{ "Event": { "published": true, "date": "2026-01-28", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-01-28", "timestamp": 1769645724, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "7ea9844f-3f9f-4460-afe8-e549974c994f", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1769558424, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769558424, "uuid": "7d1fbc1b-0902-4efd-bbd3-a95a1ede216b", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769558424, "uuid": "8fa368a0-8cc9-4baa-859a-a16fbdddf7d5", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769558424, "uuid": "9a30f275-f837-4f1e-9102-fefb612e9db9", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769558424, "uuid": "4d4e31ea-3318-4eba-8f2c-32e9957cb052", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769558424, "uuid": "037dd06e-646b-434f-91ed-873472928ccb", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "10bbd528-fbd8-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769558438, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769558438, "uuid": "3809e883-39de-45ec-8294-20f58d5432f9", "comment": "Malware payload (Mirai)", "value": "9533de72314c0844ed09e655e8efe6b6", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769558438, "uuid": "3f2be706-d240-4fae-beb0-1af198463226", "comment": "Malware payload (Mirai)", "value": "92018cfcd74f3c2a24ef8f75ece405a36c1c6007552230ac1fa80ee1b2034e9f", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769558438, "uuid": "45415158-f33f-4afa-944b-9357768fcd3d", "value": "T124F34B45EA808A13C4D61777FAAF414A3322D754E3DB73068D185FB43FCAA5E4E236", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769558438, "uuid": "b40be391-594f-4532-9304-03c67994e9c5", "value": "3072:MGmL27dR0x+aZ7k4i3unj9mrsplDKZU6QBKXAVanmX+F8JyvBAhL18wQXFSuUpZf:MGmL27dR0x+aZ7k4i3unj9mrsplDKZUd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769558438, "uuid": "9eb9c041-a59f-4a06-b679-0747f4a6d935", "value": 159844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769558438, "uuid": "b186bf49-d75e-4767-ac9d-b0a2c245bdd1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34754d74-fbd9-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769558629, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769558629, "uuid": "6529ca61-e812-4b48-83cf-31535540f67d", "comment": "Malware payload (Mirai)", "value": "39eac7b1423dc42a1a5ad571d62d87a8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769558629, "uuid": "12fbc9cc-8c6f-4e84-bf0a-e04c6a317af3", "comment": "Malware payload (Mirai)", "value": "d3fd9994b16dc9b14c29f7faf7b5f6c84f44b06fccf82f0031a0871ce5e20e17", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769558629, "uuid": "6cf75359-c75e-4016-9312-3b408088d844", "value": "T11BE0DFDB786418BAEEC44F3AB0218084E9CD24A62B903A84E06A7893489CC8830916", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769558629, "uuid": "7a012b32-39f9-4b20-b736-c3557ea01318", "value": "6:IOnFfljMo3FOJ+pUtsAMr70XTR0GONX9faapqR0GONXKsfaaLv:dSJ+uA70DR0GONXtpqR0GONXNLv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769558629, "uuid": "f033635d-1f07-4c39-8e67-5befb24495ed", "value": 363, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769558629, "uuid": "f5e57bd4-cb41-4533-afe3-542ac2488e3b", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f46c0eea-fbd3-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769558657, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769558657, "uuid": "31696ea9-717b-4981-8d1a-adefe0ffb9d8", "comment": "Malware payload (Mirai)", "value": "822978c5de767fe08d11e29711a06da9", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769558657, "uuid": "4d9b67d5-bba8-4fe8-9171-733a5e0945e7", "comment": "Malware payload (Mirai)", "value": "272e3e25e2ae14ff391d9e77dd9f19f4bcd03f3995b87ebd2e8011831236dc09", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769558657, "uuid": "4dabf427-d533-498e-8e7b-49cb0264e49a", "value": "T1D1935B0277189F57E5D65AF514EB17B083EAFD916AF2B148E40EEB840231FB2184EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769558657, "uuid": "c12f19e7-cc1a-44c8-9862-4c4a849b38f0", "value": "1536:C0vRej31cgk5y6Kg0h4JCNc9qPbhI+GnfwcYu5wUUI:BvReJkQ6Kg5TOhIHMu65I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769558657, "uuid": "a9b71767-a9da-4a47-9141-552e6545e42b", "value": 94714, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769558657, "uuid": "5c646a3a-b451-4896-8e74-5aa27a6ea3b5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b349a263-fbd8-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769558742, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769558742, "uuid": "c4b2a4d4-dae2-43ac-bc60-f56d94357bd0", "comment": "Malware payload", "value": "6ceef46a572793d739139f0a40a85452", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769558742, "uuid": "057daf56-a191-41cb-8e11-8406c7e5ef02", "comment": "Malware payload", "value": "653cedfd89a9b76791cebcac737baada8d5a47aab80c8133d14169c9bca3e928", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769558742, "uuid": "3d674cd5-f77a-4391-983a-cbd1a245d0cf", "value": "T18831D7F766475862C0A3C2343D685F00F86C23658948F2C76E5CD6D230E52E64A623", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769558742, "uuid": "01698bc6-fe0d-4c8d-9fa6-a9d633a20ec6", "value": "48:9p5a+5K6/SFPWubFavWVE+jUk5mawXLdf4pQ/y1+BGcHj:laNTbrE+Ghf4pqyIVj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769558742, "uuid": "cda8a74a-1e91-4f37-be37-e7b098649d8e", "value": 1561, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769558742, "uuid": "06e8f0b6-56a4-4b16-a22b-938b1af76045", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1769558963, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769558963, "uuid": "684f2cee-206f-4ea1-b095-8a2a29915082", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769558963, "uuid": "e264a46f-ecca-496d-ae33-324a0f61a791", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769558963, "uuid": "9b392bd6-3cca-4d39-862a-a2d573971f26", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769558963, "uuid": "fa73f981-1621-4b9d-9fad-e3d81741c217", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769558963, "uuid": "b1e5ca0f-37bc-44e7-8688-2f29f515e47c", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ff58800-fbd6-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769559182, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769559182, "uuid": "e817de2a-71b8-4e6b-b9af-2b647e98cf73", "comment": "Malware payload (Mirai)", "value": "37b7a7a6a715ab8d075f139899afd870", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769559182, "uuid": "7c12c1e8-b13f-4e11-a285-43d9b695749b", "comment": "Malware payload (Mirai)", "value": "385ac56b5ddd112c2eb71cb51a24a0fbba30c45e5c2a2b629f039a6abdaa6403", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769559182, "uuid": "16eec031-924b-4999-80ca-0f14ccc42261", "value": "T1B1C3B50A7FA09FF7E85FDD7709E65705248CA41621987B3ABA24E808F74B24E15F39", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769559182, "uuid": "9b4153d4-f9a5-4499-9cd1-85279f7d7ffd", "value": "1536:Z0lWR6OU3XD+0OrGwcp3APnLkP/GhnreYg34RZPKlj/ywcMISqNB:Z0O6OU30rxlkP54RPbNB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769559182, "uuid": "30eac8bd-9b21-4202-ac4a-7ecd2861f5fa", "value": 129235, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769559182, "uuid": "d3be61d8-bd6c-490b-a605-122532f07982", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "771ff372-fba4-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769559449, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769559449, "uuid": "123aaa2c-8705-40f5-bcae-1fa99b849257", "comment": "Malware payload", "value": "08ba0326f5f2ac3674e28102bdfdcbbc", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769559449, "uuid": "c4c29a29-4e55-4481-b757-9af4fef96453", "comment": "Malware payload", "value": "4a12223d5818457bbe03dc3c45bf0a212e999b8a0972f4f8aeb10d5b23f17989", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769559449, "uuid": "aeced3b8-a6c0-47e7-aefc-e78ca2351abf", "value": "T1E4310A0ECBD6A80CEF447F37179571B0D288CD92B1C2236D973DE2884EC75642AA90", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769559449, "uuid": "12836fc3-6e01-480a-b3bc-f9b29a1bdc1f", "value": "24:9JuHm558qcLr/M/+GQFlw3I+69X8VXG1gGyxObhOpRLhX4TMuHxmoPat:9amgLrk/+GD3bek2K0jyRt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769559449, "uuid": "2ea91934-72b7-48a2-8a50-8e2bdc6c5201", "value": 1588, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769559449, "uuid": "3153cb4a-4abe-4bdd-9b1b-5c6d3217d663", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4cc0b6bc-fba4-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769559458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769559458, "uuid": "554d1fca-0a8d-48a0-88a0-00ddf6a04f89", "comment": "Malware payload", "value": "c13469185ebcd16c9beacf940362e250", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769559458, "uuid": "a7160e1b-53d3-4663-b06d-6ccef9945cb0", "comment": "Malware payload", "value": "fc371b37133095cdb9d9e55d0a7aecdaf79ef96163f292c576399e8d270ac224", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769559458, "uuid": "84a98fed-f974-45d3-b39c-13bf06a402a7", "value": "T12F31D72CA3B1F146E6A24675C27862079A031AAE9250E0993596380F6A977591CD7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769559458, "uuid": "28256416-6111-44aa-80d3-63b095755c41", "value": "48:99deRN/CgwEs/UQa4px+VgeZFfT6y+XRgwjP:/deRc1EdLFLNWRDjP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769559458, "uuid": "60f198da-873c-4e7c-acf5-3beb30cf592d", "value": 1576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769559458, "uuid": "c8d8a274-7cf1-4a39-a23a-7cec6b1fe8d5", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62d48a43-fbdb-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769559459, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769559459, "uuid": "d3841b76-386a-46c7-8569-d6b11c71659a", "comment": "Malware payload (Mirai)", "value": "697407fd12307d942f741670e19a8168", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769559459, "uuid": "49e95d24-98f1-4969-9cf6-9067ab4bdfda", "comment": "Malware payload (Mirai)", "value": "5886f16e48ce7e32bed0083f3c4d226875202c2d724fb179fcfb04ba7a1c38c2", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769559459, "uuid": "5eef43d3-d01f-4f76-a703-99a40cd18f1e", "value": "T1D7A32941BD419A27C6C11BBBFAAF008D37207798D3DB73429C182FB43E8A95E1D2A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769559459, "uuid": "c6d3ac6b-09dc-4d48-bc8d-92e63a9dc9f5", "value": "1536:3GrR7VNNiVObkaMD/VtCar4fRtd6JuvxHq8JeZW6xLs7w5GqSA1Mwcvr/zuPYM73:3GrR7TNiVAKQwX5gwlJy7r/zub7Z5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769559459, "uuid": "96ec15f6-f41a-4517-848b-474b29ce3952", "value": 105224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769559459, "uuid": "983b8de0-40da-4883-8381-0788672418da", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe8162b6-fbde-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769559561, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769559561, "uuid": "a7ce03b3-3b9a-4907-80f7-f37ffec0b05f", "comment": "Malware payload", "value": "dc45ae7052b13c72067f9296e21cd66f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769559561, "uuid": "d92c28ab-4355-4f5d-9c56-f6d3c4471ff6", "comment": "Malware payload", "value": "b803a84f3bbee01ed8ec69d878c0eb61ddda767ec72c618232305a96f1b2e2f0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769559561, "uuid": "a819b567-fc2f-4444-a25a-9918162cfffa", "value": "T1A88309327488582A210B428FD267336C70AFDCE2D611E5B6F6F632344BA5EE135B76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769559561, "uuid": "b24e59fd-6c62-45cb-9483-50dcfcf2926c", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnmWaDVN/:XEKltp9txAX/yr2pbmWSVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769559561, "uuid": "33b52d6f-839d-446d-89bf-1057626c40e7", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769559561, "uuid": "e5ace261-8c44-48a7-9a59-5f268ca33072", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7e494b1-fba4-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769559816, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769559816, "uuid": "368b4133-1547-4088-bff3-7942a8c6a141", "comment": "Malware payload", "value": "81bd31648241ed4abbba0a78010ed1e6", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769559816, "uuid": "63773fea-db6b-4631-b233-3e6a777ffe6a", "comment": "Malware payload", "value": "cf1dbae268ea0b4147615eb0dfdb81462d59bac3d7cc7b42984edf08d0b456ce", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769559816, "uuid": "02ba5560-33c3-4c0f-ba68-5f71360a26b2", "value": "T15D31B79BC8A6A319DBC542330AB01ED9BDA43013148620561A6EE220BE65C69A5B97", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769559816, "uuid": "6a0cdaa2-8a7b-4e1b-98a4-7f30dc7cb467", "value": "24:9LBTdA9th3mY5+zpZvU3H6fBTvxTWxoeWMwJG367tP6Z8Ij6B1SPKuJN/:9HEh37MZMXITJTrzMAGKpM8IwVuJV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769559816, "uuid": "caddf414-0a06-4f11-9f0e-5204893cd554", "value": 1575, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769559816, "uuid": "30abcf1f-f895-43a0-9f3f-5348daa1f477", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "068de657-fbe2-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769560863, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769560863, "uuid": "c7846d3e-d02b-4046-9d83-8e099e6f67c5", "comment": "Malware payload", "value": "6c93270396133f9e12e85c6837efbff3", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769560863, "uuid": "f43dd246-0257-46ee-b0f8-bfa19dadbab8", "comment": "Malware payload", "value": "3ef7d770fff4afe44d243e5c729abdb88e1a2d038a4cdba3cfd2dccef8d19a7b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769560863, "uuid": "1eac96b9-ad17-4e64-98fc-e07bb02daed0", "value": "T1B0E3F86F83F7313572138359F5A6673896ADC133EB410EE2B9B29A9C8FC11A201761", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769560863, "uuid": "9011b5ef-8a80-4e3a-a77c-9230677908ce", "value": "768:EZdapEbrTXlGRNjcXscJGcz74k/tHcTwABmppnsfifRfiVIrePfHKIYFoFSnUh+a:EapArrl4k2wympBoIrzA4YnhJgc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769560863, "uuid": "5ec6f6ef-8caf-4d38-b3a9-f8764979c70e", "value": 150852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769560863, "uuid": "b5320c4b-8d58-4bbc-8794-9b6e3614e450", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "318efc8a-fbe3-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769561365, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769561365, "uuid": "1ee43c3b-2628-4d23-bceb-00065b8b47ac", "comment": "Malware payload", "value": "22b3d7389886ffc3d1e20d2a6eb13b78", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769561365, "uuid": "2e712c01-e45c-4a41-9dfa-81cc45edb42f", "comment": "Malware payload", "value": "001f34b936c564112c11c9b9c1a6afdf9498c568b18617ad089c952d737ec17d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769561365, "uuid": "613cc395-edf4-46a6-91f3-a78fc9e56d90", "value": "T153D623E044E612B0D1E70A20A187939E34C1699D45FCAD193DD29D421B5AEFE348FF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769561365, "uuid": "b91c4116-e1b3-4603-916f-ab2cef9b6f8f", "value": "5a5f3ffcdcc1810ee34059261555859b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769561365, "uuid": "3a09eec2-5928-4900-9459-01ec6934ee7b", "value": "196608:ltOoDSyvFewdwzCEU084nwlnXZuf79OSD9TGoQWThywshLuAy2nxEXCMo:lwoDmwd6CEbwlnXZuf7wuTNwlZnq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769561365, "uuid": "16a3a7d9-8495-4ebc-bf34-75ad50d97c4b", "value": 12632064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769561365, "uuid": "d7c0542b-10ff-4b7f-a950-d1390a15a944", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6183e94d-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1769563099, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769563099, "uuid": "2db07d5d-3f51-43b6-83bf-73ac0839d4e1", "comment": "Malware payload", "value": "dbc520ea1518748fec9fcfcf29755c30", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769563099, "uuid": "0ab59205-faea-44fa-9a28-768841c7d49d", "comment": "Malware payload", "value": "c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769563099, "uuid": "0b0501e7-e735-4b23-be6a-0b37e955f64c", "value": "D2D3128AA536ED54F11B9AF11B3B99907DF5659E82F4D4A4A2CF634312CC343FA4070B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769563099, "uuid": "a5123c3a-3a41-4377-b2b7-91b6e1885371", "value": "3072:Nc4i0agsmw3Py5CP5HM8EVLUuYtgB5H6oz:Nc/0aNPy54EVAhOae", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769563099, "uuid": "1b90454d-19ff-4e4a-8301-8736747a7503", "value": 132860, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1769563749, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769563749, "uuid": "1d7b3905-f0e7-494c-9551-8424e286e1f2", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769563749, "uuid": "cf934cf1-a567-41f2-bad9-db0b50d12f97", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769563749, "uuid": "3b9ed19b-18ff-4ea4-84b9-e2a429fd90a3", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769563749, "uuid": "c0e29655-6667-4b33-877c-b90be76bf282", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769563749, "uuid": "76a7be3d-b997-49b2-ae9f-fc74d5b599b8", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8f9cc3d-f79c-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769564408, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769564408, "uuid": "e1e447a1-b970-4579-9354-4fc847df6a73", "comment": "Malware payload (Mirai)", "value": "702640787ee584740579c6a72cb6607d", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769564408, "uuid": "1a498345-313a-4aec-824e-c4f20b9d2be6", "comment": "Malware payload (Mirai)", "value": "49ccefcae857e0c29361d2d01be8bacc1902ee15563c5f9f4fcaf6ce06ad0eb0", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769564408, "uuid": "a970ee0c-1986-4664-bffa-1ea99c2c02ff", "value": "T1BB64F1CAEB11BC3AE985077135A70B5DF7B4D99A82C3E090F2D4C55E3CAA2C5B7611", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769564408, "uuid": "9d5fbeeb-502d-4d5b-a7e3-81a80ff76925", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xio4a5POdOQ33Q:p3lOYoaja8xzx/0wsxzSiwPqOJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769564408, "uuid": "fbbdcc82-5b27-4fc3-9287-d8f48fe9b84b", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769564408, "uuid": "b860d58c-eff5-41d8-87fb-c467a6eb8a27", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a0d6a53-fbea-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769564466, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769564466, "uuid": "24e77a17-38ad-425a-a414-73245ebf79ca", "comment": "Malware payload (Mirai)", "value": "91cefe2fedb1a5519c0cffc0ebb87817", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769564466, "uuid": "07a2a294-0341-431a-ad3a-e6a99a95a3ed", "comment": "Malware payload (Mirai)", "value": "164e4e436647a5baa0e5a4061f5ee10632634c1d0e29e7b5e5a5a3128c6142a5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769564466, "uuid": "18488d4c-4afc-4ede-ad9b-5ee8a7c49cd7", "value": "T184242A13BA81E9FFC486C0B54BEF6535C972F81D1535B18E2790BF621E99EA06B1C3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769564466, "uuid": "764c496c-27a5-417a-b3aa-b85832ed75b9", "value": "6144:8wgSXzwGn/laiu17473mmodDbNeFIKGnnGGCyG6GGGGGGGGGGGGGjGhG3zGgm:X7vu1S3mmodsF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769564466, "uuid": "f9fb2eba-1733-4158-b19c-8a5edb09430c", "value": 211408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769564466, "uuid": "5feac781-0754-4584-b85a-4fd7ecb68cf4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1769566517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769566517, "uuid": "f4c2c962-8b1a-4889-a68b-ae0d99bb4e63", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769566517, "uuid": "90dfeb48-10c6-410d-a28e-f4bd9914871b", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769566517, "uuid": "49032269-b53b-455c-8df1-bb530d3dfe74", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769566517, "uuid": "4f0134f7-53d1-4f9f-8eba-bc18c6751199", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769566517, "uuid": "24214da6-4842-4789-b37d-1a9150e885d1", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aed112ee-fbb3-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769568649, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769568649, "uuid": "3118bd7d-488d-49f6-a033-11425b11af83", "comment": "Malware payload", "value": "b9e407ce31812c8ba5492d9326da7347", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769568649, "uuid": "3ae0bfc1-08cf-4456-9346-b9160fb05356", "comment": "Malware payload", "value": "3bc3d4e8ce9aa076f1472ac8ff09fb1ac304d891ee776d1ebd7c499284819794", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769568649, "uuid": "86f11453-df8b-49f2-835e-e11d5d16732b", "value": "T1C7310A02638C1648D0C3C9B5728E5592E0A608474A8CE1A78D655FA0EF6B13C0AB63", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769568649, "uuid": "e0159209-c9f2-4c14-b7f0-b76ea6de08cb", "value": "48:9thjBAuu9+xnz8aNG2hax0G5ROSbJIAX/:XbJoGV4xD5rDX/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769568649, "uuid": "a0379b5b-1653-4501-a9c3-727bd2b3f9ae", "value": 1581, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769568649, "uuid": "5f83a71a-5569-4a60-b88b-1e421fd56290", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52671e46-f4e6-11f0-9446-82aee05be84a", "comment": "Malware payload (MassLogger)", "timestamp": 1769576767, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769576767, "uuid": "820f45d1-6337-4967-a6e1-eb7f08f7c157", "comment": "Malware payload (MassLogger)", "value": "1750450e04d6b23eb5edbc4cdfac3b63", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769576767, "uuid": "376e4379-f420-4486-aff6-f5348c18ba42", "comment": "Malware payload (MassLogger)", "value": "335650f270bcbc765de5add883ca3e060ac3f7c02ddabff895fdaaba211becf7", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769576767, "uuid": "2afe310f-968d-4d37-9f4b-00464963e4e4", "value": "T1EDE5BF5733D800D8E16AA23489B7CA3AE6727C55037286EF16E84D4F3F33AD559397", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769576767, "uuid": "bf851797-b82b-490a-ad73-1a05bcce61a0", "value": "bdafb39cfee2e23fe0c8ae87ef4f1ea1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769576767, "uuid": "b976ca43-6c83-4b09-8d5d-f6c595145fc6", "value": "49152:tNvhM6qHJfTJb5lmzSzko22LGywmtGSlp6NjCw6IVZGKJCxgUiriJxkjqIknagki:KlmzSzko2TjCfoNJCxgJi7DIeb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769576767, "uuid": "09206a77-d3fa-4a5b-a594-819430c4ad20", "value": 3195320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769576767, "uuid": "33f3c7d1-7d0b-492f-9402-e8be2b183618", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d0e6d50-fc0a-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769578242, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769578242, "uuid": "47412a5d-58e2-418b-9981-46007cdaebac", "comment": "Malware payload", "value": "23fd4ece053eec07d6c40b15ea6a0883", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769578242, "uuid": "fd6c46f3-d75f-42c2-adf5-dc66ac18f7f7", "comment": "Malware payload", "value": "615d688eeda759c2672da616c9c657f91227b4a9117d31f4d08d954f78347a02", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769578242, "uuid": "df6b0467-7faf-41f1-8b9b-3ce9ec843447", "value": "T13A51566E2C04C2246A1B9B491AD8771C4329FD3B5918CCDC33EB5529CB42FE8572B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769578242, "uuid": "168a8c28-7bf1-4e7b-b4f0-63e634255e25", "value": "48:0rfTXEoOoOb7o+osdDMLxGge0KlfdJKVsATrCbsKtmsKt/GJWDZj4be:ErMb5kGdlfqsHWjZj4be", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769578242, "uuid": "296e5767-02a6-4a89-bb0d-aa72d1d6185f", "value": 2710, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769578242, "uuid": "b39b9a86-3905-4f72-b0a6-96b725be331a", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf897ab5-fba7-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769578475, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769578475, "uuid": "5820d907-41f2-4d60-92e2-965448581f51", "comment": "Malware payload", "value": "6007c372a51642fee963ebdecf81ccbf", "object_relation": "md5", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "spammed-by-tofsee", "colour": "#e441e8", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769578475, "uuid": "626ca373-9bfc-42ab-b414-f6eb0ef50369", "comment": "Malware payload", "value": "15e6a909752242da0f6f2e96bb432811d45940efed83537c5bf5da3708a1bedd", "object_relation": "sha256", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "spammed-by-tofsee", "colour": "#e441e8", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769578475, "uuid": "1a01f1a1-713c-4676-8ef8-d9d53e5ffad2", "value": "T10531DAD90703E14AC3D7463097F77F11C5C1A534126ADAE5B83AEF631B1181915637", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769578475, "uuid": "24c961da-e627-477a-97e4-fddf354837e7", "value": "48:9sqYZtubvr7W2OhZOYAE2p/iG6yPgWz9sJ5rQi:xct+qU42xt6+dhuZ7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769578475, "uuid": "038b348e-0758-4af0-95b5-b2f2dc35df64", "value": 1563, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769578475, "uuid": "2a44691c-80ed-45b0-b089-d6205e079140", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f6e9ecb-fc0e-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769579776, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769579776, "uuid": "0d4246f7-e75b-41f2-8800-4a27349d8086", "comment": "Malware payload", "value": "47a6fcc23510fa432c770b8349f26628", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769579776, "uuid": "c960e19b-1da1-4760-8830-aabe9af5c242", "comment": "Malware payload", "value": "44f0ae3ee266f1a05687856600a883eb65c61e585f02bbd01d0d518867053198", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769579776, "uuid": "018c71fc-7b73-47ad-aa46-978996200538", "value": "T19133A119927F117F3517D8E53BE16B8332D1202FD759E8183FFCA2600F5ADAA9681B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769579776, "uuid": "0ca62c7d-1edf-4da0-a2a5-adb8b375b43d", "value": "768:e7XFlFvFEFEZuMqt6/IOZe621yZzCHoU1N/lESnjlC06g9:kX3x2KEMqt6QOZgy+nn/+SnjlCVg9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769579776, "uuid": "fdeee07b-30de-4a03-b21b-0de69f1e8c5b", "value": 53617, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769579776, "uuid": "cf2acf8f-8eee-430f-b1f9-731c9ff36377", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f891189-fc14-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769582514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769582514, "uuid": "3f0f03cd-2a05-43ab-9c6a-61747232284f", "comment": "Malware payload", "value": "f2b250e0356234e8667d52f415879c5f", "object_relation": "md5", "Tag": [ { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769582514, "uuid": "353d4c53-61b0-4129-aa4c-a2b6177d6b11", "comment": "Malware payload", "value": "7fefb3b0318c02660ea213b0017b97de7dac6504083516555b793bf09b4c4a2c", "object_relation": "sha256", "Tag": [ { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769582514, "uuid": "dd87b7ba-7bbe-47ca-a120-972a3f7ec72c", "value": "T16853E819917F117F7917D8D03BE06B8331D2211FD769E8287FFCA2504F1ADAA9A81B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769582514, "uuid": "db8d2cc5-a349-4dca-9423-70afb0edc84f", "value": "1536:k33x2Kyz+7T4iAGoNKp1sIFObJ8FboJZIA:k33x2hLieMPFQ84IA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769582514, "uuid": "ea4448d8-b57c-41a9-99d3-74e3f7048b62", "value": 60810, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769582514, "uuid": "b00bc297-d6ba-46ca-afd5-814687953bd2", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5609a0cf-fc15-11f0-8b2a-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1769582901, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769582901, "uuid": "94a5fa18-7a82-4358-a11a-3d6886e27bb7", "comment": "Malware payload (CoinMiner)", "value": "ab9ed2ef0195d5cf59dac30880090870", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769582901, "uuid": "731cd373-4850-4af0-bade-1e10bd15d91a", "comment": "Malware payload (CoinMiner)", "value": "fcd89fa42d24b330d8661064a5d40660b95deff7a741663ff11e8be65cf91af1", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769582901, "uuid": "fff25929-926b-4b9d-b94c-1a0e5baa3186", "value": "T1B1F533CB947514BCF49142F01A9FAF368A0EF297279606CB51967800369BFC32B753", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769582901, "uuid": "2739b7b0-cf78-4ae6-ae03-9ea9f16bacd0", "value": "3641b918fa6fcd6b6754b75fd2065c00", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769582901, "uuid": "59176155-66ec-4b1e-a5e9-044a3d7b1963", "value": "98304:ekSPX+W+vB4jUv4KFm1GKKlXgxEnWmRsq7w:ezX+W+vBZIHKXcq7w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769582901, "uuid": "1ce68ebd-a52a-4c62-a2aa-62fc3dd6f23a", "value": 3443512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769582901, "uuid": "2fe22b2d-e4a5-4480-a285-c19750376864", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a912a46c-fc16-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769583470, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769583470, "uuid": "14187653-7f80-40ce-8da7-11e7e4e3d00a", "comment": "Malware payload", "value": "9d185dfe5a2747fe58355efb8dc8d494", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769583470, "uuid": "b23ab60f-4128-47e9-8c8f-07bbb4a2fa3a", "comment": "Malware payload", "value": "517dd654a8a781270fd8dfc2046faef2c720148e95f8d40ac406a0898b754ede", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769583470, "uuid": "d0a20e76-a5c2-46e8-9937-11cf9dc45cfb", "value": "T109A3E91916670890F1EEDDC00D89B8BA1A137773A5E11BF967CCD64CCD16EED28C36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769583470, "uuid": "3b7545ac-ad8e-482e-9b56-3541db945e99", "value": "1536:p4Xku131N6/RTVBMKJu83mPm+sezkTiBHAw06IyGbwgewyDjEYgIPLOAj1QJzqAb:SgVBH3mPm+sqk+HAw0F5KijXxb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769583470, "uuid": "42903020-59bc-4d9f-bab3-1e021c857a08", "value": 98122, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769583470, "uuid": "727e0513-3988-407b-abb3-1db6df4fb76b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e26dacaa-fc27-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1769590868, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769590868, "uuid": "fe370a3b-f452-4104-9110-7fe6414e70e6", "comment": "Malware payload (Amadey)", "value": "cb565ae2a6f5c9f726e2c9458e2112d3", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "cred64.dll", "colour": "#b1d1dd", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "f397a7", "colour": "#c8cc2d", "exportable": true, "hide_tag": false }, { "name": "plugin", "colour": "#e5c9e6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769590868, "uuid": "61d427d8-c14a-4493-8c1e-c686dc973066", "comment": "Malware payload (Amadey)", "value": "a0b453b054513023dc3a5460eb813c70717776e7a26ee89c8ad97ef281084bf1", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "cred64.dll", "colour": "#b1d1dd", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "f397a7", "colour": "#c8cc2d", "exportable": true, "hide_tag": false }, { "name": "plugin", "colour": "#e5c9e6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769590868, "uuid": "d09a9f4e-5110-45c6-9a46-3609f10e412c", "value": "T122557C0BA26141BCD4BBE1789A175A47F775704603709AEB07E446A63F13FE1AEBE3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769590868, "uuid": "ae64f811-ef08-49de-b837-29fbac52c521", "value": "3f175edea93fa7a76a78004d12de2235", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769590868, "uuid": "2b5cf461-83f4-43a0-bb5c-09f41223b2f5", "value": "24576:1rR0NaOy0mK9yCksn6JCc2YkxfUyamitsDw+mLRpTOnW:1kHmiyCkhh2Bamituw+UrR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769590868, "uuid": "7e58f88e-7dd4-4681-a31f-dd4f4404f9f4", "value": 1282048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769590868, "uuid": "e01a1c2c-18e6-4490-9fb2-922b1978a5b5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e26e843c-fc27-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1769590868, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769590868, "uuid": "f5454320-fee3-4eb1-b552-ade303cd4aa1", "comment": "Malware payload (Amadey)", "value": "9dc7bdf4d82a1b00c32417b26695bb51", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "cred.dll", "colour": "#fe9d71", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "f397a7", "colour": "#c8cc2d", "exportable": true, "hide_tag": false }, { "name": "plugin", "colour": "#e5c9e6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769590868, "uuid": "dfad7734-ae35-47f9-aeb5-9fb8f7b8dd92", "comment": "Malware payload (Amadey)", "value": "a67c656898f7250b47693bf9e36ad2062a75b97e1c3e29e8e0b8fe56318d4f68", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "cred.dll", "colour": "#fe9d71", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "f397a7", "colour": "#c8cc2d", "exportable": true, "hide_tag": false }, { "name": "plugin", "colour": "#e5c9e6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769590868, "uuid": "15ee6898-e7d0-42c5-bd5d-a5481fa497af", "value": "T1F5358E06FA52D0B1D8D420B112B6BBF2597C6539A72445DBABC01FB69D201F33E36B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769590868, "uuid": "9f67df45-d856-45d2-810a-c881cd43879a", "value": "aca6f08ee5befa37be16bac4bc315573", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769590868, "uuid": "a2f012ef-12c9-4a6f-92c2-9fcc100012eb", "value": "24576:Sf5xDRatdGrWrz4x8/cvmGwDM1H2BPdEnunN1ljhzgPnvzJnRVIBk:Sf5xVaU24WGmhkXzFUBk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769590868, "uuid": "86a79c3d-00dd-47b1-8ca6-cb5adc5eb901", "value": 1087488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769590868, "uuid": "234fedbf-c0b0-46bc-8628-5cc379d82ea3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1a7ed72-fc2c-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769593041, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769593041, "uuid": "1605974c-1e59-4bcf-a946-9e36b96b12a5", "comment": "Malware payload (Mirai)", "value": "cd7481a1f1004c409822c2534a05bb53", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769593041, "uuid": "b7947bec-d1e2-4419-ad92-7fb9478c819c", "comment": "Malware payload (Mirai)", "value": "aa817eef98e20072b1a6289250782140009501a5da3799bac4bb4644d71a7620", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769593041, "uuid": "db941e04-573c-47c0-b7f1-76c38bc6e2ef", "value": "T1A773B60E6E218FBDF26C833157B74B35975963E222F1C684E25CE5051E7034E586FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769593041, "uuid": "3b8381d1-6eed-48b8-845f-01e4a120f7e7", "value": "1536:9y2dy2gr2x6Su6njJANGI4KQ42oh5hobran7xyqQs10DTE0S/USJJ/XaaL:uHwj+P4Klan0CDSUiXZL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769593041, "uuid": "9b89001c-ea4e-4d93-beee-d33a66809a46", "value": 77768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769593041, "uuid": "7362371e-7666-4e12-8402-bc2e2e37e67c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d085a8f-fc2d-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769593328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769593328, "uuid": "c013938b-ada5-4fb3-aa2d-dc6d93bb5d59", "comment": "Malware payload (Mirai)", "value": "fa17f79316eb6b6936fdbe2cd44f09b4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769593328, "uuid": "2c43b23c-177f-43d6-9a90-9608513ef946", "comment": "Malware payload (Mirai)", "value": "016550a25f05a8555c3c6da0822f2abb4ffce15527acb8c1e2cb4983869f2244", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769593328, "uuid": "b5100368-ddf8-436c-ada1-a1ff4c42142a", "value": "T16393288ABC85C702C6E0A1B6FB0F559D371643B8E3E6B107CD18AF29634F8970A376", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769593328, "uuid": "462a53bc-2b99-445c-8325-e43912d8949f", "value": "1536:eiKYuHe3XCinXX04cz5/I4Su+pXojb9cIusR2ZXm5KuetGvBaqaCuqZL3X:enYu+3XvDcz7+VojBrusRom5jzlaCuOD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769593328, "uuid": "a3f8615f-2650-41c8-bc34-a3f5a04aeabd", "value": 96576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769593328, "uuid": "5ddcf37d-4b18-43e0-842f-ab21e0310131", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d73655ee-fc2e-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769593855, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769593855, "uuid": "d9e1dbfc-4c3f-477c-b338-8f0c62ff64b3", "comment": "Malware payload (Mirai)", "value": "c4a21fd5b813e8808e8642bb47541bf2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769593855, "uuid": "585c5952-55c8-417b-b3d9-f4380b3d834f", "comment": "Malware payload (Mirai)", "value": "fc78c3225e4096e99aad35aa16bbcda1b445d65aab408a140a3ce2ab384b3b09", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769593855, "uuid": "f4e5e7c2-6284-41d9-87d6-540d515d6893", "value": "T12DC3F80ABFB21EBBD4AFDD3745A50749289D554622B93B353A74D81CF20A28F19E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769593855, "uuid": "33738628-bf64-4967-bfe9-2005ffe23f4a", "value": "1536:ebmgc0+vNuUg2X5/amonJOtG3qX0U5qRYChMbh881+Bu1u/nSgDuZfqFX39wu7rO:e6xR+JOCjDw3JyQuZnPcMQ6huTX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769593855, "uuid": "fa176464-f02e-4807-b3df-052b76a381c1", "value": 122608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769593855, "uuid": "21fe7bd6-c29e-4cf6-be26-9fdf0d165946", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "85e78c4b-fc2f-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769594148, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769594148, "uuid": "e860ecef-3ba8-45c2-a352-10d95964a6a8", "comment": "Malware payload (Mirai)", "value": "a9891e35d6d86f8d54a37d9905cb1a2a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769594148, "uuid": "51a569c2-178b-47e8-a18f-c260792585fa", "comment": "Malware payload (Mirai)", "value": "88441ba224c8e8e86bf8a57e8a67095c061a917665cfc6dd52b7611acfeaa1df", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769594148, "uuid": "e5a04350-adae-4bef-adb9-17583b5fdd90", "value": "T17493298ABCC4C702C6E0A0B6FB1F959E371643A8E3E6B107CD19AB29675F8570A371", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769594148, "uuid": "8f35661c-57d0-42c3-80e4-0ffe057835b0", "value": "1536:w1rTP0K47DeABf2lRxo4GO/EJ0rjy2o8y50eq2Qh5yXnX:wRTPH4zZ2llb/PrjyIy50QQhcXX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769594148, "uuid": "0d00811f-906d-4c06-ab2d-45c45996c3e9", "value": 89980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769594148, "uuid": "965e1375-13a6-466f-9d4e-ceb52b14740c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c2055a9c-fc31-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769595108, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769595108, "uuid": "52e91c6b-d5a2-4a80-8f22-adde6885dae9", "comment": "Malware payload (Mirai)", "value": "2008397b8a4d7df49d800909e6074980", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769595108, "uuid": "6bcc7b93-8c1f-4c20-bdab-49bbc69a2924", "comment": "Malware payload (Mirai)", "value": "1ab8769b21c5a9a0025a011598d5c8d903d07ad672fcca367a91961c12941249", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769595108, "uuid": "deb28b3f-7284-4e8d-b2ad-dc6ce9a47eed", "value": "T16DA32CDA7C418B11D5C116BAFF1E618D33135BB8E3FA7213CE185B2A574B86B0A3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769595108, "uuid": "7de4fecb-3320-40be-b616-310bcfc8f3f1", "value": "3072:FFAbkgsIKsZE8yf/xnZThje/ID+zlI9cd6V6SX:oKkaxnZThJyzlkcE0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769595108, "uuid": "fc2da7bb-e9ba-45ca-a53f-a8142c9369c6", "value": 104248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769595108, "uuid": "6874d389-a692-4141-91f8-dc7458f9043b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b214b7a1-fc34-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769596370, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769596370, "uuid": "7a782486-f030-482c-aff2-96385b862373", "comment": "Malware payload (Mirai)", "value": "4f36ad572a3e12e18eb2885639d1cded", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769596370, "uuid": "03694e9a-fbb3-4ad2-bbad-58decdfa0947", "comment": "Malware payload (Mirai)", "value": "50940e6c84ac9278bdd9e85b8edebb9052e5444a7abc0e7e89e52e138a20b2d6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769596370, "uuid": "ed4e3400-3c26-4016-86ad-43238de2b48d", "value": "T1F0939D12CCB65D9CF03A6E3010B9DDFA4717E489A90B6CBB3C438655005BAD8F5A7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769596370, "uuid": "10d45c8c-fddc-4773-8655-55a3177ac213", "value": "1536:Dd42IGWNE4+E+AnlnvUT0yaD32MyK64np0Ikw2eCB3vKlX:DdhI5H+E+Alnvw0pT2Xz43kw2eQfEX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769596370, "uuid": "54e3b2ea-4579-443b-a375-12ab419f6cc2", "value": 92460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769596370, "uuid": "f75a1559-dc58-464b-83bb-39b9455c3790", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a41bc4c-fc36-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769597135, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769597135, "uuid": "2086dee7-df5c-403a-aaec-cfa04ba5ceb2", "comment": "Malware payload (Mirai)", "value": "28d63683c4abf6de917fe26c5456e4c3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769597135, "uuid": "5d9bc276-5fa0-42c7-a11e-282765649c35", "comment": "Malware payload (Mirai)", "value": "e15ce931f64fb95cd28b67b04f354997e6b8c105f6ccc75c8656e860398d4590", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769597135, "uuid": "964fa514-f23b-4b74-ad81-352b801d02ca", "value": "T19DC3B64E6E529F7CF32C83744BB38B3AA65527D233A0C186E25CEA411D6035E586FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769597135, "uuid": "14770041-eba0-477f-9ac3-eec70fe8a0e8", "value": "1536:lCJ5PTTvvZvvMTvcFTx6DvF4ZeIAFnLd2vawvA0fZyi48FpoLkMWxzOPXsXzo:l+PfTxEv+HAt4a0y+oL9BXsX0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769597135, "uuid": "7ba5cb93-2624-4fe4-be38-1f89f1b90571", "value": 121728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769597135, "uuid": "9b8732a8-08c7-43c4-ba3e-f0095229b1ae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf144b99-fc37-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769597680, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769597680, "uuid": "72a1df50-5a71-4c11-b42f-865217d3664e", "comment": "Malware payload (Mirai)", "value": "ce9db0c7c536fba130e269c7eab07a87", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769597680, "uuid": "65d65313-3f14-4a01-96db-34995c1a09c4", "comment": "Malware payload (Mirai)", "value": "aaef2f59df910dfa4d28f6b6f69bdea59f70ccc6df57a0fdc59911afb04a0603", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769597680, "uuid": "bb256133-932c-4b69-a16f-564fd3d4fdf6", "value": "T1E6935A42B3690487F2A74EB02C2F6BF1539ED5A131E0F285694FDB0F8175A321586F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769597680, "uuid": "f2cb90ce-2f28-416e-a6cd-5fa5c00fe9d4", "value": "1536:lsE9XdH6OORiFanDekrLYIHiv2c6y3aFmbwsZatzd85E/vLSqyLTJXPR:lsNOORa83y3/wsZaM5eQX5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769597680, "uuid": "7c55036a-e9a4-4721-9914-8c1a143b99bb", "value": 96276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769597680, "uuid": "81074d91-b360-4600-b1a5-b6fdb337357d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "537b3153-fc3a-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769598788, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769598788, "uuid": "43b4448c-445a-4ca8-9b53-baa65090e519", "comment": "Malware payload", "value": "89d220c98253b6b0e9c00d0641c275e4", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769598788, "uuid": "cddcfb8f-f736-4a0c-afa9-280ab7db12a4", "comment": "Malware payload", "value": "ccc4a15b30915c8666c93f7a4e19dbd4896c940029fa909291b8ddbcdb360433", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769598788, "uuid": "dfdd92dd-2835-404b-b91b-c984132ea3f1", "value": "T112C5E114A878D0E6FCD741707756A212B4337E378F282A9B11A4875CD94AEED1B3E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769598788, "uuid": "95e9438d-7c5d-4e33-901e-9e3c89e1609d", "value": "155dfc2d31fa3e5e20315bf41423c877", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769598788, "uuid": "10bc859e-8fc3-4c31-b0f6-aac532a1beb3", "value": "12288:F8t+QhgNvxsdSUPSzGYTkeXQvFYx7Amt0ulXeOf8SqEVrYb4NDLWkBZ8zlQH8a6Y:T4gNv+SSFeE6x73rUBW7NlJ8axxW9FC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769598788, "uuid": "115bc52a-e6e7-4bc6-8779-6b57c878a443", "value": 2607104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769598788, "uuid": "ca4d5000-a314-4c63-8dc4-c9b76647ab26", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a95ba11b-e711-11f0-a6da-82aee05be84a", "comment": "Malware payload", "timestamp": 1769599213, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769599213, "uuid": "b973c658-af93-44b3-afce-82a2fbea8c3f", "comment": "Malware payload", "value": "3766553afbc0cd3949a4b638a90ac087", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769599213, "uuid": "8a52ffa0-a2e3-4489-a45d-cf7ac2449758", "comment": "Malware payload", "value": "7c59b52a83876594d6eca40b7d6b96b8400f5af3f2324bde22413b809a04b8ba", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599213, "uuid": "534ab5ab-353b-411d-b4ab-86c20d852465", "value": "T176032A2A219A20110533926DF64777A8F6351163F74286E63DED80326FF7D91EB339", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599213, "uuid": "4ec10349-01fb-4ee6-a7ec-615ada2d8ee7", "value": "768:86Z+PDF72cOJ8snhjUkVkD6SGkV+kV8kVb+kVfkV0O5kVqkVNkVckVXWkVGIEGZp:hKDF72cOGsnhjUYkD6SGY+Y8Yb+YfY0Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769599213, "uuid": "e78350b2-2ec8-4bfb-94b1-ca12d8253b04", "value": 39915, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599213, "uuid": "4e57ddec-23ff-4e67-b8d8-38899d4f64bd", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53f21648-fc3b-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769599219, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769599219, "uuid": "e98c5988-8b84-4e0b-98b5-0c10b64a5482", "comment": "Malware payload (Mirai)", "value": "636342ae672406b854072c9590ecbda7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769599219, "uuid": "2a8f80e3-58b3-4827-8b1e-71ebca8e3f19", "comment": "Malware payload (Mirai)", "value": "f6653fb92a730fef8b3fec27625e4c0e4e06ad02715f168108862455aa95d2e8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599219, "uuid": "80cc86da-ef3f-4f5d-be70-d2102cb1678f", "value": "T1EB336BC56793C8F1FC2501B0207BBB765F71E93E10B9FA5AD769E836EC22141A2163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599219, "uuid": "e6a33c79-516f-402b-be9a-b603811fb37b", "value": "1536:QPBPBbZEEnoEb3rCNFWsWhlbJqHD1ZzBH4:WBPNZbowbCNcsSRQj1H4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769599219, "uuid": "c54a754f-4f84-45ea-882e-1a30b8a5d48b", "value": 51476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599219, "uuid": "93044862-871b-476e-b2df-6bdf44c2d105", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65746ecb-fc3b-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769599248, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769599248, "uuid": "14b0557b-dbeb-4a73-bfc5-81d1eff78625", "comment": "Malware payload (Mirai)", "value": "2029ad91d728ba04737e8f491cbe07a8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769599248, "uuid": "94668add-8c18-4c23-97d7-8f5395b19cc8", "comment": "Malware payload (Mirai)", "value": "e5223faab1dd8f3a7bbf4739935b5c5460489bfce96ac36bef86a8d2435a900e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599248, "uuid": "496e9a10-a913-40e0-9c3e-e05cc3e1996a", "value": "T14983188ABCC5C702C5F0A1B6BB1F519E371643A8E3E6B107CD19AF29674F8670A372", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599248, "uuid": "ae4e9635-3275-4c04-9ca5-6ced15c74f64", "value": "1536:7x0tFhbeQa/116XjtqK4vdbhUDDthx2ZpMF5zTX46bDAEAX:7xqFhiQo6jy1bgthx8MF5XX46bDNAX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769599248, "uuid": "dc3d5f26-79c0-4729-acfd-b78a4bc9ef39", "value": 88564, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599248, "uuid": "2b6bd39c-8ad1-49e3-b6c1-321565d23197", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "778ad417-fc3b-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769599278, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769599278, "uuid": "2dda32a0-1390-425c-b1b5-c5ad98c0f499", "comment": "Malware payload (Mirai)", "value": "77d7bbdf15d315ddbb6f5b3050a4cc31", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769599278, "uuid": "36955dd6-2cbf-41d1-b4d0-33139a299835", "comment": "Malware payload (Mirai)", "value": "27d4b7a50861563042f3ef30e8a72380f3fd93f1ad5346fe3e29327cffd9454c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599278, "uuid": "693559b3-0cb0-4d87-84c0-059dc813a27f", "value": "T1DDB3090AAF711EFBE4AFDD3345A50749299C550721B93B3A3674D81CF61A68F0AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599278, "uuid": "c9d794b9-1dd2-4ace-9157-6cb09a803716", "value": "1536:i3JE/zOQu4gaP5/muoM9p8U3Wj0M9q9YCtvbVM81yxuJG/HencnZfqFX39wu7r8d:i5KB9pOgctv4v60ywdqxY+X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769599278, "uuid": "7f088459-f826-47b6-8c36-ec068b8e3b16", "value": 113632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599278, "uuid": "70752b82-34b5-4a2e-a0c2-9f017fb78e68", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e26ca18-fc3b-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769599343, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769599343, "uuid": "0871b46a-fce0-414b-9517-3a72104aa5ba", "comment": "Malware payload (Mirai)", "value": "a0d3d23ba3221ac8a43c5af3d082d398", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769599343, "uuid": "e01c8548-0555-403b-83c4-677683c3fe3f", "comment": "Malware payload (Mirai)", "value": "e295d162049669301f8fd374f811ea9417d892962ead03204f06e9b9dd1ee8dd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599343, "uuid": "c4199b96-4460-49ad-b019-f93b1b7485e8", "value": "T197931AC9BC858B11D5C126BAFE1E618D33134B78E3FA7213CE185B2E574E86B0A3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599343, "uuid": "778fa43c-ee67-423a-949d-a6bd45131283", "value": "1536:yRnrxxEIEe94DsrLP45f0EfIYfjQesfZLQEeQYPiR53us5M0iea8MQ8LxVE7YxY8:WEIEUFrLw5f0Efhfj5QZleKRna8MQ8Lt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769599343, "uuid": "908f7ccd-7cdd-40fc-9eba-6b5607d4c9cb", "value": 95608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599343, "uuid": "f7572d64-4066-4f91-a364-552b6a26f84e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3e894c8-fc3b-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769599380, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769599380, "uuid": "dd861142-018d-4e3c-a3a1-6ef1131bfe7b", "comment": "Malware payload (Mirai)", "value": "9a112bf67b3df4341d5870bb4bc3236e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769599380, "uuid": "78ce6d82-b538-406f-bc0f-64771b24154f", "comment": "Malware payload (Mirai)", "value": "e6f45ab9ea9c6728ad5977a6c4fff85b1558d431d86b1bc26ff1ccc5e4838c6f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599380, "uuid": "0ae8b228-851a-486d-ac7c-9d8df5aa2551", "value": "T1F2B31A89BC859B11D5C526BAFF0E518D33139BB8E3FA7113CE145B2A538E85B0B3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599380, "uuid": "e1eb1b64-9088-46a8-bff6-c644cb04bc4b", "value": "3072:MrjL5x3mk4nEwHfhXswWteXKce4o4325XYt8lgDNT8M+ofSQX:TkGpXswWteXKrJXYt8lgDV8M+MS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769599380, "uuid": "21dd07b5-684a-4948-bb24-14019d654d26", "value": 117728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599380, "uuid": "840013ed-a486-47d7-a556-e4898e4eaf40", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b993e1a9-fc3b-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769599389, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769599389, "uuid": "a6131d6b-46ad-4a5c-959a-487f0db95227", "comment": "Malware payload (Mirai)", "value": "9b010f7e287eb89a307aa149c60a1f20", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769599389, "uuid": "83eb2963-c271-4207-9214-f58ff069223f", "comment": "Malware payload (Mirai)", "value": "f612866af6e3ca3fdf3ec528ff1512cd76c810c3afc2b38fd80d9169f5108b91", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599389, "uuid": "f78d17db-710b-4c4c-abcb-55f752a44180", "value": "T19BA34B21FD792D27C5C0717A51D34630F5F643A926BC9A4E7EA31D5CEE14220322FA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599389, "uuid": "3526563a-c04d-47ab-8f14-a50f93a4de69", "value": "1536:Xk2ddsQ31aksoA73F7PSM1AuCzmxE9ScTZ0t6I68m0Z9cUnp:UE7lEoOF7PQmuJDtAnp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769599389, "uuid": "72b8571d-66b7-41d6-9614-c946c22588b6", "value": 99780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599389, "uuid": "e5591b67-32ea-4037-a0a8-bc950dc66e4a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1ca5756-fc3b-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769599403, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769599403, "uuid": "d73949b3-bece-4497-9650-34e60f6400bc", "comment": "Malware payload (Mirai)", "value": "c98dd976b59e944bfb61800f48c6d58f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769599403, "uuid": "b9d99557-556d-4185-9b34-85f1fb19fc2a", "comment": "Malware payload (Mirai)", "value": "e916e50468ab757bd4f0fd560268b9f411031d8eeb0a47906fabc83a6bf890d6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599403, "uuid": "6282d9b2-7819-4911-a8b1-4189a47771ff", "value": "T129837D16CC755DA8F07B6E7060F5C9BF4723A649A80F6CB63C538364401BA88F5A7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599403, "uuid": "4e69b228-b04d-4882-8337-013e9f64506a", "value": "1536:av4Vxi88Ek+usG0z1j6yOeSB1aOvjHdBbPCjvvZSMX:av6xvK+usGU1jyjBgKxBbP6vhJX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769599403, "uuid": "51b9abac-c220-47f0-8d81-7020f2f3d8f7", "value": 84180, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599403, "uuid": "51e9d6c3-45fe-4b4e-bee5-552924e1a168", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c89803fe-fc3b-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769599414, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769599414, "uuid": "d2a8bc20-3429-450a-952c-0ee2754c7d3b", "comment": "Malware payload (Mirai)", "value": "0f88be73750c258642a2a4c3bf109a77", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769599414, "uuid": "63a7cc2e-7ddf-48a1-8916-47d623f07ebc", "comment": "Malware payload (Mirai)", "value": "c4fe739308f310665bdefd49ffe713a48637476678c227ae52e3876366901aeb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599414, "uuid": "ff50f92b-b93d-408f-95a2-1dc6b133c215", "value": "T12B330240D8F178FAAD2EAEB95B99E2F63F61456F63408FC535C5AB20453013EE189A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599414, "uuid": "6168c2c5-ee45-4670-8c85-c4981ab7b248", "value": "1536:Hk6MSpNwzDbs81ncOkuxeV9N4u+qgw09e:HkSWs81cb4u+qgwT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769599414, "uuid": "d44b2fe1-96c9-49b7-9cab-2e4109625d31", "value": 53356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599414, "uuid": "c8c85200-9ef3-489f-8e70-bc49239a8463", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40df42da-fc3c-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769599616, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769599616, "uuid": "5b995b78-c9d0-45d1-9187-d7ac12dd184f", "comment": "Malware payload (Mirai)", "value": "fe2b18faa62535f252844210e4d9a8ed", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769599616, "uuid": "95f3dd72-e0dd-459b-8171-40a28699b2a7", "comment": "Malware payload (Mirai)", "value": "79e57bb7207b4353b7a6a0767bb3d11330c16d5ea3761d8e87abacf6d06515f3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599616, "uuid": "2e84735d-3c39-41b4-8c81-081dd88bb433", "value": "T19DB30A89BC818B10D5D626BAFE0E618D33139F78E3FA7103DE145B2A538E86B0B775", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599616, "uuid": "b0b4b448-fdc7-4707-9d95-61e6f0c8e2a9", "value": "3072:H5mOiYtRdRPEH0fKNS4hely/r+QSMZwAq+9Nshdojoh4X:Fd89NS4/tSMZwAq+bshdoo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769599616, "uuid": "2ae2fe4e-0a60-4321-9ccc-ad373d4d2718", "value": 109604, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599616, "uuid": "858f503f-fcac-4228-a2e6-ff8aac67cc0f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f842f51-fc3c-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769599748, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769599748, "uuid": "8e2cef57-a067-4cae-9942-f0e3e532f4f8", "comment": "Malware payload (Mirai)", "value": "d3be70ecd367195ba445c7ca3691b958", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769599748, "uuid": "1418c1b4-ab87-4435-8ed2-ad2c4711a689", "comment": "Malware payload (Mirai)", "value": "f62a5901c3882b255bcfd37c4c5c8988fd2139ca48e454a3cc90d5aa2c27e7d3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599748, "uuid": "9d1de3a6-c8c0-4044-ad07-f43099e9dafe", "value": "T1E283E50ABF610EBBD82FDD3746AD0A4535CC965722A83B763534D828F25A18F49E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599748, "uuid": "8e4b127f-f706-4cf0-a117-7f6ecc3fe819", "value": "1536:YW+HKlK7q5uA4OSWVRJCWRNtF5lLMZQd6TpTFe0ewbGdX:YWoK47euA4ULMF2wbUX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769599748, "uuid": "9882b26f-9fd3-4110-aa35-f5fd6a7db28c", "value": 80760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599748, "uuid": "0b074c8c-c7f8-41fd-8125-44332e5eda42", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b618a3d4-fc3c-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769599813, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769599813, "uuid": "ce7ce50d-4a6b-4a82-b18d-4c7a51c70f55", "comment": "Malware payload (Mirai)", "value": "113241841016db40db5cea8aac4e2123", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769599813, "uuid": "f90e5831-01db-4d86-94c0-e4eb8267ee16", "comment": "Malware payload (Mirai)", "value": "873da354093954fa3b896dd5bc5f93c9236a2c523471f61d1362cda6f787ba20", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599813, "uuid": "4c068192-32a8-4762-a064-7d2cb9617036", "value": "T1FCB30889BC858B11D5D535BAFE0E618A33138F78E3FA7113DE145B2A538E86B0B3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599813, "uuid": "2bc5155a-39d2-46e5-948f-3e68e6e8dd1c", "value": "3072:AUDQWHCTPWCsExPfdWiXexoe27LbNiGIdSdDeR2+X:roWYdWi827LbNibdSdiR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769599813, "uuid": "91ff926c-ca96-44ca-8621-a97c5222e049", "value": 108188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599813, "uuid": "a7f3b3ed-b41d-422b-abf6-350f50c2a1b9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d58bbe95-fc3c-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769599865, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769599865, "uuid": "22451490-94b0-4dbf-be89-f144c47499de", "comment": "Malware payload (Mirai)", "value": "2e69117f9db01adf3697415ab025fb37", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769599865, "uuid": "a6b615da-3c41-4dc4-9d9f-af5e12feddea", "comment": "Malware payload (Mirai)", "value": "b895b9f2816586128af14e6c501472aa134070ac1a6eeba7a424389e5bb25d8f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599865, "uuid": "26ccd8ce-7f19-482d-bd61-6176f36eba8f", "value": "T100636C32BD791D2BC2C4B57B51E74231F6F6439A21B88A1E7CA10E9CFF546403217A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599865, "uuid": "928fc164-9f5f-480f-9fda-d1ee4d72c174", "value": "1536:bLE0EoL+pwLO4gAyjfRR8PjOZ0N+N4sqdZDdns:/eoL+pw/yjJWK7Wtdns", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769599865, "uuid": "d62a1b17-872e-482c-a465-9827446b570f", "value": 67012, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599865, "uuid": "8c981d34-a261-4495-ad46-0d21f14cb09a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f97bb919-fc3c-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769599926, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769599926, "uuid": "ef740909-0d3c-4506-9e13-8dc897b9ac75", "comment": "Malware payload (Mirai)", "value": "b7a2257cd9769b44abeece632c3c8201", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769599926, "uuid": "3e31dedb-4f32-4b76-a346-7ae108f258f0", "comment": "Malware payload (Mirai)", "value": "6a2046cefac5af23f6a0a05807a862a2b7c0951c8f24228a46c9be0c34b645d0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599926, "uuid": "96286f86-c790-4c05-bd11-603c18ecaabf", "value": "T1C7B3C64B6E52DF7CF36C82344BB79B36AA59239633E0C185E29CD9405D6034E186FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599926, "uuid": "21696e81-2507-41a2-aac4-e1ab094cf516", "value": "1536:4HkIVgX7Hx7HW1Hy9SDHgq7b46IUdeGLo8T4EdJAvzxbZXg:4FVqSD9bq/8THdebZXg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769599926, "uuid": "325f8ae4-5a16-40a8-9a11-27b0569a145f", "value": 110816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599926, "uuid": "05302009-d40f-40b9-9f14-ad5704631b0d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18dea5ab-fc3d-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769599978, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769599978, "uuid": "173d1b2e-c38c-4099-a381-847c83e1241d", "comment": "Malware