred.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087487, "uuid": "015b1da7-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07367.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087487, "uuid": "017d87a7-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13579.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087487, "uuid": "017ddff6-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_63265.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087487, "uuid": "017eff41-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_77773.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087487, "uuid": "018739f4-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_93813.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087487, "uuid": "01988bd9-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_16480.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087487, "uuid": "019953bc-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_83432.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087488, "uuid": "01babfd9-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_70818.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087488, "uuid": "01bb23f3-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_86145.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087489, "uuid": "02764fcb-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_26463.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087489, "uuid": "0276e0d6-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_59180.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087489, "uuid": "02770c31-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_59474.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087489, "uuid": "02a7ceab-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96783.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087489, "uuid": "02ac4ef5-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15314.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087489, "uuid": "02ac596e-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_93224.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087490, "uuid": "030b2ba8-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08335.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087490, "uuid": "0319af9f-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_73011.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087490, "uuid": "031e58c5-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_95559.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087490, "uuid": "0357ee41-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_63667.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087490, "uuid": "0364c143-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15833.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087490, "uuid": "0364f9af-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_29854.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087491, "uuid": "0385b4c9-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08380.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087491, "uuid": "0386e9e9-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96061.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087492, "uuid": "040442f2-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15608.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087492, "uuid": "0435c405-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_67465.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087492, "uuid": "04399a3d-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_60401.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087492, "uuid": "044b88d1-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99433.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087492, "uuid": "045874b7-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_83467.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087496, "uuid": "066dc1a6-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_11286.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087496, "uuid": "06807f35-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_26253.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087496, "uuid": "0685bcd2-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96490.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087496, "uuid": "06905a74-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20859.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087496, "uuid": "069075e0-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_66758.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087496, "uuid": "0697eea9-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54542.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087496, "uuid": "06983627-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87927.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087496, "uuid": "06a55251-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08859.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087496, "uuid": "06a79c0b-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_23430.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087498, "uuid": "07c70894-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_85753.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087498, "uuid": "082552cd-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_84792.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087498, "uuid": "082c4cc8-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68221.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087499, "uuid": "08a8c8c0-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_98234.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087500, "uuid": "08f0ee16-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_25736.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087500, "uuid": "091722e7-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_19796.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087500, "uuid": "0919c516-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_11055.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087500, "uuid": "091eaf05-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_24086.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087500, "uuid": "0929d7ae-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_75034.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087500, "uuid": "094465c2-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_80122.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087500, "uuid": "0952ac13-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_74570.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087501, "uuid": "0989dbe7-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_17005.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087501, "uuid": "098eed8c-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_41620.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087501, "uuid": "09b13708-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_61627.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087501, "uuid": "09d0871e-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_47537.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087502, "uuid": "0a06159d-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_91997.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087502, "uuid": "0a4a5a37-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_93958.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087502, "uuid": "0a7b29c9-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_76760.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087502, "uuid": "0a7fb891-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_17823.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087502, "uuid": "0a825f8c-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_42426.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087503, "uuid": "0aa6952b-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69962.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087503, "uuid": "0ac66807-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_46586.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087503, "uuid": "0aea044f-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_44587.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087503, "uuid": "0af61b9f-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_26022.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087503, "uuid": "0af9bd88-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_55337.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087503, "uuid": "0b018b6b-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_28820.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087503, "uuid": "0b01f4f4-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87927.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087504, "uuid": "0b2bd42b-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_95015.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087504, "uuid": "0b59913f-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15837.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087504, "uuid": "0b791c98-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_25110.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087505, "uuid": "0bc2bb44-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_74348.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087505, "uuid": "0bd737cd-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68793.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087505, "uuid": "0bd7ce18-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_23840.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087505, "uuid": "0bdb86c4-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_63265.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087505, "uuid": "0bdd24f8-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_33853.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087507, "uuid": "0d205066-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72800.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087507, "uuid": "0d3bed2d-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81050.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087507, "uuid": "0d5cf987-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54154.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087507, "uuid": "0d5cfd35-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_52315.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087507, "uuid": "0d5d0752-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_56208.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087507, "uuid": "0d871d93-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_27247.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087508, "uuid": "0d96cbca-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_43666.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087508, "uuid": "0da9e14e-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_65872.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087508, "uuid": "0daa19f7-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_19463.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087508, "uuid": "0dcb47f9-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_85706.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087508, "uuid": "0dd79b46-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_35769.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087508, "uuid": "0de53aee-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_97143.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087508, "uuid": "0de5e476-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_06705.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087509, "uuid": "0e45f3db-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_18701.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087509, "uuid": "0e57b943-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54606.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087509, "uuid": "0e5d879f-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_43756.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087510, "uuid": "0ee8c2cc-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://water.s3.cubbit.eu/ccAoheF.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087512, "uuid": "101e4100-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_56403.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087513, "uuid": "10a9a4bf-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08373.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087513, "uuid": "10ae1aff-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54776.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087513, "uuid": "10be06fc-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_73549.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087513, "uuid": "10c2ac84-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99893.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087514, "uuid": "1149f835-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_97017.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087514, "uuid": "114b9be3-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15098.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087514, "uuid": "114d447f-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_88693.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087514, "uuid": "114da8bd-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_91997.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087514, "uuid": "11511a7b-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69254.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087514, "uuid": "115195e4-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_19556.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087514, "uuid": "11526f88-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_29996.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087515, "uuid": "124f3af4-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_78394.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087515, "uuid": "124f5787-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21024.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087516, "uuid": "1289772a-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_44238.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087517, "uuid": "130192ee-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_98916.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087518, "uuid": "13ec946a-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72346.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087518, "uuid": "13fe5d81-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_24901.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087518, "uuid": "14084bff-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_03497.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087519, "uuid": "141b1c6d-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_60161.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087519, "uuid": "141d5edf-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_00007.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087519, "uuid": "14311983-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_77802.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087519, "uuid": "14453b33-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_37394.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087519, "uuid": "1447a8ba-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_86145.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087519, "uuid": "145a977e-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_18258.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087519, "uuid": "145f0395-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_92910.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087519, "uuid": "1475c96f-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_83497.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087519, "uuid": "14b34785-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_28685.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087520, "uuid": "14c13dce-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_83467.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087520, "uuid": "14c27702-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_50289.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087520, "uuid": "14ce39eb-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_86171.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087520, "uuid": "14d258ad-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_93351.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087520, "uuid": "14e4245f-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99237.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087520, "uuid": "14f2d21c-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07712.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087520, "uuid": "150b227a-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_27177.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087521, "uuid": "1551ac0f-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://water.s3.cubbit.eu/bmiSkak.txt", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087521, "uuid": "158557a9-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13663.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087521, "uuid": "15b60a94-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54606.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087521, "uuid": "15b813c9-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68476.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087521, "uuid": "15d7daf5-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_02839.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087522, "uuid": "15f99ec2-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_73129.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087522, "uuid": "1637e4ea-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13881.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087522, "uuid": "16462c42-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72346.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087523, "uuid": "168a6c76-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_14388.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087523, "uuid": "1699fcc1-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_84705.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087523, "uuid": "16a7a28c-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_60726.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087523, "uuid": "16c66a2d-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_26730.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087524, "uuid": "173bca39-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_89541.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087524, "uuid": "17a34062-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_00492.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087524, "uuid": "17a6d007-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_58832.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087525, "uuid": "183b00f9-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_48040.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087526, "uuid": "187ce980-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64220.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087526, "uuid": "18a19649-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69721.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087526, "uuid": "18b86032-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_85706.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087527, "uuid": "19069cd9-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_06585.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087527, "uuid": "1906b0fd-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96580.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087527, "uuid": "19622366-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_84792.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087530, "uuid": "1ab92007-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54935.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087530, "uuid": "1b040a84-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_42022.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087530, "uuid": "1b258f93-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_67100.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087531, "uuid": "1b67d765-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_97776.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087531, "uuid": "1b681122-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_26730.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087531, "uuid": "1b81be0a-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_00535.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087531, "uuid": "1b90d095-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_46359.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087532, "uuid": "1bec8fce-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_39368.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087532, "uuid": "1c199d0f-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_22704.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087532, "uuid": "1c474e9a-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_02192.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087532, "uuid": "1c63945a-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_91513.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087532, "uuid": "1c6401b4-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_10789.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087533, "uuid": "1c87c40d-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_55337.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087534, "uuid": "1d0f5fd5-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_65349.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087534, "uuid": "1d1cbefe-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81612.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087534, "uuid": "1d1d0481-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_25736.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087534, "uuid": "1d21a076-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64830.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087536, "uuid": "1e7b2584-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_28403.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087536, "uuid": "1e7d8643-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_60502.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087536, "uuid": "1e870e2d-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_60727.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087536, "uuid": "1e8ca393-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_77494.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087536, "uuid": "1e8ca86e-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_83777.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087536, "uuid": "1e8cd347-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96498.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087536, "uuid": "1e8d3b52-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96986.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087536, "uuid": "1e942cef-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_18869.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087536, "uuid": "1e944a84-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_10789.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087536, "uuid": "1e9a4052-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_04811.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087536, "uuid": "1e9a4851-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_91513.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087536, "uuid": "1e9a4b78-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07352.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087536, "uuid": "1e9a71b8-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_46190.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087536, "uuid": "1e9f0369-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_91747.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087536, "uuid": "1e9f0e4f-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20299.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087536, "uuid": "1e9f13c8-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_33769.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087536, "uuid": "1e9f1d7c-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_12487.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087540, "uuid": "20c0f776-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_24663.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087540, "uuid": "212bb880-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_66268.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087540, "uuid": "21304b36-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_52860.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087541, "uuid": "21517ae4-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_43024.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087541, "uuid": "21c94ae8-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21473.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087542, "uuid": "21ed5ff7-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_22739.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087542, "uuid": "21ef2b1d-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87554.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087542, "uuid": "2259adf2-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_11594.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087543, "uuid": "2270d3cb-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_94040.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087543, "uuid": "228899fe-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_897893.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087543, "uuid": "22fc80f0-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96565.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087543, "uuid": "22fd4466-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_59572.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087543, "uuid": "22feee38-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_97426.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087544, "uuid": "2312b11f-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_35478.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087544, "uuid": "2314a717-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_16459.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087544, "uuid": "23569767-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_34561.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087544, "uuid": "235893a9-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_25188.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087545, "uuid": "23ae0282-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45429.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087545, "uuid": "23b2d444-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_91985.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087545, "uuid": "240c0863-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_77434.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087545, "uuid": "24118346-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_23255.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087545, "uuid": "241abf68-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_61120.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087546, "uuid": "2433c6af-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_86171.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087546, "uuid": "2451a315-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_49317.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087546, "uuid": "245f6d8e-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_89593.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087547, "uuid": "24fb15a1-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_16922.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087547, "uuid": "25635250-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_25723.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087548, "uuid": "2586edcf-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_06072.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087549, "uuid": "2603689d-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_34235.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087549, "uuid": "2604fccb-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_84107.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087549, "uuid": "260ef9c5-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07400.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087550, "uuid": "2719c60c-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_85095.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087550, "uuid": "271b1325-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45753.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087551, "uuid": "2759f113-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_66017.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087551, "uuid": "277d2e17-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_83497.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087552, "uuid": "27e9153b-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_36782.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087552, "uuid": "27efccbb-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_67925.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087552, "uuid": "27f9c7d4-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bgurbey.great-site.net/img_051935.png", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087552, "uuid": "2812c7f8-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_39804.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087552, "uuid": "2818799f-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_26917.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087552, "uuid": "2837942f-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15861.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087552, "uuid": "284e506f-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_36223.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087553, "uuid": "28730c9a-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_95692.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087553, "uuid": "2873ed11-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_25906.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087553, "uuid": "28745605-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_26253.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087553, "uuid": "2875e223-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_03894.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087553, "uuid": "289cdf50-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54805.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087553, "uuid": "28a6b4e8-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_97413.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087553, "uuid": "28ba5253-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_91513.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087554, "uuid": "28fd5d69-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_86869.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087554, "uuid": "29085480-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_29513.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087554, "uuid": "291cd782-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_92463.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087554, "uuid": "292057f7-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_97420.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087555, "uuid": "299e770d-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_76404.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087555, "uuid": "299e8505-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_75982.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087555, "uuid": "29a23f91-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_27442.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087555, "uuid": "29ada91b-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_42486.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087555, "uuid": "29ae762f-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_83940.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087555, "uuid": "29d0ad65-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64266.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087556, "uuid": "2abcce57-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_98790.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087559, "uuid": "2c06f0e3-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_91107.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087559, "uuid": "2c2426e7-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_55259.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087559, "uuid": "2c25104c-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_33967.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087559, "uuid": "2c62aeb8-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15791.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087559, "uuid": "2c65d564-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_22174.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087559, "uuid": "2c7ac6ab-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_91478.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087560, "uuid": "2c9e62ec-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_50298.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087560, "uuid": "2cfd06f2-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_51173.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087560, "uuid": "2d1d3326-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_85498.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087561, "uuid": "2d458b03-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_17113.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087561, "uuid": "2d80bcc5-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87057.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087561, "uuid": "2dabef3a-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_50999.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087561, "uuid": "2dad50b2-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_27177.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087562, "uuid": "2dd060c4-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_71512.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087562, "uuid": "2dd1187a-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_02148.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087563, "uuid": "2e8656b7-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_70351.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087563, "uuid": "2eaf8658-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_33122.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087563, "uuid": "2eb04275-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_83777.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087563, "uuid": "2eb0f23a-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_58832.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087563, "uuid": "2ec6c81c-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_05816.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087563, "uuid": "2ecf4c8b-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_38901.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087564, "uuid": "2f135ee5-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_95015.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087564, "uuid": "2f2687da-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_53313.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087564, "uuid": "2f437473-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_57557.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087564, "uuid": "2f43c8ae-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_79849.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087564, "uuid": "2f4463a5-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_34096.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087564, "uuid": "2f5ca17b-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45753.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087564, "uuid": "2f5e5a49-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_50616.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087564, "uuid": "2f6ccdcd-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87491.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087565, "uuid": "2fe44e84-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_31160.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087565, "uuid": "2fe4588d-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_06835.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087565, "uuid": "2ff4874e-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_91790.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087565, "uuid": "3006ee08-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_24070.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087566, "uuid": "301f5bba-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_95559.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087566, "uuid": "3020a19b-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_84276.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087566, "uuid": "3024aade-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_22301.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087566, "uuid": "309a7ff7-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_71145.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087567, "uuid": "30d67862-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69975.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087567, "uuid": "31034fbc-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_30425.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087567, "uuid": "3117f061-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_65803.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087567, "uuid": "314625f1-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_95823.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087568, "uuid": "3164c822-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_80321.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087568, "uuid": "3167e713-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69452.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087568, "uuid": "316bae42-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_85753.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087568, "uuid": "319c9fad-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_06716.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087569, "uuid": "3207e4df-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_71207.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087569, "uuid": "3211593c-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_10931.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087569, "uuid": "325a3e52-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81664.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087569, "uuid": "3275b7b7-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81664.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087569, "uuid": "32769d73-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_36677.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087569, "uuid": "327ee7a9-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_17113.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087569, "uuid": "327f3584-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87951.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087570, "uuid": "32863b7b-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_11740.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087570, "uuid": "3287d941-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_30425.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087570, "uuid": "32c063b3-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96673.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087570, "uuid": "32c9420a-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_09934.