payload (Mirai)", "value": "7463a85bad8a96b1a3fc8991f5ad5349", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769599978, "uuid": "b74eb279-c9d4-4ef1-8eaa-3f3194a6bd93", "comment": "Malware payload (Mirai)", "value": "a821f27fa55930b99d88cac3c4db9484d71b1767b63804ea2af5b32234da395a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599978, "uuid": "e82c466e-4be1-40ac-b666-4771509c538b", "value": "T17B934A11ED792D27C5C0763A51E30A31F5B7439D26BC9A4F7DA31D8CDF14620322BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599978, "uuid": "f78e0cc3-51f5-48d0-ba0b-f4874c891cc6", "value": "1536:Rzfl2qzkyqMayP2+ICiZGU0w3Rv9/bI547ZbcwtGQnx:9QYbR21Zr59zJx7nx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769599978, "uuid": "7b2da637-bed6-410a-a81e-783e3d7ecb84", "value": 91840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769599978, "uuid": "6bdf6761-b578-4a68-b1b4-4fefddd59deb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "516ade0e-fc3d-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769600073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769600073, "uuid": "f36d5977-d762-44e8-bdc6-4e19d92b76f6", "comment": "Malware payload (Mirai)", "value": "15cb0d553e4d502bbc5cd278dab93035", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769600073, "uuid": "dca08313-90b4-4e45-a262-2e99300cf69f", "comment": "Malware payload (Mirai)", "value": "339f93f38a57d167306494d9dbe28ab1217f8663f05355b393a90843ef01e7f1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600073, "uuid": "03dd6a25-cc5b-4213-ac3c-9d9689b3e5ca", "value": "T16AC3F80ABFB21EBBD4AFDD3745A50749289D554622B93B353A74D81CF20A28F19E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600073, "uuid": "3b865093-39e3-406c-8322-caf696ea3a84", "value": "1536:ebmgc0+vNuUg2X5/amonJOtG3qX0U5qRYChMbh881+Bu1u/nSgDuZfqFX39wu7r8:e6xR+JOCjDw3JyQuZnPcKQ6huTX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769600073, "uuid": "c6a8a076-8692-46b9-a423-8fac2f52bf68", "value": 122608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600073, "uuid": "f10496f1-5d22-4bc6-abb6-126a15f1c845", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c88ebfa-fc3d-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769600172, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769600172, "uuid": "3430c632-7033-4a4f-9016-ff360df4c57c", "comment": "Malware payload (Mirai)", "value": "e2b2bd53894d8849245264cf7aba263f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769600172, "uuid": "53e1d64a-78d0-4710-8859-2a49000cbb30", "comment": "Malware payload (Mirai)", "value": "5043a5466b9db58f8447782a2b157458a6925fb6c265c29269725400b8ffa50d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600172, "uuid": "baa48d46-7e23-4c63-883d-aef31a668fa0", "value": "T1D7A3299ABCC5C202CAE061B6FB1E558D371643B8E3E6B107CD19AF29634F86B0A375", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600172, "uuid": "19e4be55-58e2-423e-a06d-97be22f31567", "value": "3072:IlUwxuMuH/dKgNFKiYoGTQx8u85QglO+oHX:OUnMiFnNRYoGTQKPOF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769600172, "uuid": "5c547249-bcb3-4790-aadf-8fa8acfdaaaf", "value": 99720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600172, "uuid": "1c4b8bff-dfce-40a1-abde-7bcd694f957a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a053dda-fc3d-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769600195, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769600195, "uuid": "0f39fdfd-c2b7-4448-8db7-0f496520778b", "comment": "Malware payload", "value": "4bd96461e2164d44572a0a061992af5c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769600195, "uuid": "9fc41b35-e3ba-4486-a03c-27310ed48c55", "comment": "Malware payload", "value": "cfd00d5c4976a97081b9c6bb5850be112f5c85677dd5b7b76c321804e547cd19", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600195, "uuid": "cc5c6652-23df-4b0a-97a0-5541d7d30ad7", "value": "T1CC01BD8399A0C8451320C5515CD2B804C542E2CBC788ED49A2FE79EDAEC5FD6CBDB6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600195, "uuid": "c8272ce5-f268-4264-b8e5-7c552d50ce11", "value": "12:qTp0Jzc6MsLNYygnXVIquvd6IHvdmqsPWnVUAqAd7JW2QL:0p0JI6pLNYtXy7vd66vdEPWnVU0Jm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769600195, "uuid": "852ffb41-6070-4964-b7d0-c3c079a59a3c", "value": 804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600195, "uuid": "7c29ae2f-184c-4c11-9bed-9dea38bd098f", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aadaa0e3-fc3d-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769600223, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769600223, "uuid": "74f4bbf6-feaa-44d6-99cf-e078df7765bb", "comment": "Malware payload", "value": "63340ee75a530b4c52e8b0e5554fedf4", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769600223, "uuid": "be07b803-5c95-48cc-a226-3bc7648bc57a", "comment": "Malware payload", "value": "966defeb5f18b740f90ea2f79f924537f3ca4fa7bfe137bc07b3959dc7df58f2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600223, "uuid": "9cce6615-eeb4-4dd7-8687-9bb3bee9f36a", "value": "T12724E00D4B60421D46F14BBB0D94223251AF362CE2D8CD34FA8ABDEA8531F675D79B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600223, "uuid": "a62aa3d1-9d51-4d03-8008-bdc934d6474a", "value": "6144:rlEktw5WSa09CwWyfvUudZx9rBlcqducU:rlEkK5Pa+CIfP3B2d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769600223, "uuid": "666ff73d-f4cc-4235-a928-1b35b134c245", "value": 213063, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600223, "uuid": "fef95211-cc5d-444f-8fae-740736adf127", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d26b8545-fc3d-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769600290, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769600290, "uuid": "be66e12c-779d-4ee6-97c3-888215dab9b9", "comment": "Malware payload (Mirai)", "value": "75d61ca00ac70fd8e2dba1b50f22cf53", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769600290, "uuid": "881ee8af-f403-46f7-86c0-10439ae001bc", "comment": "Malware payload (Mirai)", "value": "e5262eac8fedacf3c8b87473350cde7d0b31be8892f6fdef6d0f311ff0af7d0a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600290, "uuid": "039abb09-25b6-4570-8ff5-4a84aa464025", "value": "T1A083185ABD819B11D5D525BAFF0E518933035BBCE3FA72029D246B2513CB92B0F3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600290, "uuid": "c709105f-1e2b-4cc8-8716-bf78fac29d54", "value": "1536:Kpn7zwJBBA/sdepeH0UI6HOwmT8Vibau0P8eYrmBll01giPPqTsbZYY2XZ05:hBBA/O+eBHnibau0P8eYP1RPqTsbuZXZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769600290, "uuid": "b63337f1-7302-4e3c-b572-80168603c5eb", "value": 83492, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600290, "uuid": "e4e49d1d-643f-427b-877c-27760754f879", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dfd0bb3c-fc3d-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769600312, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769600312, "uuid": "447f1949-cfb6-4b07-aa04-1b595a58ff90", "comment": "Malware payload", "value": "1889e91cd34b1fcdcebdce24ad642dd3", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769600312, "uuid": "aa91342b-55d5-41bd-97bf-a586f2cafe61", "comment": "Malware payload", "value": "43f6a5ba2330cb6f1dfeba4b1e11754daaaf5c68c8a5194967840c94e250d23f", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600312, "uuid": "da08a131-6e63-485b-b4ca-2e00853e7cc1", "value": "T139310A33B81B6120D26E3E3CA8815D52AD63C48BC73235B0FA5FEA12750E04BD1908", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600312, "uuid": "9a4b1895-0a06-4c22-bcde-e3aa725355d0", "value": "48:9+xz3Pg8AOLe16l5Gs6UjHdJLDRM298qX/DRjqkMnruJ:s3Ry1WA2jHDLDRM2957R+uJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769600312, "uuid": "1fdefb83-e781-4161-a6ef-ee3223261414", "value": 1587, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600312, "uuid": "6309e73a-bb15-4404-8c0f-ca7ebed49630", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0faa0ec6-fc3e-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769600392, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769600392, "uuid": "4ac10734-bd7c-4a11-bc3b-58928364be23", "comment": "Malware payload (Mirai)", "value": "6e970e5606939b393ddd9f00116eec3a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769600392, "uuid": "41146aca-3fef-40f9-932c-887fdb5202d0", "comment": "Malware payload (Mirai)", "value": "46c13265c206dee5e50dda28a87d669fccc4d063342189a15be9642cf0081502", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600392, "uuid": "852bbf6a-b501-4905-b239-53f148360639", "value": "T1C1934A4173690447F3E74EB1282F6BF193AED5A221E0F285695FDB0F8135A321586F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600392, "uuid": "e21374ab-6d29-47e7-9039-cab449b4d14f", "value": "1536:A/1uCnHoOg1khVnVkrLYIHiv2c0FMFzVbkfXIBx5g9Mk8qj6vgXN2Z:su9Og6PoFMlBkfe52rXN2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769600392, "uuid": "280bdb5e-5a29-4e6f-80cc-bc55dda2ba70", "value": 89828, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600392, "uuid": "50894d47-c9e9-491b-aa12-284f47f73986", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ca93b89-fc3e-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769600414, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769600414, "uuid": "9ebecc6e-6948-4f63-ae6c-79e99a3d2b28", "comment": "Malware payload", "value": "53a6ebe92673d4a9c60b3f403ee5faa9", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769600414, "uuid": "e88be729-7b30-4e99-bfc4-2359a5d5c3bf", "comment": "Malware payload", "value": "2f64dc639fb14cff6577452ca6e4a4b65aa384c5c916cb8fab452b3c060a5e99", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600414, "uuid": "6b1785bd-15d2-49dc-870f-7d8beeae021b", "value": "T11FD633235D9D40C0F4ACD93CCA367EA672F67EC99511547724B9BEC3F9C50A2CE22A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600414, "uuid": "5f8b556d-d751-495a-8473-be961d5b5f24", "value": "b1b096c6e89c68042a1acee565eba290", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600414, "uuid": "6a1ffa91-3c8b-4d47-8466-3ae1a5822d1e", "value": "196608:Vs9/Lhz7/s0bUpsxs3JiCIEOjvYCNH+7mYUc+EIe4oPHhasonlem7jazo1M6nK:QlzA0IzMEOD7+7mYhdT4oJasWlLjac3K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769600414, "uuid": "5928ce6d-0114-42a8-863f-a53dcede15b0", "value": 13104528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600414, "uuid": "7549afe6-3378-4bb0-a842-fff94ad8b455", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3247f6c3-fc3e-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769600451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769600451, "uuid": "ca54cc7e-a1b0-4bd3-89a6-307f0008f9ef", "comment": "Malware payload (Mirai)", "value": "090d0ba0602fb35eaa28b2045b1e8849", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769600451, "uuid": "a6f53274-53d2-4c03-aa2d-4e19ae415494", "comment": "Malware payload (Mirai)", "value": "f92645cab096b5d39f172fdb50f58f9c72a39effe80e4c57d103e7360d461357", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600451, "uuid": "9e1bdc04-c42f-40b6-a977-5fd7770ac119", "value": "T1D2A34B21FD792D27C5C0717A51D34630F5F643A925BC9A4E7EA31D5CEE14220322FA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600451, "uuid": "fc7f0b34-b26b-4be5-8ec2-fcd16bcc3515", "value": "1536:Xk2ddsQ31aksoA73F7PSM1AuCzmxE9IcTZ0t6I68m0Z9cUnp:UE7lEoOF7PQmu/DtAnp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769600451, "uuid": "7968ddfa-32e5-4a42-971f-ca00c52b0ec2", "value": 99780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600451, "uuid": "bbbadda0-88f1-4a57-a6b9-9dae7eb7dae1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ed43eeb-fc3e-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769600579, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769600579, "uuid": "06410692-0d06-42e3-a1b5-58c7d03a2a1e", "comment": "Malware payload (Mirai)", "value": "00aa5159d1c9fd3665aed3d2d73bc19a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769600579, "uuid": "ab9aec59-61a1-4d96-976b-1583b2663b3e", "comment": "Malware payload (Mirai)", "value": "8a2a01453a985c4eb967ebb5453d54d6548531851f86a7ce709653fbf52b7c95", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600579, "uuid": "4817a940-9a35-42d8-938e-0b0e8395f50f", "value": "T183A32DDA7C818B11D5C156BAFF1E508D33135BB8E3FA7213CE185B2A574B86B0A3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600579, "uuid": "9bec96f4-d20a-4787-9578-10adeea994ed", "value": "3072:tBL5OCsqqItESYfsSFleb24efVdpc19IZKdmiuRX:Dq67SFleb8w19YKgP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769600579, "uuid": "fb9a18ac-ecbd-46bc-ad53-d7553cdc5e10", "value": 104264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600579, "uuid": "94a60a9b-4809-4497-b39a-879a287f2eb9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "927cfbf4-fc3e-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769600612, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769600612, "uuid": "020eb468-bf00-4cb6-b6e4-533e57e13773", "comment": "Malware payload (Mirai)", "value": "5d3b402437e85e35de75fe27a5269d48", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769600612, "uuid": "946e96b2-9516-4c4f-baf1-0f9c15df0f02", "comment": "Malware payload (Mirai)", "value": "379e45edefa23373e47f94f29346f8a0085b695c9781f6c200f7c79dd2e9fc92", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600612, "uuid": "60c74fcc-69a7-44a9-9b38-7a9e270b83cf", "value": "T13A933A25ED391D27C5D0723B51E34A30F5B6439926BC5A0F7EA31D9CEE14720313BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600612, "uuid": "6836669a-a3a3-4414-88ec-89407bf5f0e3", "value": "1536:cAovE7G2HYpXOn9rhMsomDOsHgD9sW4blBrgiNMSnj:BkM5HYperxqKldtnj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769600612, "uuid": "8e70e66f-b7e7-4144-b949-2d238513b5f4", "value": 91536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600612, "uuid": "1d29d97e-8ff4-45ab-a276-a72ec738122b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b324227a-fc3e-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Adware.Neoreklami)", "timestamp": 1769600667, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769600667, "uuid": "494744d5-e767-467d-af92-52baf12d0377", "comment": "Malware payload (Adware.Neoreklami)", "value": "c9cfd5945da87a77b13bd8b9b70efdfa", "object_relation": "md5", "Tag": [ { "name": "Adware.Neoreklami", "colour": "#29eb4e", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769600667, "uuid": "36e4b2b9-4b58-400c-8c8e-7120c4c7393f", "comment": "Malware payload (Adware.Neoreklami)", "value": "65fbbacf3609b0e991407fad7b8ea91a01bbbcac02b8446d7039ebd39d291ddb", "object_relation": "sha256", "Tag": [ { "name": "Adware.Neoreklami", "colour": "#29eb4e", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600667, "uuid": "a36364fa-1e89-4fc4-8564-2fe05e43ebf3", "value": "T1CD763334BBB0C474C51B64366DED7EC2D8E4D75E0A21892B776C06243FEEB10A4536", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600667, "uuid": "236f9f5c-901d-427b-8fa6-0fcdf9e2dcab", "value": "3786a4cf8bfee8b4821db03449141df4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600667, "uuid": "15a4d2e1-0901-461c-b499-952f180cd46a", "value": "196608:P1OFAjf2X07EgDqAyVGSFthzTJTXADmZ0iRvXUL+t2XCg5:tOFk2X0ogDqAyVGQttdTXbFCXCs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769600667, "uuid": "755f4336-a7cd-4c16-9745-5b08088bbc40", "value": 7621408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600667, "uuid": "8bf0d61b-8359-4681-bbee-9e7315ad7f9f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3e4a96d-fc3e-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769600668, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769600668, "uuid": "35ac83f3-a945-4b90-85aa-dd205dddf53a", "comment": "Malware payload (Mirai)", "value": "f78ff0ce9400fc79480153c5dcf35efb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769600668, "uuid": "4b0884c0-771a-4a12-b5e2-976c93a19fdf", "comment": "Malware payload (Mirai)", "value": "fbab362b4e1154884d17807d9420ce68a0845305b729d9a7567cd0f4d66ee7be", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600668, "uuid": "c6ade40e-21ee-412c-876b-bc84e573da9b", "value": "T125837CC19543E8F1E9084278223BF3377576CAB80178FDF3F769697684299A0A1477", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600668, "uuid": "3c05735c-219e-40e0-92ec-fb6a9abd9ff1", "value": "1536:vXl5zfemDz9T4U8TfJyEEhD5vy2Rm+a6t4qwEw/cTXrQlU0RK9Fb3CNF:v1pFn54UeYn5vjm+aehwfETX0ln47QF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769600668, "uuid": "f5376d15-fa80-4afb-bf7c-ae9fcc57961a", "value": 83956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600668, "uuid": "25ed6b5d-901a-4ddd-9035-390ba67f34b0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea4b869e-fc3e-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769600759, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769600759, "uuid": "e589ac55-0917-4c55-a576-8636411604d0", "comment": "Malware payload (Mirai)", "value": "543ddf85aebaedf72787ecf20e6e6ef2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769600759, "uuid": "d646c203-6672-4899-bc86-c27779296c5f", "comment": "Malware payload (Mirai)", "value": "4f555fb649aa4632ec420b52bd34e69d5cfe86f1245f4ea7f7fdc6f10a955bae", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600759, "uuid": "1f8e763e-898b-43a5-affe-be15a6fc3854", "value": "T1CB837CC19543E8F1E9084278223BF3377576CAB80178FDF3F769697684299A0A1477", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600759, "uuid": "5097979a-055d-452f-8b9a-980f9735f06a", "value": "1536:vXl5zfemDz9T4U8TfJyEEhD5vy2Rm+a6t4qwEW/cTXrQlU0RK9Fb3CNF:v1pFn54UeYn5vjm+aehwZETX0ln47QF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769600759, "uuid": "a9b1b0f3-ebbc-4ce9-a895-21df3681638a", "value": 83956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600759, "uuid": "538834e6-497a-400e-aa33-3b491e5a249b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39ae3a9d-fc3f-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769600892, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769600892, "uuid": "e4cfe1a0-6c4c-4b81-82cc-e562745d6d7b", "comment": "Malware payload (Mirai)", "value": "802f2308fcfd52d15ee4f83d559d74a0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769600892, "uuid": "605ee44c-f390-4d47-b68c-3ddc5b861ed4", "comment": "Malware payload (Mirai)", "value": "c53ddf5b78c75a44e89c8b5b2ade8f8c18939a43f9821412ca6986926a83c0d3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600892, "uuid": "4fd9fad6-5427-45e6-a3dd-ab91790fa617", "value": "T12DB3B74F6E529F7DF32C83344BB38B3AA655239633A1C185E29CDA411D6034E586FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600892, "uuid": "be1a6d42-e355-47b6-b509-489c31105f45", "value": "1536:cdiyYDvA7jB7jEfjggJHDPmHeH6qwBLyMGEM7GbVqa6eIOneSnPSXA:cPYDjJPxm+68Oqvb0PSXA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769600892, "uuid": "449f8d11-c466-47dd-aae5-8d6d932bafa7", "value": 109392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600892, "uuid": "d1586d4a-1ec5-4e65-974b-3d284e8c8339", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a045520-fc3f-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769600893, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769600893, "uuid": "4462296a-dd35-4e1a-9fe6-7117c0dff43d", "comment": "Malware payload (Mirai)", "value": "14a92558926914f0f47446eb116b6c90", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769600893, "uuid": "7e8a9304-82c7-4cb5-af48-b273c19ff875", "comment": "Malware payload (Mirai)", "value": "6409cd5aa866c9f8708b95beb77a017dd2a6174fbf8f224ddad64a69552aead9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600893, "uuid": "aba12ffe-bde7-4dee-b889-a978df935dd7", "value": "T14C93198ABCC5C602C5F0A1B2FB1F518E371643A8E3E6B147CD19AB29674F8670E372", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600893, "uuid": "a041ad0b-aa6c-4535-a974-307e4ce2736b", "value": "1536:KmbrQQpm/zaR5GPz31H4AcS8nLuIL2El6F5rGKobBVejvjX:KyrV0+APi3SOSILp6F5rG/WzjX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769600893, "uuid": "d4fb73ec-d010-49e9-8eba-0bb76199c9da", "value": 91672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600893, "uuid": "b3dd4c6f-29dc-4089-bb51-7f2c0d138fcb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54f0ccff-fc3f-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769600938, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769600938, "uuid": "4c607638-fd66-4ea0-ad45-2a17616a147a", "comment": "Malware payload (Mirai)", "value": "02e8a545401256e173e920204d21d247", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769600938, "uuid": "d271d3e6-4360-462a-8a8d-b07a9de0b21f", "comment": "Malware payload (Mirai)", "value": "0df2948c40682613272f1e9f021aec4d67df51d6c5dd670a342e44651772cc80", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600938, "uuid": "5576cd2c-fb3d-4881-927c-009c2c446f0f", "value": "T1C79329A6B410DC7EF41BA7F780171A19B131A3E44E426B27762BFD63DE6E1742822D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600938, "uuid": "be351c8f-8bd7-4a24-9628-4a590e3bf318", "value": "1536:KwGkkD6J1cPz7hgYWx1Ha1VMabDAh6WSXOWGXITaF8s+1x:KwGkkkIhgYW4MaHk7BWKITahOx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769600938, "uuid": "eea9ac8f-3735-4b7f-b1f8-643adc0a7f29", "value": 89096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600938, "uuid": "e401ce84-e2d3-489c-b609-94f58c3770fb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca389212-fc3f-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769601135, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769601135, "uuid": "83aa1f4c-835b-4fff-bebf-f848cb232872", "comment": "Malware payload (Mirai)", "value": "b49ec13770327ce6575b113dcd6e639b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769601135, "uuid": "13519178-6b6b-456a-afa7-912797d29afe", "comment": "Malware payload (Mirai)", "value": "a3142b278719fc6b9cdf0548aa3152df9c65fbec928eced1cbce607dbf8600fd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601135, "uuid": "d7564451-7102-4aec-bcd7-e07b44d57314", "value": "T199C3B64E6E529F7CF32C83744BB38B3AA65527D233A0C186E25CEA411D6035E586FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601135, "uuid": "79899c4f-cf70-4884-b6d7-4f1ff3d443c5", "value": "1536:lCJ5PTTvvZvvMTvcFTx6DvF4ZeIAFnLd2vayvA0fZyi48FpoLkMWxzOPXsXzo:l+PfTxEv+HAt4a+y+oL9BXsX0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769601135, "uuid": "a55fbf7a-1449-42ac-9992-a9937dc648a2", "value": 121728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601135, "uuid": "1959be02-1dba-438d-88e4-0fb32bbfc6a3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e43133c7-fc3f-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769601179, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769601179, "uuid": "633c4a85-858c-4d87-a633-f92a175964f5", "comment": "Malware payload (Mirai)", "value": "b186cd7414fd86fc7dc4e822b3a00b3e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769601179, "uuid": "ac28f280-d80c-4be3-84de-1228411b0474", "comment": "Malware payload (Mirai)", "value": "0e0522a60d75dbd0148d32e397d7673d39be65c4710d7cae654b11ad7e0cb924", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601179, "uuid": "6eb86964-64a1-4882-a817-1a74501049b1", "value": "T145931AD9BC858B11D5C126BAFE0E618D33138B78E3FE7213CE185B2E534A86B0A375", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601179, "uuid": "bd1a04c1-9f32-47fc-9062-94803f9170ee", "value": "1536:q0n6ag1UhE9+0R/5ByR+TfEcyYfc0iKozsCkbeA10ATb/exQsZMHiQmzpR8qCgvN:8UhCD5By+TfEcnfFozdqeA28KzpR8qCI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769601179, "uuid": "61142446-a1a0-41ef-9df5-d26661cc5382", "value": 96128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601179, "uuid": "6ec30b33-56d5-428a-81bc-78ca2ad161cf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1ad23c6-fc3f-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769601201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769601201, "uuid": "50cbc764-493f-4d1f-a3b6-4f00665d3c69", "comment": "Malware payload (Mirai)", "value": "9c7c2bdb1b45c6bee8f609a70c2bc740", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769601201, "uuid": "3fc527de-adf1-4581-84e5-eb243798d43d", "comment": "Malware payload (Mirai)", "value": "2c1e75dfa13fa242a3c1dfc98b7d6a6bb73263c66bf06ae25fd7aac621a1802f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601201, "uuid": "2da621f1-1a10-4311-8e3a-e3c23df3cd8f", "value": "T15A33F1B4E5A59571E33A483AE9281D128297CA6DB175F43336E14FAC6DCA04CF3FA0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601201, "uuid": "2cc6c4c0-85a4-49e8-9a8f-9efcb9a5b786", "value": "768:bNhb0w95Eh8MS3+8fxjAoDbqQZXayonNXJW7BWgRuFDsWW9q3UELHAMpdYpg4zi1:bNZ595EaFu8fb96JYWnFIGLgUYpg4i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769601201, "uuid": "68adc240-45d0-474d-a7c4-c2788392afb4", "value": 51212, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601201, "uuid": "d65f8003-6788-42bc-aeac-5f7a3d1cc251", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0117a664-fc40-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769601227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769601227, "uuid": "6fa8a442-46cc-473f-ada1-67f48244d688", "comment": "Malware payload (Mirai)", "value": "99f285dc39d4eda4546eb856853cda9d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769601227, "uuid": "42309892-ac07-4810-a06e-f54737566f1c", "comment": "Malware payload (Mirai)", "value": "a3872f2e31da8335f98bab3659485878a43e2ee5b3ea0cea038cbfc77ac1cdf0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601227, "uuid": "5cfabda7-9a42-4a89-b145-329bd6e10577", "value": "T16D838C12CC65AD9CF07A6D7020B9CABB5313A549990F6CBA3C438725501BF98F5E3B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601227, "uuid": "9512332b-defc-43f7-9da4-d8f8bb171ca0", "value": "1536:JY4zvGqSEH+45eTeigVF+xNmxlDtWYQRpJjjuXCJSyUYgX:JYQvtH+45eaigncNu9tRQ5juXGS1bX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769601227, "uuid": "c777de9d-a453-443e-a3c3-34b52dfd0162", "value": 85660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601227, "uuid": "451bff8f-4675-483f-92fb-73d8bf76884f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "390d5d38-fc40-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769601321, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769601321, "uuid": "6d94a5d8-0325-4b2a-9f77-ccfab2313c54", "comment": "Malware payload (Mirai)", "value": "d6de6450164fba51f0227f596bc217c7", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769601321, "uuid": "cde68345-397b-4c5b-a74d-c634bd4b0038", "comment": "Malware payload (Mirai)", "value": "d957b29012f28c713468ca2f9e1ba741a4120eecc08ae798fe44f2f2411aaafb", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601321, "uuid": "4a96bab7-7120-4d69-b3eb-36552e326196", "value": "T1C15302CFF493E584C80D7D3D26BC737A1E06A196B12E8F6522106D48742391C79EAC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601321, "uuid": "b75ac442-ac08-4803-95d6-fd9ede43c529", "value": "1536:UzDdlBDsiEhapA8yPdR6oYR3FEXGro7qMDjBFoNp0hpF:+lB8hAXgNcn0G4BeD0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769601321, "uuid": "286baa88-a977-491b-8e02-ce7cbdfab6a8", "value": 60960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601321, "uuid": "da738473-082e-4493-b5d5-0745c397e3a1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69cc8344-fc40-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769601403, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769601403, "uuid": "05abd600-f261-49ab-a1db-76c82792c400", "comment": "Malware payload", "value": "381cecbb569d597880043d1a17f4e223", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769601403, "uuid": "154b6126-0b72-4498-b73f-d73ac37a8507", "comment": "Malware payload", "value": "5109a5ba023aa59bcbdd99ff949da4acaaf16174546fba089da5c23e10f6958f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601403, "uuid": "7de02312-81dc-4060-ba34-eb0e2cfdf4d6", "value": "T11624E00D785D1F0584052996BFEE3E246FE1F19F6A6EDCE039B11BCA17A96D1203E0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601403, "uuid": "e6c41174-48f0-466f-b6e8-e023b2f47c9f", "value": "3072:CWxF/ARitjAf1/ByyPn54ALsP2tqckknupiXW7XmczuLx41UTo+O/7gbT7R7v+Xd:CTbN/LAUqchupzmTLS1UTolmnQpH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769601403, "uuid": "d9fd1e7e-9ca9-44f6-bbb7-8477de3cd42b", "value": 213576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601403, "uuid": "0a353314-dc50-40d4-beab-4b4f7c1643a0", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "948a5456-fc40-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769601474, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769601474, "uuid": "4c239fed-27ad-4bef-b265-c15778591035", "comment": "Malware payload (Mirai)", "value": "d1c747e92d65227662a7b569b274dcca", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769601474, "uuid": "7802175f-cbb0-4ddc-91c7-e1de87911b33", "comment": "Malware payload (Mirai)", "value": "370229274d88299cafc47bacd0e23ec2d9a7f4c7e552232cc6f53d7f200b0c78", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601474, "uuid": "e461868c-2f78-49a8-a501-b43b27b8f1b1", "value": "T17B834A4173690447F3A74DB12C2F6BF193EFD5A221A0B289694FDB0F8175A321586F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601474, "uuid": "f9461f56-0edc-4aaa-af2d-ff02f6fb3812", "value": "1536:J2Ia6f5HbO76vA2NUikrLYIHiv2r5fFJQAgN8g7hL50aqpaRqcG5HXT:cEFO7gAJzf3jgx5xyXT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769601474, "uuid": "ed6c51f7-8d6f-40fd-8362-a8222baca6f7", "value": 88436, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601474, "uuid": "ee9aa702-287b-4b42-af88-d2d2781f18fa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d0bfcf5-fc40-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769601489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769601489, "uuid": "0f011bb4-ded1-465a-9062-2bfa50be4563", "comment": "Malware payload (Mirai)", "value": "23025874b2d283c7fdfd6e1c2183a620", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769601489, "uuid": "b77a563f-feed-47cc-aef6-8cb0507d4869", "comment": "Malware payload (Mirai)", "value": "ca754f6e5de06a81836d82e34baf15b2e1cbcfc7432bdb24148cecaaf0f576f3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601489, "uuid": "bcb6a206-3236-4e81-a1b3-8bd0059a6aa9", "value": "T1E0933AA6B410DC7EF45BA7F780070B16B121A3E54E426F27B62BBD23DE2E1741862D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601489, "uuid": "7ece24be-6084-4ab7-969b-a6cd8d7ad2cc", "value": "1536:W+seWJFcSXB740u951J7YMwURkQQOblfeUWhRK8ybdy:W+seINx74J9F7YMhS4bIUWhR+bdy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769601489, "uuid": "106c05c0-3e9d-4836-96cf-705590008335", "value": 