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087571, "uuid": "3362825b-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_41093.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087571, "uuid": "336cfc0e-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64307.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087571, "uuid": "337356e2-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_37394.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087573, "uuid": "3469d3a8-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96783.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087573, "uuid": "34bdf34a-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_84071.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087575, "uuid": "35950ac9-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_73549.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087575, "uuid": "35e6b5cf-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_24655.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087575, "uuid": "35ebba4d-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_73779.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087576, "uuid": "363684be-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_83418.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087576, "uuid": "3639ad8f-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_17665.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087576, "uuid": "363f2dad-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_94326.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087576, "uuid": "364170a2-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_60056.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087576, "uuid": "36651365-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_39670.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087577, "uuid": "36b6c52d-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_38954.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087577, "uuid": "36be76c4-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_49196.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087577, "uuid": "36c3b442-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_39469.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087578, "uuid": "37559fbd-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20799.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087578, "uuid": "37623fe3-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_75813.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087578, "uuid": "377e09c8-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_69212.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087578, "uuid": "377e3246-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_26022.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087578, "uuid": "377e6b99-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_00088.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087579, "uuid": "37f5e38f-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68148.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087579, "uuid": "37f5e5de-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54354.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087579, "uuid": "3810fe91-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_24993.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087579, "uuid": "381509c9-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_31160.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087579, "uuid": "3816142c-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21152.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087580, "uuid": "389a36cc-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_23564.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087580, "uuid": "38a3f213-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_89789.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087581, "uuid": "3915e5c6-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_61212.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087581, "uuid": "39380893-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99237.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087581, "uuid": "3941fc4f-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_24655.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087581, "uuid": "3943009f-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_14079.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087581, "uuid": "39814815-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_65652.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087581, "uuid": "399630b7-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72999.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087581, "uuid": "399b630c-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_05816.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087582, "uuid": "39b96ea2-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96608.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087582, "uuid": "39c1a27b-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87057.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087582, "uuid": "39d69403-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_74209.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087582, "uuid": "39d8b8a0-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_23911.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087583, "uuid": "3a7c0aab-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_43627.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087583, "uuid": "3a7c8ee4-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96986.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087583, "uuid": "3a7e818d-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81592.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087583, "uuid": "3aa565be-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_41312.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087583, "uuid": "3aa72db5-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21012.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087583, "uuid": "3abd51e9-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21336.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087583, "uuid": "3abf708a-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_31218.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087584, "uuid": "3addc06d-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_95365.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087584, "uuid": "3b1f67ed-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_18869.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087585, "uuid": "3bbc1fcb-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_63667.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087585, "uuid": "3bfee487-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_85262.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087585, "uuid": "3c05cac1-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_19180.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087586, "uuid": "3c39eb0f-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_74798.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087586, "uuid": "3c5913ad-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_06239.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087586, "uuid": "3c695edc-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_12487.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087586, "uuid": "3c7a9332-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_46899.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087587, "uuid": "3cd4706b-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_17822.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087587, "uuid": "3cd47fe3-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_22739.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087588, "uuid": "3da0dfd8-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_38427.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087589, "uuid": "3def9664-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_18892.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087589, "uuid": "3e2e0a97-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_90767.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087589, "uuid": "3e5410aa-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21927.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087589, "uuid": "3e6a7bdb-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45698.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087590, "uuid": "3e98830b-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_85369.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087590, "uuid": "3ed13848-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_83645.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087590, "uuid": "3ef7d815-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_52809.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087591, "uuid": "3f09b2ed-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_17665.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087591, "uuid": "3f20d8ea-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_62565.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087591, "uuid": "3f3972c1-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_06585.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087591, "uuid": "3f39959f-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_93549.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087591, "uuid": "3f4132f6-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_91985.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087591, "uuid": "3f414b9c-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_78515.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087591, "uuid": "3f4152b3-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_60081.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087591, "uuid": "3f415353-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_18088.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087591, "uuid": "3f415e10-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96939.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087592, "uuid": "3fa61e6f-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_25525.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087592, "uuid": "3fea192f-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_49780.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087592, "uuid": "3ff7b12f-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_01211.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087594, "uuid": "40f4ce67-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_94601.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087594, "uuid": "411887a7-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_97413.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087594, "uuid": "411afff9-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_86906.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087594, "uuid": "411dd098-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_01899.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087594, "uuid": "41200a75-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99091.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087594, "uuid": "412dcc53-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_61449.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087594, "uuid": "4137e9cb-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_49326.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087594, "uuid": "414c39dd-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_67655.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087595, "uuid": "4198c1e6-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_86145.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087595, "uuid": "419b07d6-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_77914.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087595, "uuid": "41e18764-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_04811.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087596, "uuid": "42528d32-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_22600.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087596, "uuid": "42540850-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_85013.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087596, "uuid": "429059f7-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21415.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087597, "uuid": "42a17445-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_50149.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087597, "uuid": "42b0ed62-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72520.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087598, "uuid": "439f9a08-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_74028.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087598, "uuid": "43c61e83-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_50628.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087599, "uuid": "43fe9b45-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_45793.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087600, "uuid": "44a9aeac-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_78550.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087600, "uuid": "44ad7339-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_94580.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087600, "uuid": "44be791a-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_51171.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087600, "uuid": "44e008b8-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_47630.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087600, "uuid": "44f0a62b-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_81909.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087601, "uuid": "44fe8785-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_37816.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087601, "uuid": "44ff7121-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_28332.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087601, "uuid": "45002879-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_20237.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087602, "uuid": "45c40798-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54126.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087602, "uuid": "45e16fca-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_53196.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087602, "uuid": "4619533f-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_61762.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087603, "uuid": "465d0bc4-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_88598.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087603, "uuid": "46830b9b-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_98234.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087604, "uuid": "46c72aa1-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_57352.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087604, "uuid": "46c824f1-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_46084.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087604, "uuid": "46d04479-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_04878.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087605, "uuid": "47752cb7-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72333.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087605, "uuid": "47b04849-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_28608.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087605, "uuid": "47e4212c-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_21490.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087605, "uuid": "47e46ff5-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_84705.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087606, "uuid": "483f2c2d-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_23744.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087606, "uuid": "483f936d-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_94580.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087606, "uuid": "4887c46b-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_39818.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087608, "uuid": "494d6d04-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_17822.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087609, "uuid": "4a00996e-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15388.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087609, "uuid": "4a0fa59d-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_80308.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087610, "uuid": "4aaef7e5-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_49515.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087610, "uuid": "4adb7d40-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_68656.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087611, "uuid": "4b3ee019-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_46475.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087611, "uuid": "4b4f8e03-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_57557.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087612, "uuid": "4bca84ae-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_94399.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087612, "uuid": "4bd6adcd-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_24901.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087612, "uuid": "4bda77b5-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_85892.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087613, "uuid": "4c36a79e-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_79681.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087613, "uuid": "4c67f975-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_49515.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087613, "uuid": "4c71f423-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_31048.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087614, "uuid": "4cbcfdfa-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_03767.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087614, "uuid": "4cfb0f3d-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99164.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087614, "uuid": "4d0bcd0c-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_19556.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087614, "uuid": "4d188e94-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_41126.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087614, "uuid": "4d1d71e5-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_17562.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087614, "uuid": "4d1da939-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_38954.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087615, "uuid": "4da400a0-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_03894.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087616, "uuid": "4e00c20f-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_98423.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087616, "uuid": "4e013d93-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_72800.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087616, "uuid": "4e03b982-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_22807.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087616, "uuid": "4e48cb5d-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_00757.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087616, "uuid": "4e4dd743-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_35795.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087616, "uuid": "4e79aa7a-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_79597.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087616, "uuid": "4e7bc32b-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_27140.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087618, "uuid": "4f559413-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_06087.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087618, "uuid": "4f9f9b03-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_13186.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087618, "uuid": "4fa12726-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_37248.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087618, "uuid": "4fa1f773-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96939.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087619, "uuid": "4feed858-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96539.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087620, "uuid": "5050c504-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_71088.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087620, "uuid": "50625742-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07853.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087620, "uuid": "50707e9b-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99091.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087620, "uuid": "50b3c34f-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_36331.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087620, "uuid": "50d8b028-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_85697.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087621, "uuid": "50ef331c-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_73024.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087621, "uuid": "50ff9fd6-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_27442.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087621, "uuid": "511564c7-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_95823.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087621, "uuid": "514d7e81-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07212.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087621, "uuid": "514e9a76-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_15837.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087621, "uuid": "515ec820-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_71207.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087622, "uuid": "51f9b9d6-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_03331.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087623, "uuid": "523cc621-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_01899.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087623, "uuid": "52435b00-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_90077.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087623, "uuid": "52438894-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_06020.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087623, "uuid": "5285271d-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_77949.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087625, "uuid": "537f98a9-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96565.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087625, "uuid": "53c0b8e9-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_95394.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087625, "uuid": "53c68373-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_80947.pdf.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087625, "uuid": "53c7929a-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_80947.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087625, "uuid": "53d1269d-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_64432.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087625, "uuid": "53d29faf-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_10936.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087625, "uuid": "53dd702b-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_36347.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087625, "uuid": "53deddf7-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_26708.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087625, "uuid": "53e04f03-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_58173.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087626, "uuid": "53f5d765-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08901.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087626, "uuid": "53f77dae-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07853.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087626, "uuid": "53f7982e-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_87118.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087626, "uuid": "5406bce7-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_03497.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087626, "uuid": "545810bb-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_84846.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087626, "uuid": "545ccce3-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_07367.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087626, "uuid": "5463018e-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_00279.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087626, "uuid": "546309c8-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_09934.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087626, "uuid": "54696402-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_08811.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087626, "uuid": "546f061c-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_99389.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087627, "uuid": "54971fb2-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_96490.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087627, "uuid": "54bf2730-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_54535.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087629, "uuid": "55cad328-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_62775.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087633, "uuid": "581fbe1c-373e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://grandvegasbet.com.br/MSI_145331.png", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087967, "uuid": "1fb5cfd3-373f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://169.40.135.119/lekc0304/crablearned.hta", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087968, "uuid": "1fdf1eb0-373f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://169.40.135.119/lekc0304/longboatchronometer.hta", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087969, "uuid": "2094118e-373f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://jdskl139sla.com/", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "ua-ps", "colour": "#32D6F6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087970, "uuid": "216a836b-373f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://visapics.info/", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "ua-ps", "colour": "#32D6F6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087974, "uuid": "237fe5e0-373f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://3nx4gks.desola-tidle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087975, "uuid": "241c9a8d-373f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://safedocs-hub.info/", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "ua-ps", "colour": "#32D6F6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087975, "uuid": "243be0ec-373f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://photodocvault.info/", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "ua-ps", "colour": "#32D6F6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087976, "uuid": "24db5f66-373f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_62931.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087976, "uuid": "25020481-373f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://huvki.echi6under.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087981, "uuid": "27ba6e80-373f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.130.75:44466/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087981, "uuid": "27fc661c-373f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.218.43.94:50164/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087982, "uuid": "286c1fab-373f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://refundonex.com/cloud/form_59903.pdf.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776087983, "uuid": "28e61e74-373f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.120.0.89:44129/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776088212, "uuid": "b17ac0c5-373f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://03i6.desola-tidle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776088332, "uuid": "f8c66f26-373f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.154.221:50950/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776088577, "uuid": "8b09c437-3740-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://me6z.desola-tidle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776088751, "uuid": "f28898df-3740-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.24.172:56100/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776088928, "uuid": "5c35f836-3741-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ptwc.desola-tidle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776088937, "uuid": "618f7908-3741-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.159.153:40022/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776088938, "uuid": "62031f26-3741-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.249.114:47991/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776089176, "uuid": "efc8ce82-3741-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.120.0.89:44129/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776089295, "uuid": "37267e6f-3742-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://checkmis.desola-tidle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776089297, "uuid": "3876d7e9-3742-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.158.25:59281/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776089587, "uuid": "e4c06eb3-3742-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mn4wr.desola-tidle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776089896, "uuid": "9d359ed6-3743-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.59.68:40948/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776090020, "uuid": "e7521ab9-3743-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.158.25:59281/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776090198, "uuid": "517f981d-3744-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://crimso1-vector.intersp5uspect.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776090432, "uuid": "dce857b0-3744-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ibpo.intersp5uspect.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776090557, "uuid": "2748a46a-3745-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.249.114:47991/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776090616, "uuid": "4a95647e-3745-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cleansensor.intersp5uspect.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776090800, "uuid": "b8008e20-3745-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.141.110:59345/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776090970, "uuid": "1d4428da-3746-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://serdrais8.intersp5uspect.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776091327, "uuid": "f21263c5-3746-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://yjsmlbn.intersp5uspect.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776091347, "uuid": "fe599a79-3746-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.95.192:43603/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776091634, "uuid": "a9540165-3747-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nkkexjp.intersp5uspect.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776091761, "uuid": "f4b5311d-3747-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.55.14.216:35237/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776091996, "uuid": "8125624f-3748-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pipeli-line.over-tatake.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776092291, "uuid": "307c7465-3749-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://t35t-cast.over-tatake.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776092292, "uuid": "312168fd-3749-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://9o394zg7.paragonbloomera.digital/?=check&&actmn=oOQncBSZOqWUzRow", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776092526, "uuid": "bcbdb259-3749-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://2zjyp0pj.borschokf2dd.digital/?=check&&actmn=YAonHfDfBSXVCOEO", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776092651, "uuid": "07204cad-374a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://frost-sync.over-tatake.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776092949, "uuid": "b929ee97-374a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://autumnlayer.over-tatake.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776093124, "uuid": "217d1b4c-374b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.130/responsive_25.2509.7987_INSTALL.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776093129, "uuid": "23f95be1-374b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.159/structure_14.3495_INSTALL.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776093245, "uuid": "694e1663-374b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/8265490257/eUcpk5X.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776093549, "uuid": "1e79a477-374c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kelmark6a.over-tatake.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776093727, "uuid": "88a286b4-374c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://9duu.over-tatake.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776094089, "uuid": "60473147-374d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://3xte-array.morphinve8et.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776094270, "uuid": "cc77026e-374d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.87.229.208:36574/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776094448, "uuid": "363887e8-374e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vellineen7.morphinve8et.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776094699, "uuid": "cbffc35b-374e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.47.179:46179/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776094811, "uuid": "0e999517-374f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://observe-mesh.morphinve8et.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776095109, "uuid": "c097111b-374f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://form4l-flow.morphinve8et.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776095118, "uuid": "c60bab1b-374f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.154.221:50950/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776095413, "uuid": "75ca35d9-3750-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.55.14.216:35237/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776095469, "uuid": "97441f40-3750-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://triflux3ar.morphinve8et.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776096011, "uuid": "d9d06550-3751-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.113.206.200:58442/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776096022, "uuid": "e0c3474e-3751-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.193.209:43172/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776096073, "uuid": "ff21a376-3751-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://loacascad.morphinve8et.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776096248, "uuid": "67022652-3752-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://75gy.baptis-midwife.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776096440, "uuid": "d9e260ae-3752-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.176.197.31:33639/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776096493, "uuid": "f95c7005-3752-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zentide2en.baptis-midwife.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776096792, "uuid": "abc88612-3753-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://proto-reta1n.baptis-midwife.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776097153, "uuid": "82fd3d88-3754-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://03dg.baptis-midwife.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776097450, "uuid": "33ba1225-3755-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://29223qf.baptis-midwife.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776097462, "uuid": "3aa0b759-3755-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.0.102:54434/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776097581, "uuid": "81ec3fb8-3755-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.193.209:43172/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776097820, "uuid": "100b6368-3756-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://geo-fact0r.baptis-midwife.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776097825, "uuid": "138938f5-3756-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.227.35.94:54586/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776097928, "uuid": "505f7e94-3756-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.177.213.167:8081/release0304.apk", "Tag": [ { "name": "81-177-213-167-8081", "colour": "#b853b6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776098173, "uuid": "e2ed2a85-3756-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ultra-rnerge.phoniche1lo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776098183, "uuid": "e8744cb6-3756-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.176.197.31:33639/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776098470, "uuid": "9389a6ae-3757-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://threadtrusted.phoniche1lo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776098723, "uuid": "2a6fa26e-3758-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.227.35.94:54586/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776098832, "uuid": "6b668e00-3758-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://grid6-layer.phoniche1lo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776098838, "uuid": "6f4c2e28-3758-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.177.251.31:36190/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776098905, "uuid": "96c1780b-3758-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.204.252.54:43744/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776099130, "uuid": "1ce1934f-3759-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://d1malk.phoniche1lo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776099367, "uuid": "aa7c04a3-3759-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.125.242.191/cloud.x86_64", "Tag": [ { "name": "176-125-242-191", "colour": "#e1127b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776099368, "uuid": "aafde1f0-3759-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.125.242.191/cat.sh", "Tag": [ { "name": "176-125-242-191", "colour": "#e1127b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776099369, "uuid": "ab8ba45d-3759-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.125.242.191/cloud.mipsel", "Tag": [ { "name": "176-125-242-191", "colour": "#e1127b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776099369, "uuid": "ab92506f-3759-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.125.242.191/cloud.mips", "Tag": [ { "name": "176-125-242-191", "colour": "#e1127b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776099369, "uuid": "aba987fb-3759-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.125.242.191/cloud.aarch64", "Tag": [ { "name": "176-125-242-191", "colour": "#e1127b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776099369, "uuid": "abb7bff7-3759-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.125.242.191/cloud.armv7l", "Tag": [ { "name": "176-125-242-191", "colour": "#e1127b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776099494, "uuid": "f63a75d0-3759-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://4kreqbfj.phoniche1lo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776099679, "uuid": "6492edcb-375a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.114.93:36606/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776099750, "uuid": "8edbf1f5-375a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.166.188.48:34864/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776099854, "uuid": "ccbccc22-375a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gmzhuq.phoniche1lo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776099909, "uuid": "ed944773-375a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.139.215.64:9090/shell.aspx.jpg", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776099909, "uuid": "ed9cc131-375a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.139.215.64:9090/shell.jpg", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776099909, "uuid": "ed9cd172-375a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.139.215.64:9090/shell.asp.jpg", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776100031, "uuid": "35e4d2a4-375b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.72.47:48943/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776100101, "uuid": "60210f69-375b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.72.47:48943/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776100148, "uuid": "7b95d1f0-375b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mh4j.onepal-liat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776100517, "uuid": "579288bb-375c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://arkmesh2ex.onepal-liat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776100583, "uuid": "7ef10f9e-375c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.152.92:33877/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776100652, "uuid": "a80fd0bf-375c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.137.3:39727/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776100702, "uuid": "c6505898-375c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.177.251.31:36190/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776100706, "uuid": "c83103da-375c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.235.109.245:44042/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776100813, "uuid": "088771df-375d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://shal6-stream.onepal-liat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776101175, "uuid": "e00c4c8e-375d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://scanmodel.onepal-liat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776101476, "uuid": "93b44a81-375e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nordraex4.onepal-liat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776101892, "uuid": "8b553dd6-375f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://basicmas.onepal-liat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776102133, "uuid": "1b3e2119-3760-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.234.213:58277/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776102133, "uuid": "1b50b073-3760-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wceemv.oguzok7ye.