93588, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601489, "uuid": "2f0a1240-4f48-4296-a96d-294dca81e269", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd22f1ac-fc40-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769601596, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769601596, "uuid": "bfdf1a03-debc-4dc6-9921-dc365c62ba79", "comment": "Malware payload (Mirai)", "value": "b5075652fb5b9037e446ac7abe7e1d33", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769601596, "uuid": "7f422302-3e6d-4806-870b-888b1af33fcd", "comment": "Malware payload (Mirai)", "value": "43aa65b2a3d9971e9f26b5f04242ee83629eb141b4fbd41e7929c1ddea4d35d6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601596, "uuid": "86af9305-a996-4791-89f1-bddcadc5a5fb", "value": "T1C3435C41B3190983E1675DF43D3B2BD0839EA6D112F5F349760FAF4A91B2E324582E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601596, "uuid": "1cf2ccae-b615-481b-ab44-01d552a03789", "value": "1536:PxKstRro7TyarGWbzU4FsQ4vtDq4cDTCXn:PxKsUrhxFsB1Xn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769601596, "uuid": "723c03a4-815c-4121-9cc4-4bff058bcde5", "value": 58860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601596, "uuid": "f0a44b86-4597-471b-b9d2-e3f74618184f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f4eec2a-fc41-11f0-8b2a-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1769601680, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769601680, "uuid": "b7fc6f04-b86f-40ea-bdbc-db23e01f5b4b", "comment": "Malware payload (GCleaner)", "value": "5d749f83708b7d5ba92ea6e35d120d92", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769601680, "uuid": "40a4c853-376d-47bc-9f22-d9e096d65876", "comment": "Malware payload (GCleaner)", "value": "5f7327bd474d666dfdb74807a8c771dd5fcadf943cc796775f79e7765df00bbc", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601680, "uuid": "9a51d02d-42b9-460d-88d0-e119fdb8e8aa", "value": "T110056E22E2B18437E06F1B799C6BD76C54267F132938994A36E93FCC4F753426C262", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601680, "uuid": "7de3498b-9dd2-45ca-a15e-aeaa35f4cd59", "value": "421f57ebeade5946b16f0c3c541d2697", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601680, "uuid": "ccf65a25-6292-4e55-a22f-1d25dc88e340", "value": "12288:f9eONBtJzhKJd6EPXNQyxbLSo+Z2ux8V/CcRn9RtAMVSG:vnzz04EGOz02PxR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769601680, "uuid": "f547d1c7-c2cc-4081-bfe8-194776fd3ebf", "value": 830464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601680, "uuid": "728d8996-f7c9-471c-bce7-454ba7a6e398", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1dcb487c-fc41-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769601705, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769601705, "uuid": "9ccb0420-338f-4136-b8c1-0b442947d71a", "comment": "Malware payload (Mirai)", "value": "d7e3d37e0c5ebb498bf5a6f3e1801226", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769601705, "uuid": "3c41bef4-ae41-4e53-9264-f50debbdfc50", "comment": "Malware payload (Mirai)", "value": "2ebd09e601effd14eb25b4059f5fb59226a3feca88a6ee5ff6a893a76d181232", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601705, "uuid": "a9fc75a3-a7df-4041-8166-1792f2e59aca", "value": "T1B1B31A0AAF712EBBD4AFDD3345A5074A399D550721B83B3A3574D81CF61A68F0AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601705, "uuid": "45a48946-f76c-4369-9eef-a15df646e6b2", "value": "1536:2onVE04Ocu4gaP5/muoT5WML3Wj0M9q9YCtDbVM81yxuJG/HeXIeZfqFX39wu7ru:2OF35WjgI47Kq9X3wQJFuY3Oy6OX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769601705, "uuid": "9d1c82ba-de91-4424-97cd-4f0fa89dd18e", "value": 113488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601705, "uuid": "ae4e0a1d-8537-40fe-b686-ad35fd1d7af8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "24664c51-fc41-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769601716, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769601716, "uuid": "232c926c-c0a4-481f-be38-1f9c4e895013", "comment": "Malware payload (Mirai)", "value": "e5b623bad2e23c445d015d18800ce333", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769601716, "uuid": "ce52c373-85cb-40c1-8a31-8117e938c654", "comment": "Malware payload (Mirai)", "value": "a6cd99999efd842a4e6d53a098b615c8709138a87b9f20b63c704e021f542aeb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601716, "uuid": "e5b81586-fa8a-4ad8-ba11-f3e71b440daa", "value": "T171938C11CCB5AEDCF03B2E3150F9C9BA9713A589D81B6CB63D478325001B988F5A6B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601716, "uuid": "4601b195-6371-4883-bb53-c0f0e6e58e9e", "value": "1536:Av4mwbS+ES+Il79lDy+agwIKQiKbJRiv/FbupmVPjcCyoCOGX:AvZw+W+Il7ry+5wzNKLoFb7Pjc7BnX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769601716, "uuid": "7b724cf8-eef4-49b1-a4c0-534305238fbe", "value": 91584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601716, "uuid": "5e2836e1-c0dd-405f-9be8-aff8eb5aa430", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3781d288-fc41-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769601748, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769601748, "uuid": "cd879087-07fd-4295-b44e-32e57473f6c1", "comment": "Malware payload (Mirai)", "value": "0e9ecd34c8440925438e1754e8ce1b15", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769601748, "uuid": "039781e1-281a-4483-afff-9a34497312c5", "comment": "Malware payload (Mirai)", "value": "6dc661db497040c818e1e6469f6c84d82fbef1d43d08c5863b626a60c849b2ec", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601748, "uuid": "54d38bd1-af15-454f-a10d-ac97a6e135b0", "value": "T1384302219F42507348A0747A5EADD4C1432E1BBCC3F739131B82498869AEFD95E3C9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601748, "uuid": "7d2b26b8-30d6-4697-ad07-94f181a13b5d", "value": "1536:p3jlSDhFn3A0IG0h9DRe0wl8kaVLhh1Dgt0L6:5AdFA0I/zQl8htlDg+L6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769601748, "uuid": "408b9fd2-d002-4045-bf96-2bb7a25ad090", "value": 58868, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601748, "uuid": "ce311f55-53be-4286-ba85-e4840ae60573", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64733ad0-fc41-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769601823, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769601823, "uuid": "482a51c7-b08d-4470-b805-62c8288bbdbd", "comment": "Malware payload (Mirai)", "value": "61239f2c1e247468a293fb49ae919b06", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769601823, "uuid": "184b4a19-7122-45a4-b35f-b21853f82dd4", "comment": "Malware payload (Mirai)", "value": "5ea975fea990334429f92f1d4e27b527ff018d9a7d9b1ec5bfbc9c4edc18a49f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601823, "uuid": "78737db9-2b4d-453c-957b-ffdb509ff31e", "value": "T1C163075AB9919B11C9C156BAFF0E518D33035BBCE3EF73129D246B24678B42B0F3A8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601823, "uuid": "1145963c-29d0-45b4-b6a5-db6056355cd7", "value": "1536:ron/DY7urVs0YIeUowRDuriufk2svMRi+BVFy7ovw7FvYOX:Z7urVDBen7BVFy7ovwxvZX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769601823, "uuid": "b186c3a0-3577-4157-81c6-0f27b9e202b6", "value": 71036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601823, "uuid": "316e566d-bd7e-4ba2-864d-d1824ad67d6f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73eb8fbd-fc41-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769601849, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769601849, "uuid": "79c9085d-80e2-47ed-9a95-6490ad738f86", "comment": "Malware payload (Mirai)", "value": "68b9e63fa4ff4f12d5ba4c3163db6216", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769601849, "uuid": "5d59e716-6899-461b-837c-b6ebebc2858b", "comment": "Malware payload (Mirai)", "value": "faade3ce06eddb0e0c1dbc67f76aa3b55f81c25623b7901c0118ea74fd8a46f3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601849, "uuid": "a8af4829-fc4c-4bff-9af8-c20375a8d74e", "value": "T145338CA6EC776E28E05955F07031CEBD1B13A1A0A2872EBA6C76CB64D043DCCF5483", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601849, "uuid": "e81558a2-4985-43c7-9487-745301e8963d", "value": "768:7dnQgut0jnlgEyaI9lrRKk9ZJX8BZP1Qa1z7p7p7uoPVujQCM0fdBBo7dX:7q7tMnI9h0k3JX8tVlp7jPaQCMku7dX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769601849, "uuid": "98200263-253f-45ad-84c6-921aaf12a685", "value": 54720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601849, "uuid": "cecf8057-8812-4bba-a77a-6ebdbf52d94d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e544583-fc41-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769601893, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769601893, "uuid": "b8f4e316-88fc-4a1d-89ba-c48f4cff3127", "comment": "Malware payload (Mirai)", "value": "3f962b6d612a8ef1f1825462cb6af602", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769601893, "uuid": "2c6a92c3-97aa-4b4d-8d90-354ea354e2d1", "comment": "Malware payload (Mirai)", "value": "8895afdf7c48e61ce84e791f2242add856dca46dcaeaef1c59297465d173ae5a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601893, "uuid": "07c46970-f3fa-4cb0-a73a-e6cb1748cd33", "value": "T1378318A6B410DC7EF45BE6B780530615B130A3F54E42AF27762BFD23DE6E1781822D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601893, "uuid": "b6987e14-9bde-4a8f-b0e5-521fef47be44", "value": "1536:enZuuJdio2O1Yxt3N4VxH7ItJLl/WuVOrYOgVkO8Ro81Q/:enZuQ12WYxluAzenrNgVkxo0Q/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769601893, "uuid": "1fe300de-f93c-49c8-a3bb-1c2afec387dd", "value": 87564, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769601893, "uuid": "c90e3006-35cf-4e1c-bbc6-da03c9bddc21", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ad46830-fc42-11f0-8b2a-82aee05be84a", "comment": "Malware payload (SmartLoader)", "timestamp": 1769602210, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769602210, "uuid": "206826ca-6e3a-4516-9aab-bc039cd09c85", "comment": "Malware payload (SmartLoader)", "value": "5721b6c66392b35fb08eb05c5ec04616", "object_relation": "md5", "Tag": [ { "name": "fake-git", "colour": "#bdb17a", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "LuaLoader", "colour": "#15800b", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769602210, "uuid": "63ceb62e-03ee-4158-91c2-ec8154dc3adb", "comment": "Malware payload (SmartLoader)", "value": "d24d8074d05eb744592b5eb4baf65d28dc96f14c4f5aeed76178b4184831825c", "object_relation": "sha256", "Tag": [ { "name": "fake-git", "colour": "#bdb17a", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "LuaLoader", "colour": "#15800b", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769602210, "uuid": "af5e3982-d217-4ad3-90db-44898f04fce5", "value": "T12B553346C17C28C44F7D0A677BBF995C62298EFC10021863AF569CD7293F38B86745", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769602210, "uuid": "9136bef7-f0f8-4254-ac8b-2757727b600d", "value": "24576:BcjASGYdsxQ3PoZjxbq9j8XJlqrGAuImQIMESQ+hcqMXHC0Clwi6/CttWaRD:ijAedvoZ9bq+MmMEL+hcjXHC/wnwdD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769602210, "uuid": "9e170b4d-a3d2-4c8c-ac5b-acca74a342be", "value": 1395076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769602210, "uuid": "a90fed68-da1d-452b-904f-3cad24269bd5", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b68e0fd-fc42-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769602211, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769602211, "uuid": "52faafbe-3e70-4b33-9859-575d8ca7df30", "comment": "Malware payload", "value": "9f7144dfe2cc0e061d01105ba387f4ba", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769602211, "uuid": "b7b2933b-526e-4967-b2c7-38f1d8494a44", "comment": "Malware payload", "value": "2855d16cfbc1b0d21e14e3d789b7ff572967aafcc5a16de8007b853563d3deb5", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769602211, "uuid": "e336ba43-1d69-458b-b5fa-c1a4838be459", "value": "T15922C052BA88AC4B4F61A4335184CEDDEE39964B63ABF4C5C577300BC82673C0D558", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769602211, "uuid": "374db17d-4a2b-4f79-8eb1-1ea2fedb6931", "value": "192:h6PQAF7xBAchGItk5LwkgRPO8fSBGgT+xjgZWjdxOD2+8Ini82:h6oANhGwyLwT6G0MG8Ini82", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769602211, "uuid": "0072e342-0f18-43c1-a739-009da42c6694", "value": 9984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769602211, "uuid": "87d3af29-efb1-4bbd-95f6-c84a07b732a1", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5bd982c7-fc42-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769602238, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769602238, "uuid": "13a4233b-c249-4e47-a5d4-ff97acbf8882", "comment": "Malware payload (Mirai)", "value": "e2f09ae840b10820accebd7591d6f5a8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769602238, "uuid": "4c61562b-1574-4ef0-93bc-92921c5fe1de", "comment": "Malware payload (Mirai)", "value": "a7664a410794615c68167bb4956aac61a82fffd153248757b92f49de4c0c4cea", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769602238, "uuid": "2cbf8bcf-890e-4fb7-a9ae-02605d0f44c5", "value": "T160A3399ABC85C202CAE061B6FB1F558D371643B8E3E6B107CD19AF29634F85B0B376", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769602238, "uuid": "70290f92-5b66-4529-a248-930f6a51f377", "value": "3072:jTxCcMunH1vNy09t+G3RKq5GYnluwIzX:/EcMqH1o09t+k/u7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769602238, "uuid": "0a6490b9-92dd-4ffd-b5c8-5f74542b6b22", "value": 99720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769602238, "uuid": "f9e30958-c52a-4964-95de-713acc12b517", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7fd9638f-fc42-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769602299, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769602299, "uuid": "d1aec3ee-8f70-4519-a24a-d7e2950ff001", "comment": "Malware payload (Mirai)", "value": "159242d48e9168ae6bf4f8e1863f2ad9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769602299, "uuid": "d94da0ec-3e77-43b3-a300-f42c0c607a47", "comment": "Malware payload (Mirai)", "value": "0bb0a88e37d825b762bbae9a8fb67c0f0a5f63a0cf5586d8d07d915401b57632", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769602299, "uuid": "dcf212cb-dacc-48c0-9443-458cbdcff5c1", "value": "T15F533A93F404DE7DF84EE77B84570A06B271E3A50A421F36A3277957ED7A0E40862E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769602299, "uuid": "a3e8709f-40d7-419f-b990-6c1822a196fa", "value": "1536:h8kwWOJ+0kaV58Q+O0niDeYAVe2iO48MrA:XwWOJrV5/hgdYz2iOWrA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769602299, "uuid": "697a3dd4-a8e0-4fe1-b449-e8b937cf0cd8", "value": 61528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769602299, "uuid": "11d1c1b9-52fa-4de2-b742-57f6145c6dd2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3eb5106d-fc43-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769602619, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769602619, "uuid": "d20d86a3-a8eb-4ae7-b39b-ed8aab9aba1d", "comment": "Malware payload (Mirai)", "value": "51b0b3154a3c298b6b0f450629c14126", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769602619, "uuid": "747f7e63-b8e0-4f4f-97e6-5c768344f7d3", "comment": "Malware payload (Mirai)", "value": "40109fb1fb263a1875be3f5ad4268f33ddfda632c182d2a524e7161bf7d83548", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769602619, "uuid": "4171537a-067a-4d1d-8afe-3e47bf05b73b", "value": "T13893298ABCC5C702C6E0A1B2FB1F558E371643A8E3E6B107CD19AF29675F8670A371", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769602619, "uuid": "4bd3811a-e303-49e2-846b-3e14ac7ae260", "value": "1536:WffF1G0ie3r1NQO24gyi4FPekNqEs2CUq5oe0d/ZDPEvvX:6913HP4451elEseq5o55ivX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769602619, "uuid": "52185e99-eb11-481d-be6b-9e32f8d542fe", "value": 93072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769602619, "uuid": "0c5d9131-a6b6-4023-a9bc-766cf86cd074", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "42e31ed8-fc41-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769602750, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769602750, "uuid": "d080a859-16e1-4255-adc7-99f705df2599", "comment": "Malware payload (Mirai)", "value": "90ae40889a7ef6a9ce437506854a6e55", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769602750, "uuid": "4d4cad0e-c0fa-4924-83e9-f34ae861e1f2", "comment": "Malware payload (Mirai)", "value": "60237c11c2f8e8376ccc4eb305667820eb5349047aa9d34688ba1ddf88385d8b", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769602750, "uuid": "d12c49ea-707b-4c92-9b2c-a17444b05629", "value": "T10593194178819A23C7C11BBBEADF005E3720AB98D3DB73429D146FB43E8698F1D2A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769602750, "uuid": "0ea94d1e-3429-4024-8e46-2d6c91f06c9c", "value": "1536:FNvhbZUxGVU2O0170yoVzyMNKHwNKnJeZWovjHJkKN42rPjnDS3GAuLiH+:FNvhbYNKJwpvj3O2rPjnW3fuLI+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769602750, "uuid": "2e5952ae-86ec-4ed5-ba07-2b34d6b8d0cd", "value": 91081, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769602750, "uuid": "bb708f78-ad09-486c-9e33-7858ac70d94f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e86414c-fc43-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769602780, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769602780, "uuid": "a62146e7-9e66-4484-baff-20173c1c212d", "comment": "Malware payload (Mirai)", "value": "67774681f97582222056d22120357cdd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769602780, "uuid": "b4107622-aecb-484a-b657-06251b5c7118", "comment": "Malware payload (Mirai)", "value": "f6eab22b07f5ad176d203e61e883cfc90d312b7e7619b5123e671db9d4c45cca", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769602780, "uuid": "2076aacc-9b83-45a4-b547-8e3933baf3cf", "value": "T1E5935A42B3690487F2A74EB02C2F6BF1539ED5A131E0F285694FDB0F8175A321586F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769602780, "uuid": "c6cadc1f-3481-49de-a1c3-4597ea96c7e3", "value": "1536:lsE9XdH6OORiFanDekrLYIHiv2c6y3aFmbwsZUtzd85E/vLSqyLTJXPR:lsNOORa83y3/wsZUM5eQX5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769602780, "uuid": "e93839ed-6580-4c96-8e41-7674f2cf5131", "value": 96276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769602780, "uuid": "abf52d38-2faa-493f-b0d0-e6850d2d5b5b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca9a75a2-fc43-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769602854, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769602854, "uuid": "a22a350f-e02b-40a7-80b3-d801cad7571b", "comment": "Malware payload (Mirai)", "value": "f08032ed0921375f79bea7ef36d55299", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769602854, "uuid": "d2e74c8d-7c92-4a08-8517-2ff2a1d85e37", "comment": "Malware payload (Mirai)", "value": "e6c447a89a4f91a32aadc22adbb8f4c21d2efe196165071eab5b9f9c7ec75e23", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769602854, "uuid": "5c13602e-5326-47aa-bda6-bccb7ff9560e", "value": "T18BD35A72E8266E68C661C474B0A4AF752F53A1C082435FBA2AB3C6755493CCDF905F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769602854, "uuid": "6c5a3f43-4e42-46d5-83c1-459d1132cf0a", "value": "3072:9trQFjKOAd8VtOWIRcVE4uD3WvJ1mLkd1:9RQFjSeVlIRcVEFGvvekd1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769602854, "uuid": "3d5d459a-5a81-4168-bdf1-b37f02c41b03", "value": 137924, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769602854, "uuid": "efdf3009-85dd-4e11-ae75-b74631289c2f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c091d1c-fc44-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769602963, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769602963, "uuid": "a676413f-ce21-4ffa-8258-709c45593792", "comment": "Malware payload (Mirai)", "value": "1a10a0612a462b7579dd344596ad69b4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769602963, "uuid": "2b0403b0-c529-4f0a-abdc-c0437c05d861", "comment": "Malware payload (Mirai)", "value": "f7fc44e898243fa0d4eff24db7d2781a69be1e89d9391e4fdeda2022b5bc46af", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769602963, "uuid": "4c062c40-7bcc-4ee8-b04a-2c2ca71205a7", "value": "T1EEB38CABF2475191C8A206F407CBAFDD2E2323C26F57A5E33C6925796C790CB5902F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769602963, "uuid": "4c70d017-adf5-4e83-a4aa-19c4f78e43d1", "value": "1536:f19e7LPZscXAqvkirK36yKzm0Br7H53Pj/7SPagTq/LWg:f1iLP2cQqvjrK3JWVFPj/7SigTqq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769602963, "uuid": "63d1cde9-4d1b-4055-8eaf-4d38965ab3d8", "value": 116092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769602963, "uuid": "0d7e4f35-3f61-407c-a813-f615f3284213", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25c92728-fc44-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769603007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769603007, "uuid": "af5bb75a-0b09-47a1-83d6-cbfe75945714", "comment": "Malware payload", "value": "ed4ce4b6e538a89ae26e223a1599de8d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769603007, "uuid": "5db42537-622e-4545-a4a5-ad988055412b", "comment": "Malware payload", "value": "b34881c255553b647b9f556fa533a231d143def2f365fe866591884889b44d45", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769603007, "uuid": "118edec7-a5dc-4ad7-873e-ced3101bea1a", "value": "T154F31A62A7B4197A23BB43BCE455F78879688523D74D62E1F8FEC19C42C1BD224727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769603007, "uuid": "1554eaa2-e835-4c3c-90e8-e7b98a19df3b", "value": "3072:EdrK2iu5mGuE/kDkank71vQ+/s4oxY+b3wyAtA+3CWPCWTn5bXZEtUioCkdGas0m:aru8GPAMWLas7eH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769603007, "uuid": "f8c730fa-eea8-4e7e-9326-2ac1213e8ebc", "value": 159238, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769603007, "uuid": "ccb550a0-c5fb-4208-8b9f-81d4b3ae2486", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33dcb540-fc44-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769603030, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769603030, "uuid": "65cb4dcf-e485-4f26-8926-3ca89622cf0c", "comment": "Malware payload (Mirai)", "value": "bafab224812aeb2fb6f457605b23279a", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769603030, "uuid": "bc4975e1-9dbe-453f-bd9f-1a714bdaf269", "comment": "Malware payload (Mirai)", "value": "c41cc60efa39004f1d069ed9af1c3560b69646dc2fc2e7eb18e210a0ae0a8af7", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769603030, "uuid": "a97415bf-4d60-4018-94aa-cda1bead8122", "value": "T179D33A86EA408E13C0D61B76FAEF41493322D754E3DB73068D185FB43F86A9E4E636", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769603030, "uuid": "69f5e0c3-cea7-467c-847c-51db47eb3a0c", "value": "3072:5gH6EVnGGtYVRXaCgk9mrsplDKZUmQBKXAVanJX+F8Jyv64hL5AJI4+3jJNx13SK:5gH6EVnGGtYVRXaPk9mrsplDKZUmQBKQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769603030, "uuid": "8113aa35-d5c4-464e-b8bb-91090ee44321", "value": 142651, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769603030, "uuid": "9d179fe4-57cc-484d-a522-0d6725970487", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a36d92e-fc42-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769603032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769603032, "uuid": "fdc44583-1d90-4368-bae7-84fb5a8234e4", "comment": "Malware payload (Mirai)", "value": "6938e85bbe734e897c74dc852baa0e03", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769603032, "uuid": "a0dfda08-4c75-4d41-b2cb-4d4160b87c56", "comment": "Malware payload (Mirai)", "value": "0119206748aad3f6402146d447a13a2be4aaa2952d7175ef4f11d26725c72f0d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769603032, "uuid": "f47d22a5-35ce-4a02-b1d1-6af2af16b783", "value": "T1BD735C0277689F17E5D65AF118FB1BB087AAFD5029E67584E90EEB840331FB2184DF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769603032, "uuid": "1d6dc5bb-5021-40fa-8a0f-003c3918da65", "value": "768:MzzpxA779ZnaLskvgeFAcs1pl1gb8vpH5aEgGsllk5MDKw0COClBHW2tdFsDMUQe:MJ8ZnaOl19Hszk5J1UNbK1DVPy4C1p6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769603032, "uuid": "d4c1a04b-4453-4a4b-b3d3-2f8a08a460ed", "value": 78720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769603032, "uuid": "662ecded-56f3-4e88-bd04-8a35959cd090", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82d887f8-fc44-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769603163, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769603163, "uuid": "61811e61-646d-4865-94f8-01f536119dc0", "comment": "Malware payload (Mirai)", "value": "5e033b1a52f3a6e202b9d83308f07e9d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769603163, "uuid": "7dd29b71-0212-4858-b4ee-0e8222c30953", "comment": "Malware payload (Mirai)", "value": "ecee60d2dff027d87aa5be6aacd5035ff358fa6af923cec5a53bbd26aae268ae", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769603163, "uuid": "bd279dfa-41d4-4853-81fb-0134b430acee", "value": "T1A2933AA6B410DC7EF45BA7F780070B16B121A3E54E426F27B62BBD23DE2E1741862D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769603163, "uuid": "167512c0-c9e3-48bb-aa78-b28f9a0e74bf", "value": "1536:W+seWJFcSXB740u951JbYMwURkQQOblfeUWhRK8ybdy:W+seINx74J9FbYMhS4bIUWhR+bdy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769603163, "uuid": "792b2675-4653-4ce6-99da-72cdcb3c2499", "value": 93588, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769603163, "uuid": "0afd8771-d90c-40b9-8daf-f74dafdd82e3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5b8d559-fc44-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769603248, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769603248, "uuid": "5d933b76-6500-4064-9878-1033ab0bb192", "comment": "Malware payload (Mirai)", "value": "7ccbe289963b68025d53980a41766d20", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769603248, "uuid": "229760d7-d885-47dd-8c33-ec638abcabfb", "comment": "Malware payload (Mirai)", "value": "a6dd3ee67ea2ed50379efd27bfa4e1b23fa69efa062b12eb824650157e89e07d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769603248, "uuid": "6e03a837-d850-430c-b9a8-dae8c967b1fe", "value": "T187A3C84A7FA14FF7E89BDD3709D61711248DA41B25AA7F36B534E828F20B24F15E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769603248, "uuid": "cc23d351-08db-41c6-aae6-3d575e3b4b1f", "value": "1536:oodt3VzfKg4SfJfPuw/uu9PLp98GfjHghP1q5UxmyUNF7:ooz3Vz9fJfPZ9mhDrUNF7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769603248, "uuid": "0a09f5c1-b3c6-47b3-b8b7-69aba68ee987", "value": 102832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769603248, "uuid": "6c530e1a-3515-4817-8f4d-3351b6ca1e7d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d8976f5b-fc44-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769603307, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769603307, "uuid": "1fc7b2ce-c21b-4a27-81c5-8a3d0e6eae49", "comment": "Malware payload (Mirai)", "value": "dafa9d8c2e14a873413892d31c7ea5fb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769603307, "uuid": "846192d8-92f8-4816-8d86-71964e4aff9b", "comment": "Malware payload (Mirai)", "value": "931917f50a7edf09174f1f55566b709d8a4a53afd78906960d9269f0f1b0f4c3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769603307, "uuid": "7ac61695-b8ad-4817-8e31-670b7a4683e0", "value": "T16EB32A8ABC819B11D5D526BAFF0E518D33135FB8E3FA7113CE145B2A538A85B0B3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769603307, "uuid": "90b080de-18f9-462a-bc6b-acdbe08997d9", "value": "3072:wrbXBf3wwebEAdfEwB2GY0/+keiH+Pgt8lgDzV8S+of4QX:7wo/B2GY0/+Lgt8lgDh8S+M4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769603307, "uuid": "d8f35d5a-1b1b-4fd3-a874-4a717b1466af", "value": 117728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769603307, "uuid": "07fbd7a4-64dc-45ae-9317-2f1bd53f6dd6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0c41ebd-fc44-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1769603347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769603347, "uuid": "b720f10b-79f7-429d-8fdc-6b9338f0b1d4", "comment": "Malware payload (Stealc)", "value": "7b6771b140f8241ea207be008e5638e6", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769603347, "uuid": "2566316b-1040-4436-8bb7-2a9534737368", "comment": "Malware payload (Stealc)", "value": "2d86d5764d4e04e931c0cb222a1c79bc2a6213de1d01bd58a89d6cc9a6f55ce0", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769603347, "uuid": "d6f2f5d3-d1ee-41c6-bd51-ce13d8c5c8cc", "value": "T1E044239EE91CC87EC893ECFD23E5941571DAB09033E8F6CD445F82E010EBA676E548", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769603347, "uuid": "076c5541-975c-42cc-bd55-b7d974dbe284", "value": "6ed4f5f04d62b18d96b26d6db7c18840", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769603347, "uuid": "faea2604-26f6-4d6c-a276-73174d5683cd", "value": "6144:74vDjIylF3HxOVZYuq/PRom4yLutWKpNFtRlwMd/spTHxK:74vQylBHxKaX/PRN4vWK3FPld/qHx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769603347, "uuid": "f6f9da5c-8b4b-4f8e-9ffb-4548bc782ea8", "value": 253952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769603347, "uuid": "4399a37a-85cb-47e0-97be-a2b4400b1375", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1078a51f-fc45-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769603400, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769603400, "uuid": "37080ba3-6ebd-45fa-9d2e-ab78c7a6080d", "comment": "Malware payload (Mirai)", "value": "d4d735b4f72e26bf5e76e32a6d3345d8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769603400, "uuid": "382ca553-e3ba-4637-8bd3-5579fcdf8b9c", "comment": "Malware payload (Mirai)", "value": "aa94144b626b4c28c0e144a5fc5786b345226667cbfc274670f0c3dd775f5ae6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769603400, "uuid": "1ec2d072-525b-4041-98c2-f6364efcda5a", "value": "T14E433C55BD918A16CAC56277FF0F419C371743A8E2EE73079D296F21239B86B0E378", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769603400, "uuid": "e7397767-9136-44b8-98c8-b7fb88752e2b", "value": "1536:cHXyLuI8qZ25tdB5xHehqvBaq08bAFhvFXj:QXyLSqZQ3B5xHjl08wBFXj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769603400, "uuid": "cbdcf521-546b-4383-a2ac-244b25a5de55", "value": 59364, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769603400, "uuid": "c2ace0f5-5af3-4497-95bd-6607f5f9783f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "346e7917-fc45-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769603461, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769603461, "uuid": "553e8e17-6584-4811-aaa1-899f1e2804ba", "comment": "Malware