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776102134, "uuid": "1bc485e8-3760-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.190.99:43705/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776102200, "uuid": "42f998d2-3760-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.137.3:39727/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776102319, "uuid": "89f8c26f-3760-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.165.211:50242/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776102553, "uuid": "151337b7-3761-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://talspireis4.oguzok7ye.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776102679, "uuid": "60b2010b-3761-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.67.120:46441/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776102847, "uuid": "c48fab3b-3761-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://smar-disc.oguzok7ye.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776103215, "uuid": "a022d947-3762-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://704swp.oguzok7ye.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776103508, "uuid": "4ed8bece-3763-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.190.99:43705/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776103573, "uuid": "7599dd7b-3763-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://3ndp1-reach.oguzok7ye.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776103815, "uuid": "0588979a-3764-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://easturban.oguzok7ye.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776103938, "uuid": "4ea92ed5-3764-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.239.121:55537/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776103991, "uuid": "6e596564-3764-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.116.67:46743/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776104228, "uuid": "fb8110bb-3764-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://5urv-pulse.multip-lway.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776104416, "uuid": "6c18fa7d-3765-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.67.120:46441/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776104527, "uuid": "ae2f00a2-3765-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://g0lden4-mark.multip-lway.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776104600, "uuid": "d982bcbb-3765-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.43.135.133:38267/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776104831, "uuid": "6305d527-3766-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://garde-rave.multip-lway.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776105191, "uuid": "39ede383-3767-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hyper-pr1v.multip-lway.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776105438, "uuid": "ccb23802-3767-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.239.121:55537/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776105547, "uuid": "0dc37d36-3768-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://caveazure.multip-lway.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776105908, "uuid": "e551aa62-3768-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://softcamp.multip-lway.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776106211, "uuid": "99975b4d-3769-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sercrestar.chuv2shfile.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776106222, "uuid": "a0814053-3769-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.239.136:53481/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776106626, "uuid": "91547b9f-376a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kawjhm.chuv2shfile.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776106638, "uuid": "9846933a-376a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.133.69:45126/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776106872, "uuid": "23cffdb4-376b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://p3ak-path.chuv2shfile.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776107129, "uuid": "bd2576c7-376b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.157.23.2:51662/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776107233, "uuid": "fab05a2d-376b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vendorwhole.chuv2shfile.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776107297, "uuid": "20d980b1-376c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.94.151:50862/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776107410, "uuid": "646456e6-376c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.94.151:50862/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776107528, "uuid": "aa9635b0-376c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fafitgz.chuv2shfile.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776107893, "uuid": "848072ac-376d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bv9fw.chuv2shfile.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776108076, "uuid": "f1792a34-376d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.239.136:53481/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776108191, "uuid": "35c8937a-376e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://psnwbo.ditch-obscene.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776108310, "uuid": "7d00dfa8-376e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.183.184.74:56199/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776108434, "uuid": "c6d9205d-376e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.231.140:45371/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776108553, "uuid": "0d913b5f-376f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.183.184.74:56199/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776108610, "uuid": "2fd2d212-376f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://guafux.ditch-obscene.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776108909, "uuid": "e1eb693b-376f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://alt-5ynta.ditch-obscene.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776109212, "uuid": "9682d8e3-3770-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://3zpnkdk.ditch-obscene.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776109399, "uuid": "05eef32b-3771-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.135.42.237:59112/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776109511, "uuid": "4865c967-3771-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.185.79:35358/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776109568, "uuid": "6a63d45f-3771-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://shif-well.ditch-obscene.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776109932, "uuid": "43b3535d-3772-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://jzdq.ditch-obscene.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776110288, "uuid": "17d9b7d3-3773-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://equitysail.inform2tunleaven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776110297, "uuid": "1ce069df-3773-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.231.140:45371/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776110650, "uuid": "ef634538-3773-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dirmod.inform2tunleaven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776110778, "uuid": "3c146e3f-3774-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.226.118:43278/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776110838, "uuid": "5fb3e635-3774-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.109.212.104:37559/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776111068, "uuid": "e89cf797-3774-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bhbl.inform2tunleaven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776111193, "uuid": "3342d499-3775-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.209.242.225:56782/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776111314, "uuid": "7b64a757-3775-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kel-fluxis.inform2tunleaven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776111851, "uuid": "bb639d39-3776-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://scre-dust.inform2tunleaven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776112087, "uuid": "47e329dd-3777-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fernoak.inform2tunleaven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776112269, "uuid": "b4805958-3777-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.254.26:35075/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776112329, "uuid": "d879cbe8-3777-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://couponfir.kazan-saddle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776112519, "uuid": "49918fb8-3778-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.109.212.104:37559/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776112570, "uuid": "68419196-3778-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tyvp2rya.kazan-saddle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776112820, "uuid": "fcf70af2-3778-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.254.243:44880/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776112928, "uuid": "3d876272-3779-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://stitch-spool.kazan-saddle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776113350, "uuid": "38bf3a1e-377a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nvgsw.kazan-saddle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776113649, "uuid": "eb44307a-377a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zmxa.kazan-saddle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776113721, "uuid": "15c09015-377b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.227.116.162:34043/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776113946, "uuid": "9c154272-377b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://neo-c0upon.kazan-saddle.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776113957, "uuid": "a2deb9f5-377b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67:83/w2.sh", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776113957, "uuid": "a2ded3f5-377b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67:83/telnet.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776113957, "uuid": "a2eefc54-377b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67:83/jg.sh", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776114010, "uuid": "c224310d-377b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.254.26:35075/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776114015, "uuid": "c5490a70-377b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.38.161:55419/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776114618, "uuid": "2cbfe244-377d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.133/bins/pay", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776114668, "uuid": "4a8ee946-377d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.213.235.26:42468/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776114788, "uuid": "9243fe88-377d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.63.138:59071/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776114907, "uuid": "d8e22ed3-377d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ef8qorio.latat-long.digital/?ublib=pxjltvWQZvTHsBVh", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776114910, "uuid": "dae1e089-377d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mon1-check.xelvarinox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776115511, "uuid": "40b25dc8-377f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://api2-route.xelvarinox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776115575, "uuid": "66e8d407-377f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.227.116.162:34043/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776115688, "uuid": "aa5050f2-377f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://node3-core.xelvarinox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776115758, "uuid": "d463142d-377f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.92.186:57951/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776115929, "uuid": "3a480b96-3780-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pod4-sync.xelvarinox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776115937, "uuid": "3ea0d5c7-3780-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.87.31.132:59509/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776116054, "uuid": "848da994-3780-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.38.161:55419/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776116230, "uuid": "ed375b04-3780-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc5-mesh.xelvarinox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776116647, "uuid": "e642b5fa-3781-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate6-hub.xelvarinox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776116835, "uuid": "56589734-3782-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.200.76:42847/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776116955, "uuid": "9da5807a-3782-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://eth1-link.pra6lixon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776117020, "uuid": "c4aa0f58-3782-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.72.198:59189/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776117138, "uuid": "0ad73306-3783-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.72.198:59189/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776117250, "uuid": "4da540a9-3783-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://api2-push.pra6lixon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776117611, "uuid": "24aa12a2-3784-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://node3-soft.pra6lixon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776117912, "uuid": "d7f35fdc-3784-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://job4-task.pra6lixon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776117919, "uuid": "dc32f5f5-3784-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.112.31:40481/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776118172, "uuid": "73272657-3785-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.35.142:39509/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776118214, "uuid": "8c461be9-3785-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc5-flow.pra6lixon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776118226, "uuid": "9320c2de-3785-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.112.34:45527/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776118340, "uuid": "d720a252-3785-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.200.76:42847/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776118453, "uuid": "1abf4c61-3786-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.114.239:48365/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776118574, "uuid": "62accdc7-3786-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate6-main.pra6lixon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776118753, "uuid": "cd3d0986-3786-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cloudstorage-hub.com/launches/8dacc96a6f17691cdbd7f9eacf910b0137af51f0.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776118754, "uuid": "ce2cb3d7-3786-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cloudstorage-hub.com/get-launcher.php", "Tag": [ { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776118933, "uuid": "385c710e-3787-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/professor9-sys/oldlauncher928/refs/heads/main/cmd.bat", "Tag": [ { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776118934, "uuid": "3900d4d8-3787-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://box1-state.drumavex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776119004, "uuid": "62ba8460-3787-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.75.79.92:55690/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776119048, "uuid": "7d6d1fa9-3787-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/professor9-sys/oldlauncher928/refs/heads/main/woofer.rar", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776119058, "uuid": "832eadee-3787-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.114.239:48365/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776119234, "uuid": "ebddbdd7-3787-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://api2-call.drumavex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776119482, "uuid": "7fed87a4-3788-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.22.179.203:57182/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776119539, "uuid": "a18fba3f-3788-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.70.207:50558/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776119594, "uuid": "c25b24a3-3788-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://node3-fast.drumavex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776119710, "uuid": "07a2d596-3789-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.159/znk.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776119723, "uuid": "0f84075f-3789-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.23.105.204:57442/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776119830, "uuid": "4f127a0d-3789-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.20.212:59988/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776119888, "uuid": "71b8f495-3789-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://db4-store.drumavex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776119983, "uuid": "aa9243f2-3789-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.127.191:54503/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776120202, "uuid": "2cfa22ff-378a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.112.34:45527/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776120552, "uuid": "fd6a36a7-378a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc5-ready.drumavex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776120558, "uuid": "013db74e-378b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.85.99.217:38787/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776120624, "uuid": "284132b6-378b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.75.79.92:55690/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776120734, "uuid": "69d1bbd9-378b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate6-zone.drumavex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776120974, "uuid": "f90d3334-378b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://set1-init.vo2xeral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776121099, "uuid": "43a4fcfe-378c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.87.202.193:41671/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776121328, "uuid": "cbdab12d-378c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://api2-meta.vo2xeral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776121629, "uuid": "7f971692-378d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://node3-blob.vo2xeral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776121881, "uuid": "15786a6b-378e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.23.105.204:57442/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776121941, "uuid": "39ade5da-378e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.85.182:51969/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776121994, "uuid": "59073e05-378e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://git4-repo.vo2xeral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776122007, "uuid": "6090269f-378e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.105.39:37173/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776122119, "uuid": "a3dac1eb-378e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.115.102.246:41079/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776122120, "uuid": "a445612f-378e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.232.55:41267/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776122181, "uuid": "c85542e7-378e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.224.251:52626/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776122295, "uuid": "0c583529-378f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc5-info.vo2xeral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776122774, "uuid": "2a41359e-3790-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.87.202.193:41671/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776122895, "uuid": "72046d4b-3790-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate6-way.vo2xeral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776123071, "uuid": "db2f16a1-3790-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://log1-audit.krinaxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776123134, "uuid": "00b9146a-3791-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.70.207:50558/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776123312, "uuid": "6a80fb3e-3791-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://api2-test.krinaxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776123322, "uuid": "70933413-3791-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.76.47:43025/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776123438, "uuid": "b5fe8e49-3791-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67:83/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776123499, "uuid": "da048df9-3791-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.232.55:41267/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776123668, "uuid": "3ea74123-3792-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://node3-join.krinaxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776123912, "uuid": "d030d735-3792-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.215.152:52195/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776123968, "uuid": "f1d379dd-3792-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://auth4-key.krinaxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776124092, "uuid": "3bb488bb-3793-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.25.133:44346/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776124148, "uuid": "5d3f5f43-3793-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.188.1:41421/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776124332, "uuid": "caec0a40-3793-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc5-site.krinaxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776124634, "uuid": "7ee34e83-3794-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate6-root.krinaxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776124752, "uuid": "c54b5d0a-3794-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.76.47:43025/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776074347, "uuid": "68fc5e61-371f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "00zk7cis.personal-danger.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776097150, "uuid": "8124fa1c-3754-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "03dg.baptis-midwife.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776088210, "uuid": "b00f074a-373f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "03i6.desola-tidle.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776119707, "uuid": "061019db-3789-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "101.23.105.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776046685, "uuid": "016cd0a5-36df-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.106.229.247", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776085625, "uuid": "abab24d4-3739-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.184.105.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776118206, "uuid": "871306dd-3785-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.184.112.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776041885, "uuid": "d4236690-36d3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.184.95.232", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087052, "uuid": "fe3a7ad0-373c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.175.88.100", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776042544, "uuid": "5d6bf032-36d5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.225.49.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776119945, "uuid": "93e3c000-3789-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.239.127.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776052025, "uuid": "70244a2c-36eb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.187.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776118986, "uuid": "5876dcc5-3787-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.75.79.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776068405, "uuid": "939cf172-3711-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.227.61.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776111184, "uuid": "2dcf9901-3775-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.209.242.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776100625, "uuid": "983e5a31-375c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.137.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776058685, "uuid": "f20201ab-36fa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.2.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776122165, "uuid": "bebf574c-378e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.224.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776081484, "uuid": "0768343f-3730-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.64.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776112264, "uuid": "b15f96d1-3777-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.254.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776122107, "uuid": "9c6af985-378e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.232.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776056585, "uuid": "0e84fc2b-36f6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.129.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776085984, "uuid": "81bdc726-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.130.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776057666, "uuid": "92d7047d-36f8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.197.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776088924, "uuid": "59af89b3-3741-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.249.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776066065, "uuid": "20ebbf40-370c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.48.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776049684, "uuid": "fd30eb31-36e5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.66.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776085685, "uuid": "cf1f6dbc-3739-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.99.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776076566, "uuid": "93b8561f-3724-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.9.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776118144, "uuid": "6297fb60-3785-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.35.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776061084, "uuid": "88088f83-3700-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.63.246.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776110824, "uuid": "5779a9f3-3774-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.109.212.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776063365, "uuid": "d7b9c9a5-3705-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.126.120.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776096425, "uuid": "d08f32ee-3752-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.176.197.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776039184, "uuid": "8a7522a3-36cd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.180.15.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776107106, "uuid": "aede9a06-376b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.157.23.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776103924, "uuid": "46804569-3764-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.239.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776056406, "uuid": "a3cd98d6-36f5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.25.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776063785, "uuid": "d198ac3c-3706-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.168.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776051064, "uuid": "33c647d8-36e9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.79.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776046084, "uuid": "9b41ae1c-36dd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.180.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776114006, "uuid": "bfd4fd0e-377b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.38.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776063785, "uuid": "d1988612-3706-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.183.196.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776080226, "uuid": "1959455a-372d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.189.183.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776079925, "uuid": "65ce882d-372c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.227.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776052206, "uuid": "dc3a4c6e-36eb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.40.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776089884, "uuid": "9649bacc-3743-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.59.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776116825, "uuid": "500485eb-3782-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.200.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776046806, "uuid": "49c97d4a-36df-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.226.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776053831, "uuid": "a4940fc9-36ef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "15cqw.sanctua-ryunt.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776091324, "uuid": "f0741d2a-3746-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "163.142.95.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087967, "uuid": "1f485705-373f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "169.40.135.119", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776052025, "uuid": "702e57bc-36eb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "1707.sanctua-ryunt.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776053045, "uuid": "d0111f59-36ed-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.147.202.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776080466, "uuid": "a84f312d-372d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.148.82.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776069544, "uuid": "3a85fab1-3714-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.174.76.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776104585, "uuid": "d0b923f1-3765-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.43.135.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776099365, "uuid": "a95e5298-3759-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.125.242.191", "Tag": [ { "name": "176-125-242-191", "colour": "#e1127b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776073745, "uuid": "02823fa9-371e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.144.60", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776043926, "uuid": "94b024cd-36d8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.238.27.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087967, "uuid": "1f47e7ac-373f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.120.0.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776108425, "uuid": "c14c390a-376e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.231.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087455, "uuid": "ee263c26-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.25.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776118445, "uuid": "15f025e4-3786-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.114.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776103984, "uuid": "6a92479c-3764-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.116.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776038825, "uuid": "b47356a4-36cc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.34.195", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776076808, "uuid": "2423b45e-3725-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.41.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776123306, "uuid": "675e383e-3791-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.76.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776058384, "uuid": "3edf0c35-36fa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.62.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776054845, "uuid": "0146f2fe-36f2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.69.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776115744, "uuid": "cbf25892-377f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.92.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776102125, "uuid": "1609bcc1-3760-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.190.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776054366, "uuid": "e3e59276-36f0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.61.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776058445, "uuid": "62f8c6f6-36fa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.235.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776099907, "uuid": "ec0e9332-375a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.139.215.64", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776047765, "uuid": "84f8f333-36e1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "204.76.203.168.ptr.pfcloud.network" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776114784, "uuid": "8fdf7c56-377d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.63.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776109505, "uuid": "45564a4f-3771-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.185.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776109384, "uuid": "fce30f11-3770-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.135.42.237", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776055265, "uuid": "fb627e63-36f2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.173.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776090785, "uuid": "af13aebd-3745-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.141.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776043085, "uuid": "9f780564-36d6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.202.17.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776097806, "uuid": "07bde7b2-3756-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.227.35.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776117006, "uuid": "bc35bc02-3782-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.72.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776066065, "uuid": "20eb9edd-370c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.117.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776040144, "uuid": "c6c6d03d-36cf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.113.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776059645, "uuid": "2dfdd605-36fd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.79.195.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776098885, "uuid": "8ac4f0c2-3758-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.204.252.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087119, "uuid": "26121b3d-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.206.142.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776058265, "uuid": "f77c0553-36f9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.210.144.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776078844, "uuid": "e1c02af3-3729-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.182.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776058865, "uuid": "5d39d293-36fb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.219.14.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776041706, "uuid": "69d10365-36d3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.222.59.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776097447, "uuid": "31b9276c-3755-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "29223qf.baptis-midwife.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776092524, "uuid": "bbd93bcf-3749-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "2zjyp0pj.borschokf2dd.digital" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776071224, "uuid": "23f4eae7-3718-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.64.174.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776081784, "uuid": "ba4c2da6-3730-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.71.28.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776054186, "uuid": "78199005-36f0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.84.113.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776121084, "uuid": "3a86530f-378c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.87.202.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776094265, "uuid": "c93b5710-374d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.87.229.