payload (Mirai)", "value": "4b4cc30fdd6cd737bf5c7966eb4e2209", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769603461, "uuid": "2bede2e2-de64-4988-af2e-536cadd20144", "comment": "Malware payload (Mirai)", "value": "588344923e23bb4b0e4f7ae929eb29e7cbd01b4a03a50dfa0c23fc416569c8d4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769603461, "uuid": "b28b1956-9692-43a9-accc-45e78818579f", "value": "T163330275654179E2F2105A7BE579FBC662B4B1FC46203E860B714FA2E24DE2B33B81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769603461, "uuid": "9fe4055d-8ffd-491c-a0f6-991716f6734e", "value": "1536:ll3pbGPz3o4gShEJIwri0pjxCeANEYYCc33zzQ:/3RGbo4gShEJI2imxC7ev33z8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769603461, "uuid": "82611897-2d0a-4331-91e6-6fbceb1c104f", "value": 54336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769603461, "uuid": "f2dd687f-7026-4e59-a621-722173b1a683", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d52512f-fc45-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769603502, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769603502, "uuid": "d757a272-e4c3-4a12-9857-0ac626ec6db3", "comment": "Malware payload (Mirai)", "value": "5a70bdadef3b74d5bb247e8b421c7b4d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769603502, "uuid": "707f8b9e-75f6-4cd0-8562-df1c6bc174e7", "comment": "Malware payload (Mirai)", "value": "385be8f5c4239f7c481b72857e369ed7e30c3c8719ac26e11b5f87401d51f2f4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769603502, "uuid": "a1594302-38e4-405d-b324-e285e30828ab", "value": "T1D2735AC0A242E8F5ED490174617AF7377632C97841B8FEE7F76816724429AA07287B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769603502, "uuid": "5c83a9e5-4d45-495b-8a0a-f6f6bdd1b994", "value": "1536:6I2dsYevOUPfCs8C2kdgxULRt24TU09/FLCREpgyUdNKFVaF60HXWcs:5ohs3nCsb7pRHTd9/ZCRO50gbYpZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769603502, "uuid": "10ef497f-93ac-408e-991c-4ef6e00c432e", "value": 79028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769603502, "uuid": "25381ce3-aab1-4579-b737-ebb705456be0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "789cc0dd-fc46-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769604004, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769604004, "uuid": "7f44fb0e-11e8-4b15-99f8-9668506614e8", "comment": "Malware payload (Mirai)", "value": "14c460bebb104c48de91c15ec1bb1520", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769604004, "uuid": "491b5ed4-3aa6-4460-b5e7-cf19f938a60d", "comment": "Malware payload (Mirai)", "value": "c3960241a657fd76a114452ad9a3bebd9d7db943e335f69a12ecc9e2ea76c3e2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769604004, "uuid": "6c3908a8-7b6d-4211-b1a2-12de109e6f60", "value": "T19E735BC0A243E8F2ED4802B4617AF337A532CA7801B9FEF7F358567654259A462877", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769604004, "uuid": "f0f5fb83-c5bf-4328-a48a-aea00b9af039", "value": "1536:V5BEBL2lY7EbE8LCKe8AV3jM2DHVmksR76BiA+eE1Ngm74KENVoFOEdBVf:Vv4qaobEyqLjLH8ksR+BiA5C0zT2pN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769604004, "uuid": "28a703ff-e24e-4ec3-9b0f-ff2000b4abdd", "value": 79028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769604004, "uuid": "c0ea1d19-83a8-45af-8b8f-4752168837e5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c226321-fc47-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769604440, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769604440, "uuid": "e9e82197-9008-4d67-b406-97ee605e32da", "comment": "Malware payload (Mirai)", "value": "1b041369f4014005f22fc5fe394f44b6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769604440, "uuid": "b5637f2e-49d9-496a-b126-ccafa2bc0ecd", "comment": "Malware payload (Mirai)", "value": "81cfe7a09c71db0776f0baba68bc38e9ad9bc079e3805f15a57ee4a8faaea77a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769604440, "uuid": "1bce705f-8c11-4173-b531-d1f9623e0d91", "value": "T18CA2D05547131492D174E8B6F89CD21273A185F8C2FC767002A4FB28ABCE3DAE6F4B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769604440, "uuid": "7d44bbdb-8fe4-476c-89fa-5a246b998763", "value": "384:VeY2zmbaEsSqxO5+BBOJmKdI1ORGSYPgCcTaFgJCOEXfbnhymdGUop5hoBg:UQXsVxq+AJj2PSYP7yEjs3UozeBg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769604440, "uuid": "8339ea69-b8e0-4248-a792-d63ea735b019", "value": 22664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769604440, "uuid": "ff2b06c3-efb5-4915-bf64-c39dc74406c3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e774982f-fc47-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769604620, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769604620, "uuid": "9510634f-14b3-4452-bd6b-3aa1882a3e98", "comment": "Malware payload (Mirai)", "value": "bc9e8f1474376d629eb8b26828e11a44", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769604620, "uuid": "d983db08-0080-4697-b1a8-a9e1b9aead43", "comment": "Malware payload (Mirai)", "value": "45e8f91daa2633c959445a8c2f54d0b11ab738917ec782720c7369cb1241e54c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769604620, "uuid": "816ebd7f-5961-4a92-a841-9d079ac3c4c0", "value": "T1EAF33ACBF801DDBDF80BE37648170909B530B7E251924B372257B96BAC7A1D90927F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769604620, "uuid": "149ef2d9-00af-4c67-984f-e8647d8925df", "value": "3072:EPtZemo+FvEFIrX+7zov+yyjEkKVYjbiQLqUsAxme3KMEYAyx5/nc:semo+F817zo2lEkLLqhanuyxNnc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769604620, "uuid": "efb28b56-d167-46a7-b2e3-47ea7884bf01", "value": 167616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769604620, "uuid": "4ab24ae6-8e76-4bc9-8ccc-55ed8417dd8e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2bd13b2d-fc48-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769604735, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769604735, "uuid": "47200ce8-7aee-490f-b464-86e2bdbce984", "comment": "Malware payload (Mirai)", "value": "80d1b69cfddb0c8a7d8aa93bf6b8be8c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769604735, "uuid": "51f80b85-e863-4a4d-b0cc-a2aca776bea9", "comment": "Malware payload (Mirai)", "value": "b222b32c771a0099e0253a1e934b4ab79d64ce9f4348c224ea5d57f81e6ee4ed", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769604735, "uuid": "234ca1b9-1105-4f2e-a139-404dc53103b8", "value": "T151431B55B986CA16CAC46677FF0F529C3B1643A8E2EE73039D296F20279B46B0F374", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769604735, "uuid": "07281207-eda7-4cd0-bb95-be868eed03aa", "value": "1536:WN2eMNZAAC2/bJm547euZvBaq2UAT5qX:k2e2AACetm547bl2pFqX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769604735, "uuid": "802f54e0-a176-42aa-9250-1b181163e8af", "value": 56288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769604735, "uuid": "8d1e3405-434c-44f1-8d1b-561b3f18a4e7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "534eb68b-fc48-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769604801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769604801, "uuid": "3af99eae-3c7b-4f7e-88d9-67702bd7ee2b", "comment": "Malware payload", "value": "22d8f0d317b8f960b34dc30e3a7254cb", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769604801, "uuid": "69e52673-53ef-47ab-988f-b2ed3f7df5a2", "comment": "Malware payload", "value": "aa0fba416dfad985087efdc928be123f482417a39dc76c2491b9c254ce2483c3", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769604801, "uuid": "8c289b9f-25a0-4fed-864f-21388e9bc635", "value": "T11D8309327488582A210B428FD267336C70AFDCE2D611E5B6F6F622344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769604801, "uuid": "2f470b14-d71d-4f00-847d-48d5809249bc", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbn5WaDVN/:XEKltp9txAX/yr2pb5WCVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769604801, "uuid": "6fde9f87-46e5-48c3-b2ce-a3419d64845e", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769604801, "uuid": "b06b9150-8cb3-4191-8f23-d478bd8dea88", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9bf84e16-fc48-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769604923, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769604923, "uuid": "d9d78725-4610-42da-89d7-6204b5931a9e", "comment": "Malware payload (Mirai)", "value": "1e21efd00a265674f111292d47969bbc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769604923, "uuid": "6270c3f8-5e81-49d6-8d37-171b78f58776", "comment": "Malware payload (Mirai)", "value": "fa467e4779f753364fa0cd7d033074789b1b8887cd0c2706fd30ed1928acc9d9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769604923, "uuid": "c397af64-4030-4cdc-a737-7b29f6951772", "value": "T11093298ABCC5C202C5E0A1B6BB1F959D371643B8E3E6B107CD1DAF29634F8970A376", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769604923, "uuid": "02457a77-f80e-4c8a-812a-904dab3a8687", "value": "1536:hYC0mJWDwY31YsiAhiH4eGc51KCO1p1//x2kWSY5Ser2vBaqSJAw6X:h50mwDNjixYPcOCup13xRRY5SllSJR6X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769604923, "uuid": "d9e61a97-e028-41b8-96cc-5458a8117710", "value": 96560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769604923, "uuid": "804ead7f-cf76-4d9a-a9d2-82fcf359200c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae09c653-fc48-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769604953, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769604953, "uuid": "ba03c41a-2d21-4fa3-9857-4eccc58ee1d9", "comment": "Malware payload", "value": "19de4fa068dba5baf7ae3944a3dadbe4", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769604953, "uuid": "ddc34290-6582-4cc9-ac65-5d314e1a6b8e", "comment": "Malware payload", "value": "ea0f7d265e303cbf4d95d9fc9b8fb75089b3010998fd145744a8de086c5f7b23", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769604953, "uuid": "f8724e53-be72-4d18-a648-4a1c89a53cc3", "value": "T16AE3E86F83F7313572138359F5A6673896ADC133EB410EE2F9B29A9C8FC11A201761", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769604953, "uuid": "15c87c9d-9752-46e9-8a5c-d8c6e2623aa7", "value": "768:EZdapEbrTXlGRNjcXscJGcz74k/tHcTwAbmppMsfifRfiVIrePfHKIY1oFSnUh+Q:EapArrl4k2wUmpioIrDA4YNhJgc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769604953, "uuid": "10c26dda-17ed-4ff7-8ad3-cef967311aac", "value": 150948, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769604953, "uuid": "27f437c6-6a52-4917-97c6-8c12298efefc", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ea6a281-fc49-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769605196, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769605196, "uuid": "056780db-21ea-4d62-aba4-56814a3a4dd8", "comment": "Malware payload (Mirai)", "value": "00c68e9907f6e4f5d95bd8102de2cb8c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769605196, "uuid": "6643be50-ce3a-4d77-aec3-095746d16d0b", "comment": "Malware payload (Mirai)", "value": "2ef60a12f05e64ec3828a788f9d27075e31a74781d404a4d653725964045061e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769605196, "uuid": "e8687942-29c6-4a12-aa88-4e641d9d856a", "value": "T13D03E07386FE85CFE95E21391C3DBED51654E02CF46EC8F6FAC864622C67B46381A4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769605196, "uuid": "000b98d1-a69d-4e82-b3ad-d393607299ae", "value": "768:GTlR2+fQEnEj5iLaAhLJnJrbPnfx9cp8gaT2MEQ7C97ZadhAnbcuyD7UoQRjC:sI+DnEj5yzR3T2M498hAnouy8oyu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769605196, "uuid": "972e6e9a-599d-4a03-a782-a0976038e4b6", "value": 40016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769605196, "uuid": "47418951-6487-45a8-8014-b48fd2ff4629", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6e720e8-0f08-11ef-ab08-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1769606308, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769606308, "uuid": "7d21bb52-04d2-453f-a97a-4c93f2adf608", "comment": "Malware payload (CoinMiner)", "value": "a20727b81b50a20483ba59ae65443dfe", "object_relation": "md5", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "i-frame", "colour": "#eaf934", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769606308, "uuid": "3d6da80a-727a-410c-a440-e0ca56a45885", "comment": "Malware payload (CoinMiner)", "value": "af94ddf7c35b9d9f016a5a4b232b43e071d59c6beb1560ba76df20df7b49ca4c", "object_relation": "sha256", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "i-frame", "colour": "#eaf934", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769606308, "uuid": "397126d8-15ab-4dbf-8499-9899d5ff1217", "value": "T167563362F440E436E038203925F684A6B17DFD7347254A8B73A93A364D793D836BDB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769606308, "uuid": "7f122b75-21be-4fb3-9a2a-54ab7590b08e", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769606308, "uuid": "20f12edd-27ef-40b6-904c-f2fc94a89e4f", "value": "98304:RLGSThOfTCiFBXmfFs+JMHpCVoR8oMEOJ6Ty3RvX+Y2naq8le+:YBfTCiUswVSLOJgyBG/aW+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769606308, "uuid": "354d9f75-b366-41b8-b360-f8631b0c4a62", "value": 6271259, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769606308, "uuid": "5e5397b0-7d3f-4820-9361-c43ff04a20fb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f2c48db-fc4e-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769607290, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769607290, "uuid": "40db6a68-72bb-4220-b3ed-82116ef5fe58", "comment": "Malware payload (Mirai)", "value": "210e9038847f4e8b69da17d0c8b49a68", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769607290, "uuid": "9e4d1e1b-b153-4a4f-8313-2ab8cfcb32b6", "comment": "Malware payload (Mirai)", "value": "62abeb60de3578336cf18208e9bf877d99d3c807d32923c2001ba0df42b9863b", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769607290, "uuid": "127165bb-34c0-429c-b8c0-37585e7e1513", "value": "T1C583824A7F614FF7E89FDC3705A92B1224CD651B25A97F35BA30D818F20A24F19E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769607290, "uuid": "7715e797-d8d4-462a-bcff-ab93ea3d0b85", "value": "1536:rodt3VzfKg4SfJfPuw/uu9PLp98GfjHghP1q5Uxm:roz3Vz9fJfPZ9mhD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769607290, "uuid": "60ae446c-fdc2-4d09-b54d-9d428893f05f", "value": 88736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769607290, "uuid": "029c7f9c-1e21-48db-998c-f90d6461cb1a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1769607615, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769607615, "uuid": "cf310a2a-1375-4ee7-9288-c4d49dde5bea", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769607615, "uuid": "5f399509-cc10-46f1-a3dc-943659b9fe72", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769607615, "uuid": "eb132932-b0c8-4dfb-a8fd-fd8e1d45cd12", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769607615, "uuid": "65d3268b-5670-440f-b3f1-9966f33e486e", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769607615, "uuid": "abab68ae-71e7-41c2-821a-318e7e5c6208", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd23d06c-fc50-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769608522, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769608522, "uuid": "363ce395-07b2-42e5-a2b3-d58a71055707", "comment": "Malware payload (Mirai)", "value": "5bf8aab5268b537088c4b15c1dac15d4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769608522, "uuid": "38fb465f-cca1-46c4-8240-34d99783642f", "comment": "Malware payload (Mirai)", "value": "bd4f65755f5071794e396d6890380524f9f1d361af2bfcc31b6977b1f8f515fa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769608522, "uuid": "1b98a600-16aa-42e0-9bf6-89be8bf7500b", "value": "T18FC2E078D3867671DC70C3B5B1B0CB432B839B65D2B2F0072A5061649B8ECD3A4FE6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769608522, "uuid": "9cb4f11e-20ec-4b80-b4ec-c05a1a46616a", "value": "768:UvHCJX0VGCSgdIB2JhXtw9YxQ+/3hyR8gemm6kas3Uoz0:UviJX0QCndIObhQ+ge1XXz0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769608522, "uuid": "41da6c0b-a550-4f78-a5de-791d7216529f", "value": 27528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769608522, "uuid": "d7248259-ca69-4aa3-878e-e5b24ba63e48", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd297900-fc50-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769608522, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769608522, "uuid": "de62f545-55d5-4ceb-aae1-09e63c7a6e3a", "comment": "Malware payload (Mirai)", "value": "a27dd39f540a65b3fa850af229683422", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769608522, "uuid": "4001b3cf-ea6c-4dd7-9fd2-f5ae3ea7d971", "comment": "Malware payload (Mirai)", "value": "ed812f1ea95712e8d9047e40e11b16deef7d52b78fe9a0c518d2c1cc345a29e6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769608522, "uuid": "1209982d-617a-47e2-afce-35a4d04a511c", "value": "T1DCC2E1545272CE25F6179332774E0A6F42C2A8670FEC225C9A1FEDA1A2431F05D7EE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769608522, "uuid": "eb7d93d6-8212-436f-8a93-0fda3f452086", "value": "768:LTZiQKRC+UoF/UR9CtdHZNRvHxkuRH5DAmVJc:PQdPN75N/kuxVAmg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769608522, "uuid": "94ebbb03-6f87-43c5-81ab-3367084f112f", "value": 28028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769608522, "uuid": "b171ae8b-3bc6-45c9-9052-1c4e046feda2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd2c05cb-fc50-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769608522, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769608522, "uuid": "a9cd3969-c9eb-4c6c-8325-cee2a2c5c0b2", "comment": "Malware payload (Mirai)", "value": "8c4bca8971d7225de80c67bfa3f1f135", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769608522, "uuid": "c13574d9-f629-49aa-96d6-69b6ede93924", "comment": "Malware payload (Mirai)", "value": "9bc64e57530bee4ea3b2ef51f6ed149286ac968f49c62887a137d1504d3e9694", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769608522, "uuid": "7db7428b-7941-4118-9547-33df722f09a8", "value": "T1B833F19ACA2C84F0CF706437C9DE49067E2A8F30C9BF5927A221DA194CC6D5B66F49", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769608522, "uuid": "668fbcd5-b69b-4a62-9378-e7e921557cd1", "value": "768:GwpGm3irydjviLkTXThGTgppk6MTglZnpZ92X5nNdB79q3UEL5HxkbLUGwm6QCix:Xi+ykTdLMmZnpZ9an3BaL9xkUpiJp/eq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769608522, "uuid": "ded90c92-430a-4d12-b25e-3be55e4c8e00", "value": 51640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769608522, "uuid": "b06ae2bd-d081-46cc-a379-be11f499c170", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd33c8e6-fc50-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769608522, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769608522, "uuid": "8a0ef058-0683-4d3c-b040-50f210c07e36", "comment": "Malware payload (Mirai)", "value": "6a8d7d3656647e1a105ed43a02fdb4a1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769608522, "uuid": "8ac22d8e-80e7-48bc-a765-e902037ba832", "comment": "Malware payload (Mirai)", "value": "936d6c1a6cff713caaceeb9154f5d8c8d4a0608c60f3d2272f429c3e751e8f18", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769608522, "uuid": "25c492e8-6ee6-4ddb-b936-382cb15c47a4", "value": "T1E9D2D0F97A0300FAE158C4F48BD007926E504BA6514AFC6B6697F65F4D9D5F03887A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769608522, "uuid": "084e4f2c-2028-42f8-bc9f-99b5db3278e1", "value": "768:fjcua9vOxCgj6M18i0OBhPuN2+14EnyQGkomJgGlzDpbuR1Je:f1a9vOBj6YPusg417kLVJuQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769608522, "uuid": "fc5909a7-5d55-4ff1-9316-087c6e766ebb", "value": 29076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769608522, "uuid": "9f570ae3-9d57-48df-9d30-42df303db102", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd385be6-fc50-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769608522, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769608522, "uuid": "8d6327bf-a090-4e7f-ac92-7601060b9d38", "comment": "Malware payload (Mirai)", "value": "f875595093e51498f1c20273f30fced8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769608522, "uuid": "17e467ed-d952-4b51-97f3-295ca748d869", "comment": "Malware payload (Mirai)", "value": "bc99a099a6938268f9ad972d4b4c29bc826f00687aee1630ddae87dfba6f4820", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769608522, "uuid": "80feeac4-4ee2-45ce-a283-3bcb85ce4d60", "value": "T1F5533A99B8029E3CF8CBD5BD84974E09B92133D151831F276AABFDE37D321649D02D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769608522, "uuid": "edceddfb-3084-4c6e-ad99-2738e0625b6c", "value": "768:cFITkNDUIbw4MfJs4NvqJWmfqQnZcgFH1K+Pum8g8vsz+78ilfXKSWNob2q/SY:Zg9fMfJsB8mfHNF1K+mm8g2D8ilf6SWa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769608522, "uuid": "d6d0a44a-f369-4e0d-b210-7efa2dd9eda3", "value": 66232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769608522, "uuid": "84f6b02c-4c5e-4108-9107-4b5e46a54cb2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd4223bb-fc50-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769608522, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769608522, "uuid": "55f302fc-0579-43e2-aebb-2ccd29590338", "comment": "Malware payload (Mirai)", "value": "ef7498546781e8abd3e9f82e6b7d3104", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769608522, "uuid": "afb05b26-e63f-4b29-b4f1-4fd38a84a97c", "comment": "Malware payload (Mirai)", "value": "c1e5034618b2140ab4b3dba6107593f0f1ed44c61242b6a2e11d468335dfb9bb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769608522, "uuid": "70b9b27b-4add-4687-876a-7a70215932c4", "value": "T16A538D39E06EEEA4C54646B478548F749F13B18483672EF7D79082A5A843EACF408F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769608522, "uuid": "af2f6fa8-38b5-46de-9f8d-01b79e81f6a7", "value": "1536:BtmEjH4FlswtZt9/jOIJfs3nfCJH/q7TEgK2Cj:BISH47s4iuf+nKJaTEgK2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769608522, "uuid": "6d4b5387-d64e-49e8-924e-a876044b9ff4", "value": 64344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769608522, "uuid": "74d8c9de-4d09-4df2-a0cb-51b8c38b305e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd449596-fc50-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769608522, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769608522, "uuid": "3ab2a9c1-7b67-434a-9209-4a5b8bb2838a", "comment": "Malware payload (Mirai)", "value": "05345d39e49b26afb8c230a38b651507", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769608522, "uuid": "aa7a74d5-a9c6-4410-9d04-c1276ceab517", "comment": "Malware payload (Mirai)", "value": "770794251f42253b66fa1689a61419bab97805a0f785afd9e43c8acdeb211bcb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769608522, "uuid": "5a031dc0-43e5-4010-9561-8d8ab3883db8", "value": "T18BB2B079D006BD25CAB024378F34C18776B6537995E872F168441A7AFFC920259BA3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769608522, "uuid": "078eaa33-ff2e-4307-8681-a69722251ef3", "value": "384:tRO77+AXfQi24rzBgLtdn6Pta99yCb/p5VPV5I/M2JYCNF6VhymdGUop5hpj:gVXoi24hQtdn6PtalVUlYMgs3UozDj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769608522, "uuid": "0806fe26-8065-425a-9aa2-47534d66b4ac", "value": 23876, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769608522, "uuid": "dadce692-4647-49a7-8f35-5a14370f77b3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd4de59b-fc50-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769608522, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769608522, "uuid": "6d44e7d6-f5b7-430f-8e0b-1bf0ac3e6056", "comment": "Malware payload (Mirai)", "value": "c4982e1f72239e0c76499045e928dbbb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769608522, "uuid": "bb44b4c8-e83e-4377-8723-d1099c92aeaf", "comment": "Malware payload (Mirai)", "value": "6b458fbc1a63cb770788942f342fba2ac9ce82dd48dddf5f43394f53253d1bde", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769608522, "uuid": "46e01a03-9ef1-43c7-87d5-9a28a953fac9", "value": "T1CCD2D00C8A78BDFFC76D483EE58A17585999B68533860F1C82914DC8FA578CAB4C60", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769608522, "uuid": "1ca79dcb-d806-426b-aac9-3e8684c1f79c", "value": "384:UlLqz0DKm2RCr+olUS4HJJAXdTeTjFLOgyxJ+ByN6kYOH8ZHrBnK5yp9F7Ecbufk:uLqoz64C2XdTeMEeVrH8ZHrt1htuYHWy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769608522, "uuid": "8a6b47a1-1bba-4533-a1a3-c8d8535c427c", "value": 30140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769608522, "uuid": "2a238c2d-27ba-444a-8e3d-b0997aaaf0ac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd5de313-fc50-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769608522, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769608522, "uuid": "579ceec3-5701-4700-8fcc-4d55e0b886f4", "comment": "Malware payload (Mirai)", "value": "d5a893e4cc0cd53049adb61c1d512244", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769608522, "uuid": "69341aa7-07fc-40e1-b7b1-2f11b0623b17", "comment": "Malware payload (Mirai)", "value": "5e6a632db94d564bafeb5faa0c59dbc2bf3a64fd3e2e5182278a86735bbaed06", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769608522, "uuid": "1976658c-172e-4ead-8c6b-5cad893c5fac", "value": "T1AA732B25B9391E26C0D0B57E60FB8A15F6E227CE26B4C50A7DB20E5EFF146006512F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769608522, "uuid": "bb685a49-d891-45fe-8d3b-ab901ffca517", "value": "1536:pl6M6lb7d83FhnSM9ouDC30ZKSle6vnBuJagrcm:3o9MmUCirvnBvgQm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769608522, "uuid": "78e42ae2-3666-4162-89c7-9b4b04ede24b", "value": 74752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769608522, "uuid": "87dac29e-cb13-4b6b-b0ce-5c23a34f6aa9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd6d0c65-fc50-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769608522, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769608522, "uuid": "7b72deb5-2308-4d54-9c90-793779450c49", "comment": "Malware payload (Mirai)", "value": "fd47aef56a8bd77fe18a5290250d7331", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769608522, "uuid": "85254aeb-c944-489c-9791-8dde31e4efe9", "comment": "Malware payload (Mirai)", "value": "2471023cf6b6dfcb2af3c9ee921d5416c8d460cb4875be863237d2ff9fb10dfd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769608522, "uuid": "3e1cb623-50fc-4948-8b6a-2de5b643ff70", "value": "T174C2D030E4819E54EEFAA87057EAE9D52FA11BC3AF33021461539B663112A4EB380E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769608522, "uuid": "217d447c-b77e-430c-b011-168c0f6a5a05", "value": "768:Yp9xHwWfP3NpXgLEAcPtnnDOEUEqpdmgmR2+4uVcqgw096:Yp9uWH9RnPhiE/qpAxL4u+qgw096", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769608522, "uuid": "6f61ea8e-68b8-4bff-8f0a-ae8311da8c47", "value": 26400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769608522, "uuid": "4b8b0c69-a93e-496a-aaa7-9a614b3962c5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd8c216e-fc50-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769608522, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769608522, "uuid": "fb32c0e2-9ac5-41dd-83e4-a72817d96147", "comment": "Malware payload (Mirai)", "value": "ab3a5261f6a925b7973de2199784daa9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769608522, "uuid": "fee1b883-aad1-4a71-b455-a0a4131a8243", "comment": "Malware payload (Mirai)", "value": "da613a27cbdb9b59c3e33ab0bdd0f373784b40f15d731fc357cf4dcfa3437bac", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769608522, "uuid": "f575cd51-1cff-425c-b67a-eb0723323e82", "value": "T124E2F1090031A978DBBC2235D861538EE35F0FFDA4EB3E97AA90426D55D311799387", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769608522, "uuid": "bdec9442-df3a-4740-bb06-5b2d0fbca613", "value": "768:zUSVB3kuzVrwloNTJ8vSL2zoolbts4RddehnWSfGcj7cua9q3UELEW:r3kuzJIqivSL25lbts4bdCndfGc7cuPL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769608522, "uuid": "227bba00-0c8c-43e6-bc2b-ea808a5984ce", "value": 32052, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769608522, "uuid": "ca62643e-2d0a-42dc-98d2-f11f26026442", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea6cbbb0-fc58-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769611926, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769611926, "uuid": "5c1e4ffb-dcc6-4bc6-abc3-1132fd5e8e87", "comment": "Malware payload", "value": "7a7f9db9c28f7b78acfbfa32183a7e8f", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "f397a7", "colour": "#c8cc2d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769611926, "uuid": "6b009dea-7474-43fe-a4e8-9c2ff2c4b4e8", "comment": "Malware payload", "value": "d64ebcc4b8bc44d60849ca3fa89fbfe4ed0963eb199f7267875cc3c991c144a3", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "f397a7", "colour": "#c8cc2d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769611926, "uuid": "b4e6dd70-634c-45b4-b252-e51bc2bad70d", "value": "T1BB745479F90688C5BCCD0CC865696AF1D33B271743A54A92207A331ECB1BC65CD1A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769611926, "uuid": "12f60082-1c58-4821-87df-3f42cc63acec", "value": "6144:RcyWHd6HyA3hS+vohx/Fbg67of2kimmcsBNH+TprFZN/xvwhVSHhPhnRhha8PWrd:RcyWHd6HyA3wyofE2kimm7BNHWP/xvwJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769611926, "uuid": "9daae28a-6770-489b-88b5-0fcb152a04ae", "value": 349525, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769611926, "uuid": "db4de908-bf0a-42de-b16a-f74fba425dbc", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e24d922-fc5a-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1769612657, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769612657, "uuid": "709b8dcb-6f92-4704-ae8d-0c84217cd951", "comment": "Malware payload (Gafgyt)", "value": "8526b44220e0c103f843854638746dcc", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769612657, "uuid": "e0caa17f-496f-4bd9-8451-6e10ec5d1ef7", "comment": "Malware payload (Gafgyt)", "value": "e21b7bea60a9530514cc047e69acc0a4f8fcd4aa0b0b740b44420536df8db05d", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769612657, "uuid": "7381c694-abea-4562-81a9-4593cd7f56a3", "value": "T14A93B71E6E218FBDF259C33547B74E31979833D626E1C685E2ACD2101E6034E685FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769612657, "uuid": "d7163dc1-deda-4c1c-9298-35b6dc40efaa", "value": "1536:3K/dK+HBEIhhft3/BOuBOMMOrC60Y00/UrFE4negijkWJCteu:a/dbJl3D5T/CE4zeml", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769612657, "uuid": "7d892e4c-0296-49a4-accd-b144bd50fda8", "value": 97332, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769612657, "uuid": "3de166bb-2326-4db9-b25c-08efe5d7f97a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "771c6dd3-fc5f-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769614739, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769614739, "uuid": "d55477c4-6c89-4013-b343-a402bd2886d5", "comment": "Malware