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048306, "uuid": "c763660e-36e2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39mx.danger-style.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776103567, "uuid": "71a95e08-3763-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "3ndp1-reach.oguzok7ye.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087971, "uuid": "21c8ed18-373f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "3nx4gks.desola-tidle.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776094086, "uuid": "5edeb0f4-374d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "3xte-array.morphinve8et.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776049507, "uuid": "93a82689-36e5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "3zowl.insti1partition.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776109206, "uuid": "92eb3fd7-3770-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "3zpnkdk.ditch-obscene.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776073213, "uuid": "c5963b1b-371c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.176.250.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776119825, "uuid": "4c39314f-3789-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.177.20.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776056945, "uuid": "e4afdcd5-36f6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.179.152.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776070864, "uuid": "4d4f89db-3717-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.180.13.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776058625, "uuid": "ce586df6-36fa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.103.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776080044, "uuid": "acfa9472-372c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.190.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776053765, "uuid": "7da49011-36ef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.54.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776067864, "uuid": "5105fa3e-3710-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.8.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776081724, "uuid": "9660fba8-3730-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.205.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776089284, "uuid": "302e1839-3742-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.158.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776050044, "uuid": "d3b0c1a9-36e6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.239.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776076984, "uuid": "8d2fb910-3725-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.233.106.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776106206, "uuid": "96b76815-3769-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.239.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776088324, "uuid": "f45c16ee-373f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.154.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776060425, "uuid": "ff03a0d2-36fe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.242.164.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776042784, "uuid": "ec516a0f-36d5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.128.119.160", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776099726, "uuid": "80298708-375a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.166.188.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776099485, "uuid": "f0f0436a-3759-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "4kreqbfj.phoniche1lo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776038887, "uuid": "d9490c01-36cc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "57vl6.conferen-cesman.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776112806, "uuid": "f4abcd7c-3778-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.254.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776047524, "uuid": "f5957443-36e0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5cqwuhoc.danger-style.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776080771, "uuid": "5e1468ce-372e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5tud1-zone.attit-negligent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776104225, "uuid": "f9d95da5-3764-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5urv-pulse.multip-lway.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776119525, "uuid": "99b7a036-3788-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.18.70.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776121925, "uuid": "2fc8d0af-378e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.18.85.182", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776119465, "uuid": "757a7bb2-3788-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.22.179.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776080466, "uuid": "a84fc6a9-372d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.239.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776097447, "uuid": "31ab5cc1-3755-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.0.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776055686, "uuid": "f648b2ca-36f3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.197.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776094685, "uuid": "c3b36297-374e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.47.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776070925, "uuid": "71dd95df-3717-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.54.204.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776103212, "uuid": "9e1253c3-3762-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "704swp.oguzok7ye.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776057546, "uuid": "4af8a238-36f8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "71wxz.vo3xiran.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776096245, "uuid": "655ee119-3752-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "75gy.baptis-midwife.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776097925, "uuid": "4f0e8307-3756-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "81.177.213.167", "Tag": [ { "name": "81-177-213-167-8081", "colour": "#b853b6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776113706, "uuid": "0ce1ef98-377b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "87.227.116.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776041525, "uuid": "fdd9021c-36d2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "87vq.rebutrew0rk.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776100684, "uuid": "bb9a3359-375c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "88.235.109.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776044765, "uuid": "8925bee3-36da-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "8rnyx.chandelh2lifa.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087454, "uuid": "ed895897-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "92.249.61.91", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776081724, "uuid": "966e7acb-3730-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "94auswsb.piculi5tep.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776093724, "uuid": "86ed8dab-374c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "9duu.over-tatake.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776092288, "uuid": "2ef6db94-3749-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "9o394zg7.paragonbloomera.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776082147, "uuid": "92b2a6a5-3731-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "adobeready.online" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776049144, "uuid": "bb3e86ab-36e4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "akkcq5.insti1partition.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776075785, "uuid": "c2639074-3722-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "aliglagoo.babrevea1ing.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776073865, "uuid": "49f873e6-371e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "alimqulov.uz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776108905, "uuid": "df9ad859-376f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "alt-5ynta.ditch-obscene.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776084847, "uuid": "db7f9d63-3737-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "alt-br4ve.bell-extraterrit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776119232, "uuid": "eaa1967f-3787-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "api2-call.drumavex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776121325, "uuid": "caa4c5fe-378c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "api2-meta.vo2xeral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776117245, "uuid": "4a702707-3783-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "api2-push.pra6lixon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776115507, "uuid": "3e5b5b77-377f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "api2-route.xelvarinox.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776123309, "uuid": "68e408d6-3791-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "api2-test.krinaxon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776100512, "uuid": "54a93a9f-375c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "arkmesh2ex.onepal-liat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776051848, "uuid": "06c2854f-36eb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "assetrid.sanctua-ryunt.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776123965, "uuid": "f00c9bb7-3792-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "auth4-key.krinaxon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776092947, "uuid": "b7d089e7-374a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "autumnlayer.over-tatake.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776064866, "uuid": "5604fe07-3709-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bandwi-span.conferen-cesman.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776043926, "uuid": "94bd9a07-36d8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bandwiglade.mucus-rafter.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776101889, "uuid": "896200d8-375f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "basicmas.onepal-liat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776069548, "uuid": "3d20740f-3714-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "beam.sanctua-ryunt.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087540, "uuid": "20dfb514-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bgurbey.great-site.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776111009, "uuid": "c54323d1-3774-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bhbl.inform2tunleaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776085569, "uuid": "8a10f853-3739-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "biom9-hinge.bell-extraterrit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776045547, "uuid": "5b4c2480-36dc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bold4-loop.chandelh2lifa.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776118931, "uuid": "37516339-3787-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "box1-state.drumavex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776039608, "uuid": "871bb4e6-36ce-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "breezesto.conferen-cesman.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776062107, "uuid": "e9d30cde-3702-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "buffmargi.norxevin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776107887, "uuid": "80c9d262-376d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bv9fw.chuv2shfile.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776055265, "uuid": "fb6f4075-36f2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "c0ysh.pra7vexal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087015, "uuid": "e7bbb603-373c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "capi-recor.echi6under.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776105544, "uuid": "0bf975fd-3768-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "caveazure.multip-lway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776076207, "uuid": "bdb528d2-3723-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cg892665.babrevea1ing.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776089284, "uuid": "303e3eb1-3742-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "checkmis.desola-tidle.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776090608, "uuid": "45852343-3745-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cleansensor.intersp5uspect.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776112325, "uuid": "d5c4e78f-3777-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "couponfir.kazan-saddle.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776090188, "uuid": "4b0a7f11-3744-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "crimso1-vector.intersp5uspect.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776052507, "uuid": "8f973fde-36ec-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cryeast.sanctua-ryunt.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776041225, "uuid": "4abcf855-36d2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cvsbi.rebutrew0rk.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776099126, "uuid": "1a7c400c-3759-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "d1malk.phoniche1lo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776052987, "uuid": "ad88b141-36ed-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "daernon-grid.sanctua-ryunt.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776119883, "uuid": "6f0c2797-3789-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "db4-store.drumavex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776069784, "uuid": "c9b88b9e-3714-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "defend.sanctua-ryunt.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776059350, "uuid": "7e7e35c2-36fc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "deliver4-mesh.zeq8morin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776078071, "uuid": "14b6d73c-3728-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "deliveryquant.babrevea1ing.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776079385, "uuid": "2466498e-372b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dhcy36nr.attit-negligent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776062645, "uuid": "2a1fc0ac-3704-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "did8.qul2marox.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776056645, "uuid": "31f75502-36f6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dih0t.drumoxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776110644, "uuid": "ec452b15-3773-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dirmod.inform2tunleaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776103810, "uuid": "028267b2-3764-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "easturban.oguzok7ye.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776114905, "uuid": "d7e9d97d-377d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ef8qorio.latat-long.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776110285, "uuid": "15eaa31c-3773-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "equitysail.inform2tunleaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776083044, "uuid": "a94d1e67-3733-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ertfu9pm.piculi5tep.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776040924, "uuid": "97ca86b3-36d1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "es3tp.rebutrew0rk.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776116949, "uuid": "9a4de172-3782-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "eth1-link.pra6lixon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776107525, "uuid": "a9237d4f-376c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fafitgz.chuv2shfile.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776112084, "uuid": "4687417a-3777-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fernoak.inform2tunleaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776066314, "uuid": "b52d46a3-370c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "flamemanifest.chandelh2lifa.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776095106, "uuid": "bead3861-374f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "form4l-flow.morphinve8et.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776085867, "uuid": "3ba9f17f-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "form4t4-mount.echi6under.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776070746, "uuid": "06f8e61a-3717-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "freightdat.cry7adiophone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776092648, "uuid": "0543c328-374a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "frost-sync.over-tatake.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087336, "uuid": "a763256f-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fv5-5.files.fm" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776104524, "uuid": "ac520567-3765-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "g0lden4-mark.multip-lway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776104826, "uuid": "60311602-3766-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "garde-rave.multip-lway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776116644, "uuid": "e472f3ad-3781-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate6-hub.xelvarinox.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776118571, "uuid": "610738e8-3786-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate6-main.pra6lixon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776124624, "uuid": "78a4ec24-3794-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate6-root.krinaxon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776122891, "uuid": "6faa2062-3790-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate6-way.vo2xeral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776120730, "uuid": "67bc0bf3-378b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate6-zone.drumavex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776082145, "uuid": "916c43c2-3731-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gatewa1-wave.piculi5tep.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776085265, "uuid": "d5304ee2-3738-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "genorne-watch.bell-extraterrit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776097813, "uuid": "0c3609cb-3756-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "geo-fact0r.baptis-midwife.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776044344, "uuid": "8dfcce08-36d9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "geo-st0ck.chandelh2lifa.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776073813, "uuid": "2b21453c-371e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ghanioilandgas.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776121991, "uuid": "571d6388-378e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "git4-repo.vo2xeral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776099851, "uuid": "ca9da09a-375a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gmzhuq.phoniche1lo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087619, "uuid": "504a559e-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "grandvegasbet.com.br" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776098830, "uuid": "6a395237-3758-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "grid6-layer.phoniche1lo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776108605, "uuid": "2c838d5c-376f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "guafux.ditch-obscene.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776045965, "uuid": "53ff2882-36dd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gvxnzo.chandelh2lifa.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776038585, "uuid": "253cf228-36cc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "handleill.conferen-cesman.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087969, "uuid": "20a77e25-373f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "huvki.echi6under.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776047164, "uuid": "1f349dda-36e0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hw62b.danger-style.