payload (Mirai)", "value": "6f8ff2cd8d511e02f24afe8b2770b59f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769614739, "uuid": "c9efbaa2-0c8c-4170-88fd-f9d54bb1742d", "comment": "Malware payload (Mirai)", "value": "a4186f78e926adc385476b4b19b2f989dbbddea6d64a706a05d8d23b89f21438", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769614739, "uuid": "2ddf16fd-d371-4f80-8776-13f9ec0f0ebe", "value": "T14F535C02B7684E0BF9E619F5243F1BD483AEED9021E4B585A90FC7464235F33499DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769614739, "uuid": "5ed6fa59-116a-4216-990e-7eec531c0510", "value": "768:zzzpxA779ZnaLskvgeFAcs1pl1gb8vpH5aEgGsllk5MDKw0COClBHW2tdFsDMUQg:zJ8ZnaOl19Hszk5J1UNbK1DVPyg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769614739, "uuid": "c71a20fa-b5ed-40c4-8a99-61d179407f66", "value": 64188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769614739, "uuid": "2c534a98-ecac-4669-9202-904e339e0be6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "888f5e84-fc63-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769616487, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616487, "uuid": "c8012045-8988-42e4-8f90-33db714a746a", "comment": "Malware payload (Mirai)", "value": "326143591da4f1041b8bf2cb5bf2e033", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616487, "uuid": "b640be14-f0ba-400a-b689-7e9498799f95", "comment": "Malware payload (Mirai)", "value": "d1b06bfd9224a7199220c06f7fa672fd864044e5327b50610e9dca5c4827f2d1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616487, "uuid": "71583466-bb7b-4de0-85be-7b5a9708283c", "value": "T18EA339A3CC766F58C628D5B4B0B18F796B93AA6081475FBE1567C27480C3D8DF6063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616487, "uuid": "246b05f0-99b8-4c26-b7b6-1b5cbe006438", "value": "1536:TxufPeqU2CxKysVN7lwLPS9PaN7WuJxLLRhqL9u:UbU2dy4IPSh27WufLLLcu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769616487, "uuid": "f5a020a7-e651-4d78-b017-15f2e7dcfb73", "value": 105056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616487, "uuid": "c959d2ac-174b-4a01-a9e4-adfda856aaaa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8929a6a4-fc63-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769616488, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616488, "uuid": "f837136f-1ce3-4a79-b6d4-b58ba8924f3c", "comment": "Malware payload (Mirai)", "value": "24c67f576ec6b3a654229b2de8c49830", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616488, "uuid": "b478a7f9-845b-420e-9816-d8ba0bc7854e", "comment": "Malware payload (Mirai)", "value": "260213564425a08e0540cea16ba87b2dffaac79e41ab08e43316f768d281197b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616488, "uuid": "396ae42d-0e83-4425-bf80-24df1d25bb78", "value": "T179333C4DF783E0F0DD4B0531115BF77E96349E025124DE7EEB98BE66AE32A02711B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616488, "uuid": "318f2096-7ac5-4cf4-930f-00dc097cc652", "value": "768:9wHds+1eCZWUJ2SkpRflrFWwaTlFNB5azjYvzNeVMU2331ANA0B7RhuqDV98UN+s:9wDt3kpezwLMU431ANA0BLBCYr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769616488, "uuid": "0fb1b4cb-28c1-4c4d-a209-fc9c123ade28", "value": 50476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616488, "uuid": "a03e8256-ecb0-42e1-a34b-5769a6a3ec94", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "893243ea-fc63-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769616488, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616488, "uuid": "9e150f07-1272-4ae3-92f7-87b80a0e3f99", "comment": "Malware payload (Mirai)", "value": "52ef7b71d04551c5b28797c4de1ec872", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616488, "uuid": "afe90a61-fc76-4bbb-9cd4-dd0c50e2b328", "comment": "Malware payload (Mirai)", "value": "71bcdfb8936240d0ebe3782fcbd2c65ddaf7000a09e5030ac8b9a34a6fb738d4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616488, "uuid": "ffa99bb5-7f6f-4a03-871b-bdcee76debd5", "value": "T18BD3F8C7F900D9FAFC0AE7374853080AB230BBA545925A372257357FED7A1990477E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616488, "uuid": "79bbed7b-c83c-47d2-acae-75419ac8fa72", "value": "3072:EUbul4MGHJTO3ydxuttK/cQpizdDom3V8wcV1jbiiLP//YD1:s3ydYtw/cSiiWVtkLPu1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769616488, "uuid": "71f392da-7a77-45d6-935c-ed01998cdf69", "value": 140064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616488, "uuid": "1cde5a66-034c-4de2-bc9e-bfef81d8716c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89425331-fc63-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769616488, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616488, "uuid": "216f8cb7-d567-43e7-bdfd-1cc60eb40042", "comment": "Malware payload", "value": "4522fb834a96094d6de1556c9fe7df1a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616488, "uuid": "c0956551-0e68-4f25-83c5-270a7308957a", "comment": "Malware payload", "value": "84e4680daac509b4ec84c2f0c7c3fef7f063c51f8d13f9a782f647a61425492f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616488, "uuid": "b0c423ee-c8a4-4ecc-aa23-7ea433f233c5", "value": "T140E3B71A9F910EFBDC6FDD3302A9060635CC954722A43B763674D528F64AA4F4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616488, "uuid": "11bf0e63-7ce0-42a9-a93a-d511be7aa01a", "value": "3072:KJ7Vw1Cc/0s6YAPwenUr48pzfR+Joncy:KJxw1xAop0YfRc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769616488, "uuid": "0b4023b3-d0b6-4c9f-8b98-0048191c6164", "value": 156680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616488, "uuid": "7ccfbbf7-5e05-43b8-afab-4dda3950a196", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c6d934c-fc63-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769616493, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616493, "uuid": "98cb6284-a3d1-482b-9783-ba0730a413f9", "comment": "Malware payload (Mirai)", "value": "a644fe2bd9a1550790f3604d51679686", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616493, "uuid": "18005c17-2afd-4607-b51e-cc12699a2eb7", "comment": "Malware payload (Mirai)", "value": "db2329e547bc4ccde5ed3af2bb71f2b782d3ca268cf780e4db9bf1e67afe02ce", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616493, "uuid": "8ee96664-43aa-4f85-bbcb-b5ad63e7691d", "value": "T1E1B30945FC505B17C6C652BBFB4E428D7B2A1768D3FE720399256F30378B96A0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616493, "uuid": "40d8bdab-18bb-480a-a998-4cb6cc0d7b8a", "value": "1536:dUK9yqnU8vGRz4VA4j6Tpmq8by6OxVZZpq4cBlKxwywXvqcVqafFPCwMBFvN:mixnUHz4Z+NmVAnv8EN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769616493, "uuid": "04db4ba9-e05e-468c-ac00-a115b9e67660", "value": 117280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616493, "uuid": "dfc10318-eecc-4dae-b993-bccea202ec04", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c7074f5-fc63-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769616493, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616493, "uuid": "6d6d11c8-d906-4695-941b-5dc36f367655", "comment": "Malware payload (Mirai)", "value": "3cf3a5a6c034c86cc2961e2469fa7e88", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616493, "uuid": "fa156852-d6eb-495b-a3fb-e28bf01699ec", "comment": "Malware payload (Mirai)", "value": "045a662717c16c28648ae8f04b247ce1bdfe2c326fb4e909308129541b673e5e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616493, "uuid": "64afb26a-020b-4726-9a29-849fe26df9a0", "value": "T1E9C30956F8819B11D5C151BAFF0E124E77131B3CE2DE7312AD24AB34778A8BB0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616493, "uuid": "b7f11893-b4c1-4390-b73a-5481d812789e", "value": "3072:fsDTYhjFMX++aR8fcDeRqQVDtNQYciYfG11:fsDT6aX9aKfcRQVjoiYO11", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769616493, "uuid": "2ccea987-787f-4603-80d7-90d4724e17c6", "value": 129244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616493, "uuid": "67b50d4b-7545-403b-b9e8-7caa8bceb6ae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c72a8a2-fc63-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769616493, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616493, "uuid": "b327403a-1e85-4a08-93a5-10cbda8784a4", "comment": "Malware payload", "value": "bdd19606f9fb54603266827edb246352", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616493, "uuid": "9d8cc1ed-e34e-4c05-b32a-7467efc022e4", "comment": "Malware payload", "value": "828964ed5c6d166ff8981a759194c6511e68316d6e3c8d34364a59e96b4b24f7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616493, "uuid": "a4516bdd-353b-4868-ade6-3666637a7864", "value": "T125C32A05B30C0D47E1633EF43B3B27E193DFDA8121E4E640655FAA8A91B2D32458AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616493, "uuid": "df6a7b6e-fb7a-473a-a3da-dfc81c421ddb", "value": "1536:6Id72MZ4ex10R39mk7orZb6wI0vAnjiLVRuzae8Dhq6N2te5f3dsp:6O14exAZ7cZKJnCNYaCp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769616493, "uuid": "74455c8e-66c4-476b-892c-16c4e81dabd6", "value": 121508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616493, "uuid": "f894e9a5-ddfa-4ac4-8ea2-c98522f00f0b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c740d88-fc63-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769616493, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616493, "uuid": "022927b6-feb7-470d-95a7-3c2b364e6277", "comment": "Malware payload", "value": "84b3d27a68685a01b403a19b150d0f8b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616493, "uuid": "4ec0828e-f0a9-467a-8bbe-ddae798253fb", "comment": "Malware payload", "value": "4409b836f4cf88418edf137bfd5bf61beed5df870cdf7c5cc9c10ab5c6b2efa2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616493, "uuid": "7fa235e4-0891-465e-a6f1-9a7a0c49dd14", "value": "T16932D517A7BBAE1BC4D0377B0193072162E95F916024472F7D0D1C8E2E9A3412D3FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616493, "uuid": "b89eb963-6673-4ab4-91ac-76176628e2c8", "value": "192:xvrOR1CQOsz1NxfAz9H9iG0GhWaDpU/O7Q89AGSybKqeif:xvrbCzfa92GwIU/kwGS1Uf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769616493, "uuid": "77f1430f-5fa7-4079-93be-3d132abb9481", "value": 11024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616493, "uuid": "be6cf514-953c-4633-a2ce-3012a82317e3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c7a4a15-fc63-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769616493, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616493, "uuid": "e79049ed-80e6-4f19-bd88-89da5f97efdc", "comment": "Malware payload", "value": "50648d57f9bcb8c18fe60dd000a7a0b6", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616493, "uuid": "5cb68de0-7144-4814-adc7-4e12c231a3a4", "comment": "Malware payload", "value": "754480814846bdaa2154de4995d848591aa7fda666bef3475f3b4cec6ef541e3", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616493, "uuid": "24084289-1839-47b2-800e-eb61b1b7477f", "value": "T12A41C49E60BC0045E08ACE7175F34DCCE309D69B55B8023AFDD22D6BE099CCB352AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616493, "uuid": "99caa4a8-e8b4-48e1-9279-338f4b6916a0", "value": "48:ZVNPdM5L7O1U4iI8N7zFf9cxXUo7putLZJUlXl:ZVNPdM5L7O1U4iI8ZzFf9cxXUsuxZJUb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769616493, "uuid": "08813b1f-d730-4f6a-9fb9-e345aa3af8f7", "value": 1957, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616493, "uuid": "bfca3bc7-efe5-4d44-88d2-db0cfeb3ebd8", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c7c223c-fc63-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769616493, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616493, "uuid": "1f9b6141-22da-4607-a94b-9d38a5c05173", "comment": "Malware payload (Mirai)", "value": "ed8126b2ed8d5326ab9f2d9cdcd877a3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616493, "uuid": "7f9578eb-6600-4a0b-bb66-c80dac38e4ee", "comment": "Malware payload (Mirai)", "value": "e4993d1973b90c88a7fd56579e2ff4038dda14814d8df4fd577387e62049a077", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616493, "uuid": "b5eadaea-1d9f-45eb-b637-c8297c3c6b2f", "value": "T1AFB30845F8445B17C6C666B7FF8E438D7B2A1758E3EE720399256F30378B85A0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616493, "uuid": "baa8625a-520c-4b75-be97-3572eab06a0a", "value": "1536:A7jnPq8azP4V8YOTUF1HyNOr4uGIwYeFGdPl4GVwywlQ3Ym3Xb/VBorUCkeQka:mzPqF41OIFp7GIxe0XRy8f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769616493, "uuid": "031abfff-6eb8-4352-8947-d2971cb3534e", "value": 113184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616493, "uuid": "f5559d8e-8733-4dc1-8182-244114bbac42", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c7f97aa-fc63-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769616493, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616493, "uuid": "d6144860-d916-48a9-a4e8-4aa41dc84023", "comment": "Malware payload (Mirai)", "value": "316303d1d00cb16b8346a206015dd5d5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616493, "uuid": "0623f49c-6d37-4274-b5e6-20016626c48e", "comment": "Malware payload (Mirai)", "value": "a45ac1ef1db031124ce9db5a8442ac51136a8f0a0a75313d1e388acec3080cee", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616493, "uuid": "9fa10fd0-1dc8-48c4-993a-439dd17a125a", "value": "T1F6F33969BA0F6C41F2C2D3F9DA8C87E13E1735E3C6778DA1790252EDDBA39D949805", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616493, "uuid": "3c749fa5-0378-4137-8a79-97efe88e6a93", "value": "1536:bdMiHrrc/qDHavM5Dtrg89RPA4b1X75rgmnX7Dy+IfMpZEn5p5M/LW:77vDtrnPTR71gmX7Dy7fMpZxq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769616493, "uuid": "2b3a41d2-4210-4b24-9b5d-760584db4e2c", "value": 157544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616493, "uuid": "82a68ce7-8dc4-4ef8-bc24-84bde7def1bc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c822bbd-fc63-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769616493, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616493, "uuid": "493bf831-748f-433c-a6d2-e4af98b05fec", "comment": "Malware payload (Mirai)", "value": "85cdd74b2de1258ecfb792176e569823", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616493, "uuid": "35c58ca3-e53b-4d52-9575-d7a2d10fb2dc", "comment": "Malware payload (Mirai)", "value": "eafddfa137118a0566a588a0529796fce03159d00ab7d3c3a5c0897412a01f81", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616493, "uuid": "b3311251-741d-4137-8bec-40952319c0cd", "value": "T152E3875A6E228FAEF67C873147F74A20976D23D623E1D684D2ACC1141F6038E545FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616493, "uuid": "cbbba614-9f42-471f-8244-d29d56f8d8ce", "value": "1536:p+bTcKot8sp2MKypYz8ZOfGQ+v3eB/hub8mXRCTUGk4onuftL4VxYdbK:pklybKpzEOfGQ+vEubTt4ouftL4kdO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769616493, "uuid": "3874be8e-787b-4a8d-b2a7-8b32d006248c", "value": 156680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616493, "uuid": "ac212796-6710-43ee-95e0-50894808e847", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c84e709-fc63-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769616493, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616493, "uuid": "e6ec50c9-b624-4ca0-94c8-079f558d264a", "comment": "Malware payload (Mirai)", "value": "fec9557db24d43e49289d2b99eb84e88", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616493, "uuid": "9bb3e148-d090-4c2d-859b-8c7ebd059dc8", "comment": "Malware payload (Mirai)", "value": "8dd2b821030ea90df06e80af282409f5bfa981a2e5c15eb9828bfc3bfe9d0f18", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616493, "uuid": "01d89009-edc0-4d62-af47-41e040a5fa71", "value": "T115C39DA7B24F1050C82647F41BCB579C2E3325019E2B9AE77C6E373E1A769DE58063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616493, "uuid": "f3d9bcbc-4001-402b-b3e4-fbc79b90c52b", "value": "3072:of0GAArzU5n1RkclSyVDKd+AqLmgbgiCrheiiU4hqG:of0dV1RkkSAzDLrnCrheiCqG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769616493, "uuid": "d35839d7-27d2-417e-950c-27458c2b22b0", "value": 124344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616493, "uuid": "e2c611de-113e-4d36-9f26-682474f86995", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d1b6068-fc63-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769616494, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616494, "uuid": "fe6b411a-30b4-465b-8ae5-66587832d9e1", "comment": "Malware payload (Mirai)", "value": "5f95f59eaa200adce53cb4533d2ed5dd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616494, "uuid": "03af1af8-f807-4eef-842d-395a4841f82f", "comment": "Malware payload (Mirai)", "value": "314d8048e47ac591eb9b5d9e34b30178bac5637cbee3f58f845334b3cc4f5d83", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616494, "uuid": "b3121809-c63e-4655-92a0-528bb3a1c988", "value": "T12093F749FD416B10E8D635FAFF4F024973934B6CE3FA7201AA245B2123CAA5B0F765", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616494, "uuid": "a76a18f7-ffa0-40b6-9447-2d46a463ac30", "value": "1536:AanhE87HLYwltK8hljfyUgAaA1QQOauqKlM4Nvi/EpgTTKoZ0Yq0z:U8ow3Z7byUgAaA1QQOnUEpgTTKoSF0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769616494, "uuid": "dea06fd3-6a88-411a-aab1-dedd2600198d", "value": 93244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616494, "uuid": "af693ca2-35f8-4ae6-b4dc-eddd2cac07c5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "abd9514c-fc64-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769616975, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616975, "uuid": "72cf6f18-df47-4574-b8d5-dab9a1b89815", "comment": "Malware payload (Mirai)", "value": "4628df2191a930f6ec4ab3748504d6b2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616975, "uuid": "015b2f29-e959-42db-9ff0-04ef203d5963", "comment": "Malware payload (Mirai)", "value": "5c979df6813a58cafd7b452932d7a73268b677c087a90d7a5eb8b91c2a644844", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616975, "uuid": "3d609dcd-100b-49ef-b2b8-42e13e000f6a", "value": "T1DAC2E1E07726FA31C420AC3DE52B4C8A3A51067C81FF353664199D359EC1A9B27F48", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616975, "uuid": "fbf89f03-eba1-4b32-bef8-2f1e8c56eab1", "value": "768:DMKyhegCCMqfizjoNpd2vJdX6vwrh9q3UELu1:oKy4qfqoeJdXWgULo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769616975, "uuid": "bb1cec97-ea54-4fb4-8ef8-f41444bb1765", "value": 27300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616975, "uuid": "26baaa3e-befb-4021-b969-868a821066bf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "abdcfc43-fc64-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769616975, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616975, "uuid": "8c4bf29b-148b-4896-8691-2f0662f0b836", "comment": "Malware payload (Mirai)", "value": "86752f074c9167745421bda0601ac851", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616975, "uuid": "446ec0d0-cf4a-43b0-9c25-2a5aee778ad9", "comment": "Malware payload (Mirai)", "value": "94005e99979690cb42962e22f1fa5dbabc84048f1e9745abda6501d74e23a7b5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616975, "uuid": "39249b1f-0f20-4356-9a2a-77281d1707b8", "value": "T10CA2D025E345AEF4DFAF9CE053C1C2C27AE947C7678AC8E240EEAF016516056B788D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616975, "uuid": "f7bacf04-66e2-431f-839b-b47e641c02d1", "value": "384:m/JywWc84Tp2YshxqlDeAkSqjGJLeCE5zRW6C5tGM4uVcqgw05VxJd:mRxsSVsMD6xiJJE5zRWN3V4uVcqgw093", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769616975, "uuid": "2ff1db93-ccfb-43f2-be2c-002f745b1fce", "value": 21884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616975, "uuid": "400ab94e-7d7b-463e-a5a8-efe554ed0776", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "abe01696-fc64-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769616975, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616975, "uuid": "cc2570c8-85e4-49cb-b142-503560d0a84b", "comment": "Malware payload (Mirai)", "value": "6dda3b3f571f31e8623feb49319cbc57", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616975, "uuid": "c3872979-4995-413a-bda9-78b7395ba09f", "comment": "Malware payload (Mirai)", "value": "0c5bdbd32d9558693ead6d7bdc8f4eff922d95bd73a2ac9bb15c0965ef311420", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616975, "uuid": "752b3935-c864-4128-addb-5eb860b2b06d", "value": "T1DFB39CDBF24701A0C8624AF007CB4BED3E2723815F27C5E72C6A657969791CF8905F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616975, "uuid": "283d8c4a-d630-405d-a7d0-ff838c35a739", "value": "1536:Fu27gBY9FSSpj3z5Qxw6YaWWgg1a/LWy:c9sSyzz36YaWWgg1aq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769616975, "uuid": "1f1e9ff0-af6b-4093-afe1-e0c7009be648", "value": 107800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616975, "uuid": "f8f31db9-e4b9-416f-9626-01ba4637bcc1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac7924f3-fc64-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769616976, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616976, "uuid": "21f4114d-661e-445a-b5c8-06ca7e831e94", "comment": "Malware payload", "value": "8054f08f9997fecde9a6b8b3ad711146", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616976, "uuid": "f8486ece-20e7-486d-b7f6-13da7588737a", "comment": "Malware payload", "value": "c252441da9a1d5c2b95b600daf86014a106a0d093bed9da5ca9ea4adae69610c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616976, "uuid": "f1001fd5-84c1-49c8-ab39-0488bac6be65", "value": "T12972E813AD919ABBC41ECD30456DC20602DDDCAAA2EA231F3174F78C79796468AC7D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616976, "uuid": "d0137bd3-523e-4d38-b278-2b535ad3a554", "value": "192:XBldkMmoDZeojkJF/cBcSGMUGop/xKFqEKBTQxLnkpuF73GiHw/K78wZ2sHn:XDCgZoJSsHnGN7kkWiQ/+jZh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769616976, "uuid": "909ffea6-7ece-4d5e-9be5-236dc5656eb6", "value": 17248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616976, "uuid": "56a90733-2dfa-4f94-be2a-e8b1689ab379", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac831113-fc64-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769616976, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616976, "uuid": "91038cdd-108d-4e09-aee4-01b645ac55db", "comment": "Malware payload (Mirai)", "value": "8a26b7ccdb3a2d0fec65a47139a3985d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616976, "uuid": "a84398a3-ad73-4a42-93f4-f5f371a38899", "comment": "Malware payload (Mirai)", "value": "ee0e78f2464f101997187a43ba6692b9d69fd6eee5f71eb23e824f624e0e16f4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616976, "uuid": "bf507aa2-1f4d-4c6f-86d8-38311c4e993b", "value": "T18B336C36E029DED0C6560134A4E88F751F03F1C883536EBB2AE546B2645396CFA19F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616976, "uuid": "5b6da2f3-cbdf-4ec5-a3c5-22dca69d8872", "value": "768:Oa2vU7eng2qGJert7LrLMU6fgatQh+YbT/9+m3CZQoV/bnmCozw:Oa4U7G7SvT6ftBTm3KVrmCo8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769616976, "uuid": "58ae7969-614a-44b1-9ade-41382502755f", "value": 50168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616976, "uuid": "db516674-0d27-43fd-b4ee-1515527c143c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad720acb-fc64-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769616978, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616978, "uuid": "11a692d1-ada4-467f-9ad4-9a7cb56f53f6", "comment": "Malware payload", "value": "f83a923f757ee751c08c31c0dfe45037", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616978, "uuid": "2093d0e9-3f4e-4d18-b032-3f201214ce02", "comment": "Malware payload", "value": "304cf8764dfe0284d46446cc462e8f46d9820e2413b1ef9bc463a4f7a96d644c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616978, "uuid": "cb70d8dd-f409-4955-abe9-60a8cb259367", "value": "T1AB72D8A57B11EFA7C16DC23006F3C5965BD52E952AE1C089B220F71C1E3121D692FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616978, "uuid": "dfea83a1-25b9-42d2-805f-02bcd25bc525", "value": "384:4HO/yWWOQvaA4pv6oYB6Aa8mOdIDSLBsDP9F:4HyhWOg1006N8q+BszX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769616978, "uuid": "9f5d1a8a-e012-4f47-b539-13d455ab1f2e", "value": 17216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616978, "uuid": "5b394241-44ea-4a3f-96a1-63486f5c304c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "adb92f1a-fc64-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769616979, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616979, "uuid": "7f4edd88-5528-4c27-86ca-c098bc376e09", "comment": "Malware payload (Mirai)", "value": "cecd1d57763572ec78905d2fadc5eafc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616979, "uuid": "ff616920-9de3-49ad-aaea-662d199eb703", "comment": "Malware payload (Mirai)", "value": "b98e193b30abfb0e77c1221ec2b0d7f31905a5e0dde8c74bdd8397d700f18927", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616979, "uuid": "12a69a56-4a1d-4ee3-87a0-a4701fbb1dc0", "value": "T19C230271890E9EB124303C72DF99D793B6F11AB2C6673023D6180A386F757131E57E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616979, "uuid": "7ca08388-da40-4790-8641-b615f982654b", "value": "768:D/TYCoIxdEk+AxoTZAZHFeq8b339q3UELbUXfi6nVMQHI4vcGpvq:DECFd+A6YHAxGLRQZq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769616979, "uuid": "1945f982-4bf3-4752-abb1-883005e83d82", "value": 46624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616979, "uuid": "7fa63c22-228f-48b7-9768-c8167f792b3f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "add01be5-fc64-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769616979, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616979, "uuid": "887374c5-5008-447f-b707-fb73a818cff6", "comment": "Malware payload (Mirai)", "value": "580389a3aa1e01426ab486539b322db1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616979, "uuid": "badf1a68-c1ac-4220-8408-af03c2fe2f26", "comment": "Malware payload (Mirai)", "value": "f3efb7cce1a052d62d2c6b43225e7773de4b7dd4f829bb6fa928037f7c1acc84", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616979, "uuid": "2b57fd5e-7ff7-4ada-bea9-98afb5627396", "value": "T1AC432921B63A1F13D0E0A47D21FB4B59B1A15ADE26A4C64E7D720F4FFF11680A943D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616979, "uuid": "938c97d5-bef5-46c0-b37b-f54f70052f47", "value": "768:RqowmZPu9wtnfbltWgC6BSJsBcfDSTFIuQKqgESnmC/xO+KpAwz:RqtmZPuutfbltZFBSJsBcfDSTFI+BEz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769616979, "uuid": "8f789802-929c-4a73-a8a6-42d1a2760694", "value": 58376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616979, "uuid": "9e316b61-e845-4d59-b9e8-fd5108266f68", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ade15ac4-fc64-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769616979, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616979, "uuid": "d0395cf8-fdbd-498b-89fd-d6cd598f9909", "comment": "Malware payload", "value": "057fc4307aea581670b7b4536a51790c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616979, "uuid": "5f611318-8854-4da1-8131-d2ce8f75acba", "comment": "Malware payload", "value": "9e739f00c8fea3cfa8abee152d347182a9da277399f8b936c4ce4b739b416e1f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616979, "uuid": "8b1e6c31-382c-4847-ad25-f09e6186ec12", "value": "T1BDA42346B8C65C99A0089C60112EFF7FB17DF299C81CCEF2AAD6747A1852FBC580E1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616979, "uuid": "dc05e644-6f88-4daf-8824-52fad7cc7230", "value": "12288:4PKUJVNfWJn/0QvQTozgYewfzbWUX35Zs5p4AAF8X2jSmoSu:XoVNfqQToDhLbJ3Hs/mbjSj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769616979, "uuid": "10e90f29-784f-4185-8c40-9da15e1a02b1", "value": 490256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616979, "uuid": "065e7454-bc1e-4fb5-8632-7c1f168971fc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "adf00ede-fc64-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769616979, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616979, "uuid": "522e42a9-eeea-42c4-a3eb-3ddf8ce12470", "comment": "Malware payload (Mirai)", "value": "1a841b271fcb58d1b4e57761bcb3cbc7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616979, "uuid": "3eff1633-1044-43b7-b939-bb1497000524", "comment": "Malware payload (Mirai)", "value": "8204be1119875b1c8ec9b145d9fcbe0fe0c5439fbe8a0b5d061a367da37b67d3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616979, "uuid": "301bc213-b0fe-4cb0-b0d7-c9490717e4d8", "value": "T1E6A2E11572632E56F3ED1C3DC86A8357F9A71BFC90F5327679441620C90D24A2E38A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616979, "uuid": "06ed38d0-2cb7-42ed-bd10-ca97b3076a56", "value": "384:TvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxj4lwhymdGUop5he:TvQn4j+ZO5fKAlxWws3UozI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769616979, "uuid": "b5e28274-b72e-4896-94ec-8fdda47cf98d", "value": 22168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616979, "uuid": "8996824c-deb6-4a1c-9c5f-989d05d53d38", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae016323-fc64-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769616979, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616979, "uuid": "e17555ec-f38f-4e27-9ce2-703e48cc55c7", "comment": "Malware payload (Mirai)", "value": "df0e2e6c2c996b66ad7e19c3a55760e6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616979, "uuid": "3933b86e-a18b-4916-b485-3de084ea1cd5", "comment": "Malware payload (Mirai)", "value": "9c9ed77f2177f8846d784b8161ef9dad573954df1e515750f74583aaf5d9dfc9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616979, "uuid": "087e595f-bb36-4e23-a239-ee5b8ef531f7", "value": "T12133FA8EB8029D3CF91BE6BE54164E0DB93177C152830B2757BBFDA36C721945E02E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616979, "uuid": "a8e62ae2-f8ed-4c9c-a35a-88bd6c786cbd", "value": "768:gduPBFnHooqR8qOCKq2cH4Fje+TK806MMUVjzMfQXOtHud2oGj:r/hqaJMcjeqK806MHdMfQXoHuCj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769616979, "uuid": "c715d182-7e68-47ec-af3f-eaf568d22bd8", "value": 54932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616979, "uuid": "1758b1f0-4cfd-4e0d-9dd9-a8e0d06e2874", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca8ed7e2-fc64-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769617027, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617027, "uuid": "b0db55ae-8a26-4f3c-b186-bbce0a063046", "comment": "Malware payload (Mirai)", "value": "ed4f687d4b5f8e71d3c3813bf6871e88", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617027, "uuid": "0c363266-b763-4f70-bad0-617833ad49c1", "comment": "Malware payload (Mirai)", "value": "d758ae90211a20ddbb11830dd76c46a6bb086354649e92b82e9a5d59a378fc49", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617027, "uuid": "f9b22319-38cd-433d-8622-1a05fe07f68c", "value": "T19582C03061AB75F9DBF10430FEAECEC6971A0BF8D1FC36921758AB78894540251F92", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617027, "uuid": "775767d2-e65c-40f6-b10b-fca290d6d08e", "value": "384:MnfzRV0P6iOwrkom0DRnVATuSlShu6NvmPWtUn+KMau0hymdGUop5h5l2:2dV0P6+kom0tVAoNvm+to1u0s3Uoznl2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769617027, "uuid": "b88e95f1-cb4e-497f-8db5-23e938773628", "value": 18488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617027, "uuid": "552bed22-6a3d-4986-803b-569eecfb5580", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eea61b0d-fc64-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769617087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617087, "uuid": "3ba22d60-9d47-4b0f-8653-048db053aeab", "comment": "Malware payload (Mirai)", "value": "d45dc7509946a434c34e21754a23e9dc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617087, "uuid": "2e02f7ba-1061-4a67-b419-274b868ab2cd", "comment": "Malware payload (Mirai)", "value": "bbd43861fc8cf38d1df5e7f8946d7d6088b8c6d2dacfba5bb395bc74a8e4dacd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617087, "uuid": "58416222-7cae-46a4-8213-a5af3db51553", "value": "T1C7A2E115BF18818BC832297551D9E9D21257FC71F2EDCC192A40C16FF1A33A96874F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617087, "uuid": "426b6551-3fa0-4e3a-a1ae-dd57a88320df", "value": "384:MsiLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaqOKV14b+502F2vwA9dWuMW21bAKY:G98o08kxofBE+ZkXaqGbp2F2TWul0c5h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769617087, "uuid": "c6103d3a-2dc8-408d-99d9-fe23e73a93b4", "value": 21500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617087, "uuid": "b7bd511e-7cc6-4c74-9e46-aa3e350e0c73", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4fb76f82-fc65-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769617250, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617250, "uuid": "c8c6553e-cf63-455f-bc33-64a9d3c1f55b", "comment": "Malware payload (Mirai)", "value": "7fdee46e1cfebf18d765bdd9b9378935", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617250, "uuid": "e053b8a7-44ba-4dbb-b038-5cc81bc8a414", "comment": "Malware payload (Mirai)", "value": "f4ea096cb602713373ed5ec4ef9697252c7ab67f55b19bf5070bf188cd1e0246", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617250, "uuid": "770599e4-b4e7-4c57-ba80-770ad39f2740", "value": "T179F36B07B9C0D0FDC8DAC2B44BAFA126DA32F44A5134725F27C86E262F5DF216B2D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617250, "uuid": "2eea58db-f7f0-4713-a7ee-ba40d751c4af", "value": "3072:BGU3AxZaj9dEou1RNM1t1vSfYpl+Hph7KPWCPNpzoKdE:j3AQZX6/JavTE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769617250, "uuid": "00421a4f-5063-41c1-97f7-b03469490f8c", "value": 159792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617250, "uuid": "55c532f2-5915-4831-ac75-574368611cac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1266d884-fc66-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1769617577, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617577, "uuid": "2cff1201-7279-4e1a-9789-1a65b6b8a7a8", "comment": "Malware payload (Gafgyt)", "value": "fe0904dca6ecb54a5acdcd1f7970a641", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617577, "uuid": "5ddb2b49-e843-49d1-961c-b2c486cc8993", "comment": "Malware payload (Gafgyt)", "value": "280b5a76d8c2e870616db131e8d3942e38dddb16bb21a3e7725e0a08aec01274", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617577, "uuid": "ff71de7e-737d-4d85-aa83-b70576592e5a", "value": "T1E4F0BFFF01A04CAD2144FA4AF9E34E79A81A69DD54C60F4C9A9F2C393C8D9187835F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617577, "uuid": "602469ec-1c85-45ba-8da5-488a6895c71d", "value": "12:CLJoZDSLJhHWNCLsySLshHWNCLPBzvSLPBzMHWNCLPnIjDSLPnIMHWNCLPiDSLPQ:CCZeTWNCw5wRWNC9z69zGWNCzJzhWNC4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769617577, "uuid": "3a36813c-b7dd-419e-ac18-646c11b05495", "value": 650, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617577, "uuid": "961f310d-9f65-4901-b682-18517c9c1e8d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1266fc51-fc66-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1769617577, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617577, "uuid": "8911abab-32b0-4899-8796-7e754b114004", "comment": "Malware payload (Gafgyt)", "value": "7be10eb8c4fb555c471043d7d71012f1", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617577, "uuid": "fe69ffde-b614-4ab7-9942-e2279f6c5906", "comment": "Malware payload (Gafgyt)", "value": "84c3deee171c8ee76b04757d2ba862f4eb5152cebf0fb25dd2913d22c1fd0e4b", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617577, "uuid": "67a942b3-e583-493c-aadc-d92fd28ea757", "value": "T112F0E8EF00B14C6D1244FA0AF9E20E78A80A69DD58C50F4C5F8F3C39788D9187835F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617577, "uuid": "3432e3ba-cb4f-4924-aef0-cd5fb9aaf665", "value": "12:CLJoZDSLJhHWsLsySLshHWsLPBzvSLPBzMHWsLPnIjDSLPnIMHWsLPiDSLPDHWJ:CCZeTWsw5wRWs9z69zGWszJzhWsGeXWJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769617577, "uuid": "14d2d32c-7a7a-4e94-8e6e-8739ed47dc8c", "value": 640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617577, "uuid": "c0a57888-7f69-4596-9d1f-a2e632068c39", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "126d0a02-fc66-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769617577, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617577, "uuid": "d3fcced9-2591-44d9-96c0-3649244fdae2", "comment": "Malware payload (Mirai)", "value": "7fe1f56885ec8d33e59df28f74d87a81", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617577, "uuid": "373ef6b2-4273-490e-a9e9-7d1e54843c87", "comment": "Malware payload (Mirai)", "value": "ac0de66ad392299c321c00db0b0f010ff5d63a18392364b8f07ea8da4f94c52f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617577, "uuid": "fb4109df-30d5-40ea-960e-c2243829660a", "value": "T13F734B41BC819B12C6D1127BFB5E428D772617A8E2EE7307DD256F21378781B0E7B2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617577, "uuid": "b06cc6fe-8adc-4569-b4e4-6c134244ddd4", "value": "1536:W6Rp+V2ZMFNK2rKzBBvNim6Gs6NBM/O6rDcw5+Snvws:W6RlKFA2r84m6GsqhMB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769617577, "uuid": "b3f849ce-c6c4-49df-bd33-c09b3f665cc7", "value": 75604, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617577, "uuid": "3cb9f18d-d871-4ba3-bba3-a268ba2a02e4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13c9c020-fc66-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1769617579, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617579, "uuid": "8c2549de-e82d-490b-86fe-e68e01f330dd", "comment": "Malware payload (Gafgyt)", "value": "e0224a8dc4047a637632945fcec4d73c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617579, "uuid": "ce723495-2f82-4e75-80e0-fb604d813c40", "comment": "Malware payload (Gafgyt)", "value": "1c86a16eeb7fe7cd72f14541896aa4f959129578156d9dd2f448b9111df33593", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617579, "uuid": "704e8ac5-ad2d-4d13-a8df-f59ec0033630", "value": "T15AB012F730203404C408FD0498B20FAC105346C134840F0812F70624EC5810438B09", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617579, "uuid": "edcc81d5-4c93-4378-9d90-7bd476867bb0", "value": "3:L6FT7KDQNUCz6MRgFjpMPFGBzSEyLTUWOevn:L6FTODW6MmRpVI5v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769617579, "uuid": "126ce29e-61ca-469d-bca2-bf0f81aa213e", "value": 92, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617579, "uuid": "bf85ad68-f67a-405f-8fa1-aa5efb4ba7cc", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13f0be7c-fc66-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769617579, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617579, "uuid": "c3830ce5-fdc2-4852-8263-9a7e68900a2c", "comment": "Malware payload (Mirai)", "value": "627f79e935ac3bb81e7a7487070d66b1", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617579, "uuid": "b343226a-d2fc-43bd-8221-34d70f0ae2e6", "comment": "Malware payload (Mirai)", "value": "5a2f439cbeb1481de5ee95086d4119fbf28a8d8b89ae9a93ee9dd45472cf5f78", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617579, "uuid": "88537cc0-8eab-48e7-b493-f7edc777bafa", "value": "T1F1634A41BD819A12C6D112BBFB5E428D772653A8E2EE7303DD256F2037C782B0E772", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617579, "uuid": "0e8e37a5-d695-4b72-8deb-d9e611dc96b9", "value": "1536:REIhcXWJCLMcKB5CCsaXmb/ivgMZODwh04NkNYNXASus:REI7CLMc86aXmb/Vl8YNuX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769617579, "uuid": "742059dc-ead4-4c61-993c-8baf48691509", "value": 72108, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617579, "uuid": "1bf88b15-dc11-4edc-b76e-c475051f4c39", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13fda560-fc66-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769617580, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617580, "uuid": "58402615-315c-4bc3-8856-d60bcf2aa365", "comment": "Malware payload (Mirai)", "value": "5dcba60b070a39b9070e4959cae64e67", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617580, "uuid": "00fa6061-6489-4844-a52a-26aba812c72a", "comment": "Malware payload (Mirai)", "value": "1b260e7fbe237c98b9d5614f1207d1448dc138ef2b6a8cdcda0de3d28533f84d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617580, "uuid": "35167b81-6547-457f-be0f-acdfaa1fe3d1", "value": "T1F6832956B8818B11C5C512BAFE1E118E3313177CE3DE73129E246F24778B96B0E7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617580, "uuid": "be3a2c45-5b7d-43a4-82ca-e19568d63279", "value": "1536:YNnLVQ5yrQxZ+E1TGa1/jwawOBpGOQjzMViQDCZleWk75V56Y8x:2Q5IEYE1TGC/jwawiDCZleWk9V8f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769617580, "uuid": "c7e5835a-2945-407b-98a2-d7a999d598b5", "value": 83248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617580, "uuid": "1be27b9e-ba9b-450e-a9d1-8eee7f511298", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13fecce5-fc66-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769617580, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617580, "uuid": "c263fbb1-e17d-4ea2-90bb-a123305b5b9c", "comment": "Malware payload (Mirai)", "value": "5e3074e8a0238be0523fad68924ad08f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617580, "uuid": "63ef57d0-d76d-46e0-8a8c-d037ad247568", "comment": "Malware payload (Mirai)", "value": "10a7aff25c88eb3fb4ce17dbdd1d78e941b3c4696935f2843afae1a7403c73d3", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617580, "uuid": "62cf300a-755e-46c1-9ee6-35129b333691", "value": "T1E5A3D61ABB510FFBDC6FDD3706A9070535CC551B22A83B3A3934D928B64B64B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617580, "uuid": "a735fe4b-2067-4af1-ba18-f41bd3a0c20b", "value": "1536:meL1QjVrJaNHL6xSQYd4ERxu8jyH3FvrrZsc+yZNvMe0+V7vuKgknuM:m0QjVra9xzjyHJrZsc+yucwWB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769617580, "uuid": "8de773dc-5313-46a4-bf72-dceafabb0786", "value": 97860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617580, "uuid": "e65166ad-e2ce-4bd8-ad51-3f33cecc3dca", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "140179c7-fc66-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769617580, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617580, "uuid": "cfacb8ae-b7f1-4fe0-86b2-869051b11a69", "comment": "Malware payload (Mirai)", "value": "3142019b3f127b98813c09d820936391", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617580, "uuid": "2bd1afaa-2c3f-41a1-811c-21fbd91c3c51", "comment": "Malware payload (Mirai)", "value": "fefec7b2d044fee96b0d7315c1a648a64c78fd6cbb1753c7d90e027676379e7e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617580, "uuid": "30be39a0-25c8-4ae0-9b4e-c82d39ef5c2d", "value": "T16DA30846A9819F02D4D631FAFBAF414933136FB8E3EA7101D920AF5427C69DB0E776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617580, "uuid": "381ad8a4-80c5-4149-ada6-8deb6e9cb8cd", "value": "3072:Q53AbfymvavYdaC0ubwCWFaLJF1HS1v9mm9or:S3cfywaAdaC0ubwCWQLRSJ9mcor", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769617580, "uuid": "f85eb757-053a-4f59-8c0a-c405a1f96427", "value": 99800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617580, "uuid": "579f8bba-fc58-4bde-afd6-4b77639aa8c6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "370e7b66-fc66-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769617638, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617638, "uuid": "b09cdf0a-87db-406f-8b8a-b01497fd5fa5", "comment": "Malware payload (Mirai)", "value": "a3c6259477aedd5679013d19f0e3d140", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617638, "uuid": "e5ba1f9c-430b-4ceb-8d64-cd9767bd1929", "comment": "Malware payload (Mirai)", "value": "1203b21d4510c0ef5f481452cc0a59b8ed83257561b6acf8a81df23047ea0403", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617638, "uuid": "991b6385-c16a-448b-a53b-3eef4b2e32eb", "value": "T121518FF829B1AE3B4545DF46E0B14FB9A40FB9C894D00F68979F78ACBD6C40578306", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617638, "uuid": "01090f72-d43a-4736-8a8b-c2642fac7d29", "value": "48:rMpzaC56q6IwQgOh18W5uWebCwqgojUHx1HxWEfWq6D3E+Ji:r8+s6q6IwQFh18GuWebCwq/jevHfW5fi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769617638, "uuid": "9ddd07af-50c3-4224-9eb0-4db488375c57", "value": 2729, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617638, "uuid": "3189a458-111c-4efd-9231-8822ba01aafe", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54ebab10-fc66-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1769617689, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617689, "uuid": "64a8e73a-be9a-41a8-81d4-7ec170c6051f", "comment": "Malware payload (Gafgyt)", "value": "67e94b9b6bdd9c65196fb67d8831d385", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617689, "uuid": "fb3326e8-f0ab-47f0-8aa0-7ce9d20b5aaf", "comment": "Malware payload (Gafgyt)", "value": "47b6dfc07a4ce2522a338e98ee97946f5cd74e92ea376b12105707f30d372ac8", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617689, "uuid": "b69ef2d6-62f9-4546-8ef9-844251fb7674", "value": "T1D8019AEF01A44C6D1184FA4EF9F24E75A80A7ADD64C50F4C5A8F2C39398D918B835F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617689, "uuid": "86bce4e5-bca8-467e-92f7-2ba09f0f5019", "value": "12:t9ILJoZDSLJhHWFLsySLshHWFLPBzvSLPBzMHWFLPnIjDSLPnIMHWFLPiDSLPDH5:t9ICZeTWFw5wRWF9z69zGWFzJzhWFGeJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769617689, "uuid": "1d543e31-0667-4c7c-bf17-ece070b2d4b7", "value": 657, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617689, "uuid": "87b44519-9fc7-417c-a268-e1f068757c20", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad9406b1-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware payload (NanoCore)", "timestamp": 1769619126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619126, "uuid": "6d83c878-3c85-46d0-894e-6b4d1d0bbaf3", "comment": "Malware payload (NanoCore)", "value": "3157b410e8dc2f90bbbbaafcee43cebe", "object_relation": "md5", "Tag": [ { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619126, "uuid": "6a7c0c3b-9d79-44ac-b1c5-784d4d44710d", "comment": "Malware payload (NanoCore)", "value": "150dc6dbcb7d60ef0abc79d5b15be1725d5c5ff10a4199a9cf916c5888c3ab97", "object_relation": "sha256", "Tag": [ { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619126, "uuid": "ce298f7a-c2de-4e21-b827-0112ca2939c1", "value": "T1CE14CF267BB8492FE2DF85B9611251528379C2E3A8C3F3DE28D455B74F227E40A072", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619126, "uuid": "7c738918-6c39-42a2-899b-ec8eced4154f", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619126, "uuid": "3ffca232-06c1-4539-8764-6fbb2ce96f08", "value": "6144:gLV6Bta6dtJmakIM5Uq+HjVCuSj2OjrtJrIOXX:gLV6Btpmklq+DVcH80", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769619126, "uuid": "676c0cfb-ec5e-4fe9-b7bf-ec7d55fa6735", "value": 207360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619126, "uuid": "b0d3b7c6-e1ee-4bd3-8ac0-707cf1400b27", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad94f747-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1769619126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619126, "uuid": "f81900c3-a264-4c2d-9706-98ff82bbd8f8", "comment": "Malware payload (AsyncRAT)", "value": "07e0a013d9f6be649d940bd19cd15535", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619126, "uuid": "46873cee-660b-4f54-b8be-b79268b544f7", "comment": "Malware payload (AsyncRAT)", "value": "a5b5cf28cd778e1e101bde94dd903c0038bb7a0ff0c88275705fec78fd3ad0dd", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619126, "uuid": "873b0a8a-8b94-416e-983e-4f51aa46f54b", "value": "T112D3E2CB6E4442B7D79DFAB415B3733D032BA83E6BC39E0E849B7E5A1B3264C45042", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619126, "uuid": "813d0df5-1488-419b-8355-6abda85c2740", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619126, "uuid": "50ea832a-21c3-401c-aaac-b2de17cec748", "value": "768:0yKe724BsTOk5G7m9NFf5k7FWPB9W0WkZOMhtaQkrH621sIwEk4w00wa:jnFSX5PFyFO9W0WkZOMLsaEO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769619126, "uuid": "c714e719-5265-4a6a-9b12-475d4da64986", "value": 141824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619126, "uuid": "83d29205-0b8d-4ae4-a379-c0a0f2492df4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ada3ab08-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769619126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619126, "uuid": "874dcacd-2e4c-4039-be48-412fa2d41917", "comment": "Malware payload", "value": "1e2253cb31ed13ebd82a69c976bf0167", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619126, "uuid": "41c9a37a-5d44-4ba1-9d59-6b4ecbc823de", "comment": "Malware payload", "value": "58769eaa3332436c673f25285dd951d5b113ed2696daba6ab47e7e0f061ec4a4", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619126, "uuid": "3ae1e428-9b79-4e93-968f-45241d900010", "value": "T19D04AF4427EA9912E7FE0ABCA4F142004BB4F1539583E7AF6E8C10E91962BC557523", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619126, "uuid": "2cbda074-40d2-4157-8ffd-ab00d3a7ba8a", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619126, "uuid": "89d2d8a2-1d62-4137-94e8-0fed97050fdc", "value": "3072:HicewlFfOcg7i4rKlNYDAsILiG6/x5VUjeIo74SrZwhqQMOmLjqZ9NRbqzbxZNy4:HiceJcFvlNYDAH+Gvo0SrdQMOmLjqZ96", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769619126, "uuid": "c8d341be-329d-4fe9-a0a6-2d3cc096f5b2", "value": 186880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619126, "uuid": "5ba3c879-a607-4b8a-a432-d38e8f61fa26", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "adaaa05b-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware payload (NanoCore)", "timestamp": 1769619126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619126, "uuid": "d0aaaa2d-5715-49ce-9f7c-5701663d69a5", "comment": "Malware payload (NanoCore)", "value": "f268a50a6c3f02a723fdfffed597bc9e", "object_relation": "md5", "Tag": [ { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619126, "uuid": "283c5aa8-cd1f-4a86-ad50-9700f7290dad", "comment": "Malware payload (NanoCore)", "value": "d3a4ce5780a8c445e8b3949142230014aecd56160a7cddb70f2a89a8b36714ce", "object_relation": "sha256", "Tag": [ { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619126, "uuid": "e42733ae-1511-4677-ac3d-5853e48db8f0", "value": "T15E14CF1537A88A2FE2DE8679712212138379C2E3E8D3F3DE68D455B75B667E00A071", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619126, "uuid": "e6fdac4f-58fe-402d-8dd2-82c892d59718", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619126, "uuid": "847d0061-9b07-4894-a3ed-58abf548f3e8", "value": "6144:iLV6Bta6dtJmakIM5y4Q4cpvMPFGDqMiQz5R7/3p:iLV6BtpmkR4QRFBqMv9R7vp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769619126, "uuid": "42f33cb3-c036-4f2f-9d8b-d7020ea1c211", "value": 207360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619126, "uuid": "3de4e51c-a880-4381-8004-58d698388274", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0439af1-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware payload (NanoCore)", "timestamp": 1769619130, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619130, "uuid": "9665cf6b-6128-4cd2-8467-2bc9860dc398", "comment": "Malware payload (NanoCore)", "value": "7b5541c62d0581cb84e086e29e678393", "object_relation": "md5", "Tag": [ { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619130, "uuid": "eedb2bc8-04cb-4496-a5b1-cd7af418df85", "comment": "Malware payload (NanoCore)", "value": "d301618a42b6368df0dd756ff343fb62ac1b6f7208fcf2b52d5ab2d8272028a7", "object_relation": "sha256", "Tag": [ { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619130, "uuid": "a18ca668-f328-413a-9100-d24692075f39", "value": "T11D14C02677A94A2FD2DE86B9702211039379C2D39CD3F3EE58D464B79B663E00A470", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619130, "uuid": "a7c1ec9b-ccd9-4346-bfcf-ddf4cdf2ed2d", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619130, "uuid": "b91a6ba5-102f-4f8c-b562-7f913a82287a", "value": "6144:QLV6Bta6dtJmakIM5I6cu8ygDkmvpEH9J0Z/aS:QLV6Btpmk4H8ygDkuEJ0ZyS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769619130, "uuid": "ce88c118-a482-4271-82ab-c9e0929102cb", "value": 207360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619130, "uuid": "ff488a91-2486-419e-a92e-f9d1cd703138", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b05ef269-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769619130, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619130, "uuid": "ea0820eb-b291-424f-b521-5b0b45e1f5ac", "comment": "Malware payload", "value": "f2d477a844e685be83118396709f281f", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619130, "uuid": "069ab894-9cf6-4d1f-884c-f56bb03e9aae", "comment": "Malware payload", "value": "3bd5484954ad2efcdc3c2dd108d12eadab50841926d244df052df20171fb3282", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619130, "uuid": "dae12424-8fd8-47b7-a943-36569dc83c42", "value": "T1C952D81B96FC0269F1BE0B3C6976462407BA7D430E76DA5C0B88945E1F63790C9A1B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619130, "uuid": "fb0a1d8d-f16b-4c54-a979-e981e2150ebe", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619130, "uuid": "f8b9501e-7364-4cc5-a128-df1e5a8ea5b0", "value": "192:7aNu72XzsOWtdAjWaDDyPy4njdlGrAHpZO8O0afnRyUDUCBkH:xezs0jW22PhJ8rqZO8O0afnt4+k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769619130, "uuid": "0123874c-a4a8-407f-9743-51933718866a", "value": 13824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619130, "uuid": "4a697f05-2994-4f15-8947-e9040f62ed36", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b063d313-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769619130, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619130, "uuid": "9ac1ad0d-d491-4bee-8915-bc73d402c2a6", "comment": "Malware payload", "value": "bbaf3820cb28c0d1ed88a073158327a2", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619130, "uuid": "3513edb1-5e28-4a0a-87ce-e31a10a9fece", "comment": "Malware payload", "value": "c5444c6f040fa49183564bbfb146584b61accb74b56be6ec326fa73147cac5f7", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619130, "uuid": "6519fc9e-d91f-4a9a-8cd1-76d6e1656bf1", "value": "T1FCC17705A3EC465AF0FB4B7459B3071127B6FE519E76C39D1998021E7D21B04CD12B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619130, "uuid": "e57972ea-ed91-419d-b04b-5cd7aebb9faa", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619130, "uuid": "3a3510e9-2058-4361-94dd-3d0376738160", "value": "48:63vMsnRObdw2LuKn3EKJ2Sj4yZlmappV6fL24yejW5Y52jS9mySzEuulZxGqXSfG:/sRObKquqFZlmIfFeSu9mrG7xmzNt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769619130, "uuid": "b152510a-cb04-4b2f-bb41-6d313b151576", "value": 5632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619130, "uuid": "ca5fb7b4-21df-470d-b66e-4bfdb3ebc496", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0868bf3-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769619131, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619131, "uuid": "76bb7945-9c2e-4a43-9eac-5838a6d22d0b", "comment": "Malware payload", "value": "7275a5d2f48d915ab8c055612d6a75f4", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619131, "uuid": "55c7e169-31eb-4eee-8a5a-6bce636faa8b", "comment": "Malware payload", "value": "7fa484d8a7dab9c3dde9a3b18ae31fe9f60a1e6f17334c29f93efe0a8a819425", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619131, "uuid": "105beed5-2ba8-4e90-b324-11aa3fd05ab3", "value": "T10F32A20173F88A26F6FA4F30997207250E3BBD835C35E66D19D9441E5AB5BC0CAB17", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619131, "uuid": "7310e036-bb2a-4015-ba01-ce41e5caa857", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619131, "uuid": "5b39547f-4f75-43ff-8c24-d4c8c9dbc875", "value": "192:AOTIfAjtgDA1Sa6h3N2em8hg7qunz7CqIA0+QfeTyS:xIfrU1SPzxmO4quzUDVN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769619131, "uuid": "aadcc309-910b-4083-992f-f60c0a105e1f", "value": 11264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619131, "uuid": "d840d988-5cb1-46b5-9d2f-d6c35399e296", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b086cdb3-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware payload (NanoCore)", "timestamp": 1769619131, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619131, "uuid": "434cbf25-6748-4dcf-b728-52b97b5c18c2", "comment": "Malware payload (NanoCore)", "value": "7eefdc9c82bb8e4ae344c6f47ebebfab", "object_relation": "md5", "Tag": [ { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619131, "uuid": "15d5a44e-04d2-4611-a11a-6ad494c986f2", "comment": "Malware payload (NanoCore)", "value": "1715d8df581e2cdbd1d27a1e30a20c229e732fe8fb85e7403daac8d603ddc2c5", "object_relation": "sha256", "Tag": [ { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619131, "uuid": "1bb7a456-c034-4c4f-a302-ec222dd814d4", "value": "T1EA14CF1677B84A2FE2DE86BD711202178378C2E3E8C3F3DA28D465B65B663E506071", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619131, "uuid": "fdb45406-2a50-440e-8031-d938e807fdb6", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619131, "uuid": "64f5f48d-7c00-4bf1-b8d4-4003b5f69728", "value": "3072:wzEqV6B1jHa6dtJ10jgvzcgi+oG/j9iaMP2s/HIzPbfp4ZaXfhRAG6KZnpGiLLm:wLV6Bta6dtJmakIM5WfZXjZZn3O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769619131, "uuid": "e1809c6f-ca4e-4445-976c-c780ebb13fc4", "value": 207360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619131, "uuid": "b92d6f4d-bb17-4ce9-b201-ba7287034f5c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b091b293-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769619131, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619131, "uuid": "2a096aaa-ef86-44a8-bf85-30c1be10e67c", "comment": "Malware payload", "value": "b382937056e66ab9ca0d08bf3d48d497", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619131, "uuid": "863c94ff-d612-4b99-90db-6bac0e407750", "comment": "Malware payload", "value": "0fc90a024d9bb900bb43ab567cabf32defd4f3b6107f94197baab6b2a11effbf", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619131, "uuid": "47bf27c0-af2e-4d6f-8911-5f5bd583db72", "value": "T1260633DA9489E690E6916850930DF1E4168EB936BB7530225C2FCFE4CA354C2FFE1E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619131, "uuid": "a98b2090-9481-4301-9997-b9b08f17b17f", "value": "6ed4f5f04d62b18d96b26d6db7c18840", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619131, "uuid": "83334bc4-68d0-4664-a077-c58533cb6307", "value": "98304:M5o28P5n/zFNUw0LH/7r/ug7EJETZ6vGhfrWcZvri1Nrl6uvtBxt:4oLl/pMXn75UncRgBt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769619131, "uuid": "ebc9a545-02f3-41e2-8ac9-2e8241df0670", "value": 3708416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619131, "uuid": "3902e7f4-ef97-4631-a4fc-e07d58435546", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b09bf37a-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware payload (NanoCore)", "timestamp": 1769619131, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619131, "uuid": "27b61c4c-0291-46bd-899e-34b1f971c8c2", "comment": "Malware payload (NanoCore)", "value": "7d8f1fc0c5e1d7ca23385a823024c959", "object_relation": "md5", "Tag": [ { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619131, "uuid": "0043e63c-c400-4dd6-97f4-b2b92ba836f4", "comment": "Malware payload (NanoCore)", "value": "b89a70f1b581bb4807cb6a7c40146f0b28e2f1469c83bd019c1a37819da85a79", "object_relation": "sha256", "Tag": [ { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619131, "uuid": "55e7d8a4-b771-489b-8ebc-9c67da728521", "value": "T1B504AD5427EE8A42E6FD0BBCA8F102448FB0F4678653E76F1D9860E819627C457423", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619131, "uuid": "a8caa76f-a8e0-49ad-b11b-cb566ecb2bd9", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619131, "uuid": "0a01c226-f4d8-4086-bbd9-f1fd76b26c25", "value": "3072:M9ocHuUrOkFV1qGjTHfVMMQfrwHn0/Mp+Z3zDBmLjqZ9NRbqzJxlNszz1:MKcHuydHNMbfrwH0/dZRmLjqZ9NRbqF0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769619131, "uuid": "35172fe4-cb70-443c-a4df-ba9b0bdac3ec", "value": 186880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619131, "uuid": "10416487-8434-43fd-a928-fbb414c2d3a4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b16a1c28-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1769619132, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619132, "uuid": "b67a8245-179a-4b75-b7ea-ec6a7e3e5b7e", "comment": "Malware payload (ConnectWise)", "value": "5685bfbb91467d8a7089d52bc36db978", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619132, "uuid": "6e2f2792-56ae-4c2b-9ea4-7a71b069fd6a", "comment": "Malware payload (ConnectWise)", "value": "d1f82a30ccd32768a10081bc33fa79f3ef981e9665b636d7217381d2acbc307e", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619132, "uuid": "032b6edb-31c0-416c-ba48-ce5b3fa326ea", "value": "T1EEB6225072E8496AE2BB0B35E9B598B04639BD81DB27C71F6354382C1533FC19E73B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619132, "uuid": "b7ca4144-ef0c-40ba-94e1-a490173c196c", "value": "a79a8cee520a9d233bb1a4c84e58a4fa", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619132, "uuid": "1f42b0bb-07aa-4bc9-ab7a-87e0aa4b5b1d", "value": "196608:Qws3V+ayws3V+ows3V+Qws3V+7ws3V+Nws3V+C:faF3fKIC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769619132, "uuid": "7b9f3667-b6ad-43c6-a3e8-d283c1e00ec3", "value": 11340992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619132, "uuid": "00665887-ee62-4da8-aa48-b18cb1d0d99e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3cc4c07-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1769619136, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619136, "uuid": "973a783d-e2e5-4fa7-8c8a-200e7bca0481", "comment": "Malware