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776105187, "uuid": "371c8973-3767-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hyper-pr1v.multip-lway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776090430, "uuid": "db8e40a4-3744-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ibpo.intersp5uspect.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776049925, "uuid": "8cea1b13-36e6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "iqwo0.insti1partition.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776073027, "uuid": "56676426-371c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "iwiax.personal-danger.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087967, "uuid": "1f62c152-373f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "jdskl139sla.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776117907, "uuid": "d4d6c6e6-3784-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "job4-task.pra6lixon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776109929, "uuid": "41de43b9-3772-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "jzdq.ditch-obscene.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776106624, "uuid": "8fdfc12d-376a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kawjhm.chuv2shfile.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776111306, "uuid": "76cd0354-3775-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kel-fluxis.inform2tunleaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776084364, "uuid": "bc120f69-3736-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "keldraon.bell-extraterrit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776093546, "uuid": "1cf4d9de-374c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kelmark6a.over-tatake.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776046806, "uuid": "49d77524-36df-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "listenercorte.danger-style.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776096067, "uuid": "fb5fa565-3751-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "loacascad.morphinve8et.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776042724, "uuid": "c885eafc-36d5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "load9-mount.mucus-rafter.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776083587, "uuid": "eca47d9d-3734-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "loejfrw2.ignorelist.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776123067, "uuid": "d8ab0b62-3790-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "log1-audit.krinaxon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776057970, "uuid": "47d0d568-36f9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lumnexa.klinavor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776084606, "uuid": "4bf53f03-3737-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ly12yqh.bell-extraterrit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776063005, "uuid": "00c786c8-3705-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lywetogx.qul2marox.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776088573, "uuid": "8857b5e8-3740-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "me6z.desola-tidle.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776075314, "uuid": "a9bbbf90-3721-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mer-draex.personal-danger.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776082569, "uuid": "8ddc5bca-3732-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mermeshar9.piculi5tep.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776056170, "uuid": "16ff8461-36f5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "meta-tru5.drumoxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776072069, "uuid": "1b5439c1-371a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "meta-trust3d.cry7adiophone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776100145, "uuid": "7a0dfb70-375b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mh4j.onepal-liat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776089585, "uuid": "e3a330c7-3742-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mn4wr.desola-tidle.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776040206, "uuid": "ebc61f7d-36cf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "modul-scene.rebutrew0rk.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776114907, "uuid": "d91770c8-377d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mon1-check.xelvarinox.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776043206, "uuid": "e7c33712-36d6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mpjrpw.mucus-rafter.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087146, "uuid": "35c9c559-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mypanel.vip" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776113944, "uuid": "9ab8c673-377b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "neo-c0upon.kazan-saddle.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776066727, "uuid": "ab99c786-370d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "neo-r0ck.danger-style.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776045124, "uuid": "5f39c6f4-36db-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nhspq.chandelh2lifa.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776072546, "uuid": "380e42b3-371b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nimbl-sheet.cry7adiophone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776081249, "uuid": "7aed5ea2-372f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nimblcave.piculi5tep.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776055691, "uuid": "f988199e-36f3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nisjdefz.pra7vexal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776091626, "uuid": "a44dce3b-3747-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nkkexjp.intersp5uspect.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776121626, "uuid": "7d9f3f23-378d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "node3-blob.vo2xeral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776115684, "uuid": "a811c742-377f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "node3-core.xelvarinox.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776119590, "uuid": "c03991df-3788-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "node3-fast.drumavex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776123665, "uuid": "3d312604-3792-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "node3-join.krinaxon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776117607, "uuid": "223be622-3784-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "node3-soft.pra6lixon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776101474, "uuid": "9284dda2-375e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nordraex4.onepal-liat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776042425, "uuid": "160a73ec-36d5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "norvale5on.mucus-rafter.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776113345, "uuid": "35af5113-377a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nvgsw.kazan-saddle.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776094808, "uuid": "0d01b22e-374f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "observe-mesh.morphinve8et.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776043564, "uuid": "bd49e683-36d7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "orvfw4.mucus-rafter.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776106867, "uuid": "20791137-376b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "p3ak-path.chuv2shfile.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776074890, "uuid": "acf0c6e1-3720-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pars-packe.personal-danger.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776076698, "uuid": "e24f95c4-3724-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "patterndelivery.babrevea1ing.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048725, "uuid": "c14ffe07-36e3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "payloastag.danger-style.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087972, "uuid": "229f6c77-373f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "photodocvault.info" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776091991, "uuid": "7da11157-3748-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pipeli-line.over-tatake.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776115927, "uuid": "38d637cd-3780-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pod4-sync.xelvarinox.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776096790, "uuid": "aa95d3e2-3753-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "proto-reta1n.baptis-midwife.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776108187, "uuid": "3337f63c-376e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "psnwbo.ditch-obscene.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776088926, "uuid": "5b010d7d-3741-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ptwc.desola-tidle.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776085808, "uuid": "18ce54fb-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-0a6599d7d6394e379b6da3d6bfb5354a.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776073870, "uuid": "4cf9d8e5-371e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pwndrop.llcsintez-n.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776058929, "uuid": "8373ff5a-36fb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pxedkzjn.zeq8morin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776073444, "uuid": "4f229097-371d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "qu0t6-trail.personal-danger.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776039244, "uuid": "ae82336b-36cd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "quorcore1a.conferen-cesman.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776077649, "uuid": "19936a51-3727-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "quormeshos3.babrevea1ing.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087294, "uuid": "8e2bf62c-373d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "r1v3-route.echi6under.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776085992, "uuid": "863feb27-373a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "refundonex.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776069306, "uuid": "ac838fdf-3713-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rende.sanctua-ryunt.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776067570, "uuid": "a1bd616f-370f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rende7-beam.sanctua-ryunt.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776078490, "uuid": "0e99049d-3729-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rnatr1-branch.attit-negligent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776039970, "uuid": "5f00e782-36cf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rnoon-wave.rebutrew0rk.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776079025, "uuid": "4dde702b-372a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "royalvita.attit-negligent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776060245, "uuid": "93ce9269-36fe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "runwspoo.travixon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087972, "uuid": "22a31cb6-373f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "safedocs-hub.info" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776101166, "uuid": "da671499-375d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "scanmodel.onepal-liat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776111845, "uuid": "b7f5681e-3776-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "scre-dust.inform2tunleaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776106206, "uuid": "96cbc4b5-3769-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sercrestar.chuv2shfile.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776090965, "uuid": "1a53106c-3746-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "serdrais8.intersp5uspect.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776040569, "uuid": "c3deaac7-36d0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "serlineet.rebutrew0rk.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776120968, "uuid": "f5455c4e-378b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "set1-init.vo2xeral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776071891, "uuid": "b127302c-3719-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sfayxss.cry7adiophone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776100810, "uuid": "062f79fa-375d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "shal6-stream.onepal-liat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776109564, "uuid": "68731e6b-3771-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "shif-well.ditch-obscene.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776102844, "uuid": "c2dc64e2-3761-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "smar-disc.oguzok7ye.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776105906, "uuid": "e39fa5dc-3768-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "softcamp.multip-lway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776067209, "uuid": "cac3ace4-370e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "solspireum.insti1partition.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776046325, "uuid": "2ad74f9d-36de-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sterileric.chandelh2lifa.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776112924, "uuid": "3b3f8e25-3779-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "stitch-spool.kazan-saddle.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776083829, "uuid": "7d20a774-3735-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "subtlemark.piculi5tep.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776118211, "uuid": "8a511bf0-3785-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc5-flow.pra6lixon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776122291, "uuid": "09f2a085-378f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc5-info.vo2xeral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776116225, "uuid": "eabb4289-3780-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc5-mesh.xelvarinox.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776120546, "uuid": "fa188896-378a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc5-ready.drumavex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776124326, "uuid": "c723abbf-3793-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc5-site.krinaxon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776092287, "uuid": "2e4b9772-3749-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "t35t-cast.over-tatake.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776041944, "uuid": "f7726717-36d3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "talmarkum1.mucus-rafter.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776102545, "uuid": "10d8a995-3761-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "talspireis4.oguzok7ye.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776098465, "uuid": "90aca75b-3757-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "threadtrusted.phoniche1lo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776051006, "uuid": "10df7758-36e9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "toos.insti1partition.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776070329, "uuid": "0e69688e-3716-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tp3gkrx.cry7adiophone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776095465, "uuid": "94ddd60e-3750-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "triflux3ar.morphinve8et.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776065345, "uuid": "737998be-370a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "trilith0en.rebutrew0rk.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776112568, "uuid": "667f09b7-3778-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tyvp2rya.kazan-saddle.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776098171, "uuid": "e13ac054-3756-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ultra-rnerge.phoniche1lo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776050348, "uuid": "890cf7b4-36e7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ultra-shall0w.insti1partition.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776071164, "uuid": "0032aea4-3718-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "valeoptic.cry7adiophone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776051124, "uuid": "5755a129-36e9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vapb64us.insti1partition.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776094445, "uuid": "345f2ef8-374e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vellineen7.morphinve8et.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776054612, "uuid": "767c88f0-36f1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vend0r-crest.xeltronix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776107227, "uuid": "f72becb7-376b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vendorwhole.chuv2shfile.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087968, "uuid": "2037b194-373f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "visapics.info" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776065829, "uuid": "94123cd4-370b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vivi3-watch.mucus-rafter.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776059885, "uuid": "bd04960e-36fd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vmkzuhhq.travixon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776073864, "uuid": "49aa853f-371e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vp4psm.personal-danger.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776064384, "uuid": "36e5ff79-3708-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "w0rk3-wave.habe7dpermanent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776087507, "uuid": "0d78519e-373e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "water.s3.cubbit.eu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776102129, "uuid": "18bf59f2-3760-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wceemv.oguzok7ye.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776057070, "uuid": "2f3e2d26-36f7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wkodj.vo3xiran.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776053412, "uuid": "aafc9e85-36ee-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wolorch.sanctua-ryunt.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776054730, "uuid": "bca449df-36f1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "x79h.xeltronix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776048007, "uuid": "1549d4cf-36e2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ydiftfl.danger-style.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776058389, "uuid": "4166c86b-36fa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ygxq.klinavor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776091324, "uuid": "f07d8cd3-3746-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "yjsmlbn.intersp5uspect.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776079812, "uuid": "22b075a2-372c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ynykxz.attit-negligent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776077170, "uuid": "fbefe6b7-3725-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zenforgeix.babrevea1ing.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776061686, "uuid": "ee99ea6d-3701-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zennexis.norxevin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776096490, "uuid": "f7b61736-3752-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zentide2en.baptis-midwife.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776113645, "uuid": "e8f6df7f-377a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zmxa.kazan-saddle.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776080346, "uuid": "60cff3a5-372d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zzqm.attit-negligent.in.net" } ] } }