payload (ConnectWise)", "value": "5583dbc5331bed75a4f8809d0b92a9a3", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619136, "uuid": "480170ed-6115-40db-bb47-f7e0af563491", "comment": "Malware payload (ConnectWise)", "value": "64f1cc8a4da91db6bc233c606d50fc159e9f4a0bfe2f84707873e7261dc74078", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619136, "uuid": "36bd7b43-3c43-48fa-8570-d8f48f57b815", "value": "T15DE6231126E89134F6B31736FE3656A55B3ABC25DD27C12F122CB91A2673D808D723", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619136, "uuid": "e6e362c9-6e26-4011-ab5e-81ccf1b24b45", "value": "196608:OsuCcGaDpvmcYMDosuCcGaDpXsuCcGaDpXsuCcGaDprsuCcGaDpPsuCcGaDpp:xuGbhMDnuGluGHuGZuGHuGA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769619136, "uuid": "567a88ad-ce71-42e6-8d4c-585f048f14fa", "value": 14360576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619136, "uuid": "12b0e86f-febf-4f42-ab73-bc1afc5cd7d1", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b46a4fd3-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware payload (MeshAgent)", "timestamp": 1769619137, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619137, "uuid": "fc5e4e06-b20b-46c1-9936-0b22f32dbc6f", "comment": "Malware payload (MeshAgent)", "value": "581b093f3834a1790eded7dc87ee5af9", "object_relation": "md5", "Tag": [ { "name": "MeshAgent", "colour": "#985f9d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619137, "uuid": "fd6e4aff-d3a2-414e-bbf5-14a5f6aacd1c", "comment": "Malware payload (MeshAgent)", "value": "a0482973570c0a5bf17e7b98cb92e0d5a0bc361204af05e4b60c95a99b7d7373", "object_relation": "sha256", "Tag": [ { "name": "MeshAgent", "colour": "#985f9d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619137, "uuid": "85e12264-2846-495a-95f4-9a0a17b67c6d", "value": "T1DCF59DD2A3A600E8E977F23C85568117E7F2B817537097CF16A48A761F236D12B7E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619137, "uuid": "5cb5fe10-1dbd-4d77-bccb-07bac20eaa21", "value": "fb0a8b4a81655f744a37af985e009476", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619137, "uuid": "e6dc450a-1f4f-4161-8c28-d5010949335b", "value": "49152:1dZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxL5l3:HHvfGfZvZj1/N/z/oLb3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769619137, "uuid": "2489cff8-7d96-48ef-80e1-d686bb8a0e7c", "value": 3515976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619137, "uuid": "0b5db282-2b25-47a4-a9f2-ae0621778583", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5724892-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1769619139, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619139, "uuid": "75c4ea1a-bd8c-4ff2-8c29-5c9dc658bdf6", "comment": "Malware payload (ConnectWise)", "value": "d6d96baa0daaeed6e3042fe318384b22", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619139, "uuid": "e3e12ab1-3856-4e0e-a606-aa47558196cc", "comment": "Malware payload (ConnectWise)", "value": "f2dc9c66ae297dd8739cb4547ee59ab3e83365265043c3da58c1ad4eede8ea1d", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619139, "uuid": "ca0e4445-87fc-40c1-8aa0-d91dead4a7bf", "value": "T104F61200B3E994B5D1BB0A38E87D82696A35BC144725C2BF53947A5D3E32BC09E727", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619139, "uuid": "41e6ff01-04c1-482c-9fef-04f3fd7a5ca5", "value": "9771ee6344923fa220489ab01239bdfd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619139, "uuid": "c4eb3ad6-65f9-4219-9d4d-c44ab5684fe5", "value": "196608:ifefPn8Xtv0AtJZzXtv0AuXtv0AdXtv0A1Xtv0AzXtv0A9:qtPZbtstdt1tPt5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769619139, "uuid": "19f3ac2e-d704-4ac2-96b1-495218010a69", "value": 15369040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619139, "uuid": "4ef09df7-2cfe-46b2-b0d2-3f2f1ab92a29", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b58e2e51-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769619139, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619139, "uuid": "c2fbc4bb-ea9a-47bd-a361-32ac696b5f1d", "comment": "Malware payload", "value": "18f7f57f9c6ba1582a63f42d51d6355e", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619139, "uuid": "b1ff49a8-4c7f-4dcd-a928-a8317259b9cb", "comment": "Malware payload", "value": "9b15d1a2119c998c4d4015f6fcc6726646b730e9573045fd980ff8fe4c530422", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619139, "uuid": "37b53fe9-0ecb-4647-8005-13f4b287a40f", "value": "T156F59DD2A7A600E8E977F23C85468117E7F2B817537097CF16A48A761F236D12B7E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619139, "uuid": "9640ab0c-4a37-473a-8cf6-023ce552c9fc", "value": "a41de816070f4232d93c4e8ee8f581bb", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619139, "uuid": "e0efdaae-b59a-4fb0-b845-ab6bb7cf6a57", "value": "49152:l9dZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jx75le1:NHvfGfZvZj1/N/z/o7be1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769619139, "uuid": "e9075fbd-cbf4-4b3c-a3b2-a9a361b714e2", "value": 3606155, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619139, "uuid": "7c8958dc-50a8-427b-924b-b1ec9edd1715", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b59cafe9-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769619139, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619139, "uuid": "3588a888-4b24-4018-849e-568e401cd26e", "comment": "Malware payload", "value": "da1848ca828186f3a497589b69fcd8e8", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619139, "uuid": "7ac1481a-007e-4ead-a909-b8374c94800d", "comment": "Malware payload", "value": "cace381e9f84fa8c23a7bb7121c26c5aa409cd28b6613133f22d2374520c58ae", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619139, "uuid": "810cfa99-83b1-415a-87c5-325ea206c1a4", "value": "T1FEF59DD2A7A600E8E977F23C85468117E7F2B817537097CF16A48A761F236D12B7E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619139, "uuid": "3c85f854-5b84-4cbf-8fd9-5215fed9404f", "value": "a41de816070f4232d93c4e8ee8f581bb", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619139, "uuid": "6ec0a355-c6f7-478e-b42c-a53e85f94db0", "value": "49152:AdZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxL5lN1:0HvfGfZvZj1/N/z/oLbN1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769619139, "uuid": "b985eb81-c1c2-438c-880c-1db94a7c360c", "value": 3607691, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619139, "uuid": "0af31987-7666-49d3-bcc0-8d26da4c6b5f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5bdd771-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769619139, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619139, "uuid": "83c900a0-725f-4122-ad41-39a6d64a5862", "comment": "Malware payload", "value": "d90de1b1410ea7acc4d889839e91ee52", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619139, "uuid": "921357a8-6ba2-473b-854c-6d33312c980a", "comment": "Malware payload", "value": "82606578fffea202aec7106e8f5095948bedeabd4c7f2497647f28ad9315b2d5", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619139, "uuid": "0b82acf3-8ddb-4ddb-865b-cbaf9f9cfd88", "value": "T189E63340FFC35CF5EEC6157C406AA77F1A35A5129339CAD3DB801511E8E2AE1AE383", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619139, "uuid": "7b52918c-e46d-4dfd-a87e-bacbc602780a", "value": "c4dfd81799750b8216e23427ad6f5f1c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619139, "uuid": "eb0ea00d-b898-411b-813d-250875160ea5", "value": "393216:k9A8G8skEJ8EnQ5lNKPVm7BCl5z/dr7Fq:eA8G8bBEQTwPM7BCl5Z7Fq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769619139, "uuid": "df7f434d-43a2-4ecd-912d-073b70c48c10", "value": 14220507, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619139, "uuid": "286fb205-7059-4259-ac4e-dc92e01fc53c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5cf61e6-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware payload (MeshAgent)", "timestamp": 1769619140, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619140, "uuid": "f7404e5c-1d18-4db5-8dc9-31709385c66c", "comment": "Malware payload (MeshAgent)", "value": "b463a56067c101651d765e747082f264", "object_relation": "md5", "Tag": [ { "name": "MeshAgent", "colour": "#985f9d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619140, "uuid": "64f52fc7-7ecd-4aa6-b9a0-2f27534ecdae", "comment": "Malware payload (MeshAgent)", "value": "e2bd160a09a1cb83b5810e2a9201946015ba7a8086756bf45911c76044b555e0", "object_relation": "sha256", "Tag": [ { "name": "MeshAgent", "colour": "#985f9d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619140, "uuid": "d1495b8b-ebc8-48ad-a837-bc9687aa28a0", "value": "T1D9F57BD267A600F8D97AF23C8553921BE7F2B82713709BCF51A54E650F336D52A3A7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619140, "uuid": "f7b9ad53-14bd-4b4a-978f-ed54ee0f2ece", "value": "fb0a8b4a81655f744a37af985e009476", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619140, "uuid": "dc97291c-64da-4251-8e9a-e26e01978b23", "value": "49152:xdZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxo5U:7HvfGfZvZj1/N/z/ooi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769619140, "uuid": "d8a6a109-ae4e-4a8e-a318-c0f095bbad45", "value": 3570768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619140, "uuid": "4a8d53a7-6cae-4e26-b9ad-dd4ea64dbc6f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5d19576-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware payload (MeshAgent)", "timestamp": 1769619140, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619140, "uuid": "ed16b11e-8411-4ecb-9fd5-bca5e12ea9e1", "comment": "Malware payload (MeshAgent)", "value": "4590f3463b7e9338d3e974e6b9f71a04", "object_relation": "md5", "Tag": [ { "name": "MeshAgent", "colour": "#985f9d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619140, "uuid": "dc2e1616-8ab7-4156-80b0-1691f65a187b", "comment": "Malware payload (MeshAgent)", "value": "28067e637f07f6f8b7f07fcc6ef49218f3cf14c48c117b361f7a5170f2d6bc35", "object_relation": "sha256", "Tag": [ { "name": "MeshAgent", "colour": "#985f9d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619140, "uuid": "37da12e0-1be0-43b0-99a1-5f837f5d8001", "value": "T123F57BD267A600F8D97AF23C8553921BE7F2B82713709BCF51A54E650F336D52A3A7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619140, "uuid": "45e188e4-e1ad-4eb7-869e-ca0cbe7a4950", "value": "fb0a8b4a81655f744a37af985e009476", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619140, "uuid": "12b0cc4d-d7cc-4aa8-b9eb-aea8e88309cf", "value": "49152:xdZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxo5L:7HvfGfZvZj1/N/z/ooZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769619140, "uuid": "b98c4bc8-3902-48c8-8eb2-cc78b718febf", "value": 3570768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619140, "uuid": "e6cb1f5d-dc75-4aba-85df-5fc136f15f29", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5f32faa-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware payload (MeshAgent)", "timestamp": 1769619140, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619140, "uuid": "4f56391a-093f-47e4-8115-cbde2926e5cb", "comment": "Malware payload (MeshAgent)", "value": "ca2ba94cf6b3bc3c8d9e3a2251ff4dd2", "object_relation": "md5", "Tag": [ { "name": "MeshAgent", "colour": "#985f9d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619140, "uuid": "f50ff083-cdda-430a-ac45-82d141b7a22c", "comment": "Malware payload (MeshAgent)", "value": "19cec116f61bb5e7f07ff44fb6bc87127bf07d9c43fcb477475a16641b5ef7ca", "object_relation": "sha256", "Tag": [ { "name": "MeshAgent", "colour": "#985f9d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619140, "uuid": "58c58ded-8f64-45ed-96c5-6d343475f987", "value": "T1E9F57BD267A600F8D97AF23C8553921BE7F2B82713709BCF51A54E650F336D52A3A7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619140, "uuid": "542e1576-0d38-4c2e-bfba-38ea9f825a65", "value": "fb0a8b4a81655f744a37af985e009476", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619140, "uuid": "6feb44c5-e14e-44cc-a575-c47f71b1d221", "value": "49152:xdZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxo5s:7HvfGfZvZj1/N/z/oom", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769619140, "uuid": "b149d47f-0cc4-4b5d-a32e-fd554fe67339", "value": 3570768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619140, "uuid": "dd6ccc4c-a76b-40cc-94fe-42c93048e6c9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e9632a6-fc6e-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769621006, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769621006, "uuid": "7c6f57a2-912c-4350-bcf0-4ab54de2433f", "comment": "Malware payload", "value": "23e4090f2ca73ac78212bd69cccf4543", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769621006, "uuid": "32534530-d0f5-4b25-9fe1-e34e05b5cc17", "comment": "Malware payload", "value": "0750cef10b74193d1494718f84148a00a7a492e85f5ca1d27e5cef7611dcefb2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769621006, "uuid": "e449d1ec-9b42-4d5b-8cde-adbe95960dd0", "value": "T1A0E31945FC519B16C6C662BBFF4E428D772B17A8D2EE31039D256F20378B95A0E3B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769621006, "uuid": "a827b5c6-c413-4695-9f52-17a0cb7fe858", "value": "3072:MzBs49tbMgxKZJ9Lwj5hMnXlU/vQP9EfSf4PTRLil6+GXH9VWES:eBd9xMggZJ9LqrMSQVi64bRLo67dVWES", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769621006, "uuid": "8c617515-b4b8-4fd7-9427-623252569442", "value": 154168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769621006, "uuid": "1f5fbe40-b449-40a4-bf62-d49a1370f934", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93ee4795-fc6e-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769621230, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769621230, "uuid": "fb949145-b858-4122-8e0a-0b01b86dd623", "comment": "Malware payload", "value": "36e641f6f5aec5f0a787202e18fd9d69", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769621230, "uuid": "8ebeaf60-24d0-4aa3-bc27-644478133e7e", "comment": "Malware payload", "value": "36f43124c47cc2ad5aef5bee90be2760d5f4965af1c6c78756e1e2feab1fb33c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769621230, "uuid": "9029f187-d109-4dfd-887d-9fbe108e21cb", "value": "T1B4E31945FC519B16CAC662BBFF4E428D372A5768D2EE3203DD256F20378B95A0E371", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769621230, "uuid": "b453ba6b-d8db-4d09-b0df-794840befea4", "value": "3072:Le4xyQkeipAxA66jn0p5BPGK4NErAn7cwVMLopy7K:q4xyQOpAxH6SneK4+rA7cGeok7K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769621230, "uuid": "eaf9ad05-c425-4463-bf47-916a043f77d2", "value": 150232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769621230, "uuid": "64cedc6b-1846-45e1-96b4-a3fabfae68f8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce8686c9-fc6e-11f0-8b2a-82aee05be84a", "comment": "Malware payload (DarkTortilla)", "timestamp": 1769621329, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769621329, "uuid": "32fb732f-6bc8-4c02-9798-d879007ad1a2", "comment": "Malware payload (DarkTortilla)", "value": "01e32e7aaa7633cfc2e8868c8028b011", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769621329, "uuid": "5bcd71ab-3a7c-4e01-858f-119cdb635d3d", "comment": "Malware payload (DarkTortilla)", "value": "7419b292f77e62623a70a50d129c225c4d26fb53282f573f4e7f57242bbf946f", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769621329, "uuid": "60821f82-1536-4f1b-af69-6cc031814d15", "value": "T13365F00913E58198F4BD9B34A27B361547F0B41BC836EFAFA38421F98D2579AA1533", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769621329, "uuid": "10280ab0-1c6a-4c0a-a065-ac2a33dcf5b0", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769621329, "uuid": "06baf502-a9d3-4d9d-914b-744ee2e0d540", "value": "24576:Y1gtfMs1hsAdBen2pqpCCnRveYepqMKDmfC4KOSSn2z6LIG8kA:7tfTfezRveYkqM3fC41p2zG3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769621329, "uuid": "d2a929bc-238f-4d39-97ec-d91fdda4e0c8", "value": 1475584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769621329, "uuid": "6cc79200-e027-4986-9f4d-37c5635dd52b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1a3e469-fc6e-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769621387, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769621387, "uuid": "a0ef8cce-4bc7-48d6-8565-4e74d01e4599", "comment": "Malware payload (Mirai)", "value": "f5ff72995c9e6d898748cffdbe1955ea", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769621387, "uuid": "02112689-3c6f-4aeb-8f7d-555e5055ddcb", "comment": "Malware payload (Mirai)", "value": "f0d915be65444a278563c7ae7624bb7750a3d43c354dae0736b3f2ab999f25da", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769621387, "uuid": "61bff9b8-27c5-4d15-a5c2-ab55fbcdf718", "value": "T100034B278976AB1BC6D4737701D783A1D0FB1B842244171FBD0B4C9EFEB53406AA67", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769621387, "uuid": "f06bc696-4ffe-4dd8-bade-b8e96864818d", "value": "768:fLSz11m9Ef50F1b5uHqWJe5HIQ51JG/gm:fLSjJ50F1b5uHqWI5HIQ51Jfm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769621387, "uuid": "c1c34837-0f88-4636-98c6-fce60bba373b", "value": 38548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769621387, "uuid": "93c7d226-1e64-4aa1-bfae-8746c2dce128", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4749d00-fc6f-11f0-8b2a-82aee05be84a", "comment": "Malware payload (PhantomStealer)", "timestamp": 1769621795, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769621795, "uuid": "1fffeea1-f8a2-4f74-83b2-3f229e89f958", "comment": "Malware payload (PhantomStealer)", "value": "abc7d8be5e6bb3423579b5ea302b822e", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769621795, "uuid": "d6cfe0d7-aa39-41e1-abbc-61f8f0276d43", "comment": "Malware payload (PhantomStealer)", "value": "a0a642f5131f1d82cb91f1237deb6b0002b0e6f178d208295b5b7fe39cedb1d6", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769621795, "uuid": "59de174a-c729-42b5-99f4-27dbe5460711", "value": "T14595010413D88A48F87C9B788537370157F0B41AE976EF9FA3C420AD1D397A99A977", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769621795, "uuid": "df9b6717-3bcc-475d-bb3d-ddadba7c932f", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769621795, "uuid": "df58c24a-fe1c-4702-934a-9a400a31fe60", "value": "24576:yyhfMs1hsAdBen2pqphKIcsjU6UsHMdrE6Jv3oqriYg1Ai4J+HZx8V:yyhfTfe5vjxUsHcJv3qb8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769621795, "uuid": "5786e976-34b1-4c91-939f-61d65209315e", "value": 1896960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769621795, "uuid": "a770d7d9-ffc2-4585-adff-d435801911a0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23664134-fc71-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769622330, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769622330, "uuid": "ff19145e-d56a-4ff0-bd90-43e248d73374", "comment": "Malware payload (Mirai)", "value": "c6bd2fa017568b6967576dd84ba6b546", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769622330, "uuid": "62dd9ee7-cd0e-483c-98f9-da6fcb4f64d4", "comment": "Malware payload (Mirai)", "value": "8a3f7e074169f25e4c635ae59e66605d3f68fa771b5f4bd40515e0870059bf5f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769622330, "uuid": "a40de129-3afa-435c-a1a1-97d742134e1f", "value": "T1EC14861E6E328F7DF368873447B74A34975D23D627E1DA84D1ACC1152F6028E681FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769622330, "uuid": "d0f6bf12-473c-4209-857a-e04df131be0e", "value": "3072:DLhm8vqdCRnx+yiOZ23phlHHRBmn9KNLZAdiwHdzqJnSb:DLhm8vzriOM9RoEux9zq1Sb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769622330, "uuid": "c6c69f6d-0a9a-4029-af89-530711d73c02", "value": 203416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769622330, "uuid": "1b9aa976-734e-4b41-bda7-3849f32f5d81", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca134b84-fc71-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769622610, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769622610, "uuid": "752ec964-9149-4ed2-986c-ec8c9adef0d6", "comment": "Malware payload", "value": "2a3a04e217c2ca52f40a8b32871beda7", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769622610, "uuid": "1c3f808b-b159-4c30-bb8e-b95b3c23ac9d", "comment": "Malware payload", "value": "0715e0493ffa012a9ff1092d79408e9478b831d93d78ecb64fb860800755ec14", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769622610, "uuid": "537734a3-a72d-469f-98fc-6745ac8bef45", "value": "TNULL", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769622610, "uuid": "cd70b397-31a4-40ce-bafe-69da9cea71bc", "value": "3::", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769622610, "uuid": "c8845829-c27d-451a-be0d-57cc78118e32", "value": 11751424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769622610, "uuid": "e05045ee-329e-43ad-8f9b-4ad38e80bbc2", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7341c3ca-fc72-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769622893, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769622893, "uuid": "550fe263-b726-4750-8180-13518d059dbd", "comment": "Malware payload (Mirai)", "value": "a6a0b9a2a0f2f281f9d266d56bd4fb2c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769622893, "uuid": "b94a797d-cca7-4b48-8c6c-b0a395a4e31a", "comment": "Malware payload (Mirai)", "value": "291725b2b9e8f68adafd42f2065106657c370e690c4cd9129856973c072a9d5a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769622893, "uuid": "b6492f31-4677-4451-937f-1bd452df0cad", "value": "T14B230160D4642B25FAFEEEA049EE04C226FA4F6BFB91C546D2C5E7603252637DF704", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769622893, "uuid": "2674aa7f-53c7-4e71-b7d4-c112203a0ba1", "value": "768:MfRMmHNUTCiGJgOOvX6UsKGxVGc+XX/i2c5+hhzwbvd0V3B4uVcqgw09Uc:MfJyGJg7sKRcC/i/5+IvdKB4u+qgw09d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769622893, "uuid": "6f324d27-59b5-4b6e-8cb7-6c92e34242ec", "value": 48472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769622893, "uuid": "52a20c6f-cd32-4911-9851-ef860ca96cc5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb5b05cb-fc72-11f0-8b2a-82aee05be84a", "comment": "Malware payload (QuasarRAT)", "timestamp": 1769623122, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769623122, "uuid": "6ba88d56-e592-4f4d-bbfc-7b79f88a1142", "comment": "Malware payload (QuasarRAT)", "value": "b0e96e217c9a50f9544cadc899aa6ece", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769623122, "uuid": "93b14402-b0cd-4ba0-8baf-3f9c1c34f598", "comment": "Malware payload (QuasarRAT)", "value": "83c68b7f1cc15001fc5888f47553d8fbd3573dc8b83327ff778f63e7c5d3f079", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769623122, "uuid": "f49c20b9-9efa-4a76-a7c1-60f25e6ed68a", "value": "T19246230927C68958D53CC374807AAA8357F0B58B6E21CF5EB3C927AD5E12396B7137", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769623122, "uuid": "07bc2143-c738-44cf-86c5-29fb3900cbc8", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769623122, "uuid": "e72c0a8d-9364-4107-9952-fd3a7a1891c1", "value": "49152:OCfTfejkFAn/2Gnw6nxwXqiMOrENcitrFkPvhGR7thSoWYfy8jg78uoX5UQq32/r:5tQ/2a9Or4cW+PvkNDHmBQq32yeDGWJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769623122, "uuid": "a17f502c-60a4-4b45-a953-fca61b376211", "value": 5712384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769623122, "uuid": "2d8f120a-6031-4045-876d-a54c5770fe13", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0bcb8a13-fc73-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769623149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769623149, "uuid": "1fa9b692-90d1-43b4-a0cf-2766f00a257c", "comment": "Malware payload (Mirai)", "value": "d61159bff133c48330e781416eb41227", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769623149, "uuid": "c8ee92f6-effe-47f6-94a3-e466c006cfcf", "comment": "Malware payload (Mirai)", "value": "26f1be5aecca093750151d0b0f907e1a870e36d7ae747e33875bb90bd00d93df", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769623149, "uuid": "4ff24e86-8cfe-4062-8a0a-6d8695f3d0c2", "value": "T16E935D49F753E1F0DD4606B0115FB73D9674EE224024DE69DB94BEB7EC32A02A21B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769623149, "uuid": "e86861c0-ffe1-4068-ad24-56f365de7238", "value": "1536:6L+jK3ibsHd2AWausTZlMTDCypOkn/OhdtIGDT9Yjr6gU531IiyvCmr:3Yx92dtIlMTDnOksvTygSi03", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769623149, "uuid": "36021f1e-cc2f-4c22-963d-96a357bfdc0f", "value": 96680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769623149, "uuid": "749ac819-d9de-4011-bfc0-adcf9f55897d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "695fc2ac-fc73-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769623306, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769623306, "uuid": "65e2b6f2-2270-485a-84a9-5eff3bdffee6", "comment": "Malware payload (Mirai)", "value": "b8f53eb684b9f4072a88444634bb4501", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769623306, "uuid": "701efc5e-537c-4c8e-ae14-aad0e43fdcbc", "comment": "Malware payload (Mirai)", "value": "959b05de2a625de27188597ac85b8fff26b162d5174acd01ad3d4651fabbb899", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769623306, "uuid": "77118b5c-0e94-481f-9a95-012f96f8c4f3", "value": "T134E3F649ED41AB00D5D536FAFE4E428973534B6CE3FA7102EA245B2123CAA6F0F765", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769623306, "uuid": "4365d837-f1ec-4a02-8128-b89db2454f79", "value": "3072:F7Yinkzc6QgeTRyiJyjaFIOxps2WZZUDaLudiWV8w2ElGfhQzlI11tUyhD:VYinkzc6mTRyiJ7FxpsHyDaLYiWV8w2H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769623306, "uuid": "e5d1a018-fb26-46b6-8a49-aa99faaabdb4", "value": 145128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769623306, "uuid": "9642c401-a14d-4193-86df-e7510f2c15c4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3043121-fc73-11f0-8b2a-82aee05be84a", "comment": "Malware payload (a310Logger)", "timestamp": 1769623457, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769623457, "uuid": "1e69fce2-16e3-488d-baf7-17382f168b5c", "comment": "Malware payload (a310Logger)", "value": "00a03fa3acbedb19ddbedede4fc36861", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769623457, "uuid": "5d995ff5-45ff-4c0e-8ff2-e66d2f4bf0a7", "comment": "Malware payload (a310Logger)", "value": "43885d920258d6685b0896c6214b22b5c9f242b1ab76e75797abd91b09c52810", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769623457, "uuid": "a3e4e9d2-beed-41f4-bbc2-f8994462e1f0", "value": "T17755F10907D58598F4B9DB34A37A361547F0B41BD836EFAF938421F88E3679AA1433", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769623457, "uuid": "c4c9bead-7947-4b26-a332-6d73759c480e", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769623457, "uuid": "53e0b85e-9402-484d-a6c8-f568c80b2a00", "value": "24576:3fMUdfMs1hsAdBen2pqpOpojZ6tm48Y01KObVQezrdD:3fMUdfTfemOj94pGvQeN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769623457, "uuid": "84cd1c3a-8453-4ea9-9bd9-834f10c6b8ec", "value": 1405440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769623457, "uuid": "e90b66d6-8e74-48ee-8013-dfa26a36517d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c80715ad-fc75-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769624324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769624324, "uuid": "ed84efc8-38da-4e10-b43a-b9a6030b461e", "comment": "Malware payload (Mirai)", "value": "8701fc73fb3527b49dbbb391ddda46f0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769624324, "uuid": "61a1a368-6e29-4996-b406-372159f111dc", "comment": "Malware payload (Mirai)", "value": "f3616b5ccb6459270ba9e7cfaec30c78b6d44e491d0f40bcc2f532ed7eb8036c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769624324, "uuid": "39685fee-a75f-48c2-ae31-0768f3d92ed5", "value": "T1C872CF6527E83E32E73094734A7C48CA61DE1FFC96A931762074C958E640519B2F8B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769624324, "uuid": "10cd4ace-eb1d-4c28-b9b7-91dd6b196699", "value": "384:OMuv2LnYA6tTNCDxNNeCTkBh+hYacKkr6bBzhymdGUop5huBlD:IesA6ONnTeh1acOs3UozMBlD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769624324, "uuid": "4b0c6ac0-604c-43fa-be98-57480cb696b7", "value": 17408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769624324, "uuid": "a6a02e3b-b842-4ff2-b930-3d693fac721a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e994cc9-fc77-11f0-8b2a-82aee05be84a", "comment": "Malware payload (SalatStealer)", "timestamp": 1769624872, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769624872, "uuid": "6f071970-91ed-4074-b648-a110e3e553f8", "comment": "Malware payload (SalatStealer)", "value": "23f65f01e4159223cc5cc9c7acdbc23c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769624872, "uuid": "159733ab-cb46-4ea0-9378-42e38c890415", "comment": "Malware payload (SalatStealer)", "value": "c6f50368d086b86306d12daeb3f2e58f190faa12a4c69e23a58f901f3240e04f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769624872, "uuid": "c96d8601-a5f2-4c89-8b17-f07e33182e66", "value": "T1B9563393B7C5E570F1C006BF118EE967A8E76B76130826DB0ED09734B42B1BAB53D2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769624872, "uuid": "31964dd1-aa5e-4dc8-8c29-6d8b41d835df", "value": "f6baa5eaa8231d4fe8e922a2e6d240ea", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769624872, "uuid": "5edf771c-95af-42fc-8dfb-89acacd74f31", "value": "98304:1v5WwePSa/MmcoURPj4nkZHYr0oO9HLzfe3O4t+LgTlW0fEEYxnCyV1RMmILuq0z:1vd2z0tUOHy07LN48OKBnCy7aJLuq38", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769624872, "uuid": "129193d8-6826-4ef9-87e6-564c0690390d", "value": 5995080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769624872, "uuid": "2bbda457-efbd-42a3-a680-8815c5dfa8ba", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f212ddb3-fc77-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769625254, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769625254, "uuid": "5e2f8b41-bf1b-45d5-9d99-78c27cf0bd53", "comment": "Malware payload (Mirai)", "value": "b2230a8541ec648f0241f643ef376d39", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769625254, "uuid": "3aafd9d5-1d9a-4b11-a8fc-611c21cfc47b", "comment": "Malware payload (Mirai)", "value": "a93d028cd0383852dca208935fa57bd4aaf88c0db6359839108282924bce0956", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769625254, "uuid": "e85e079d-e4eb-41a1-a0cd-c60b54b86242", "value": "T12DF31956ED819B11D5C152BAFE0E528E33131B7CE2EE32129D246F747B8A87F0E3A4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769625254, "uuid": "ec0eb8ef-6fd1-4a44-aaff-1e67972b3f02", "value": "3072:PDw5Qcqgs41ZXkP2F55QajQJXjLvbaohEXFdZTfpPjgE9MT3egQ:Lw5Qcq41ZXkPk9KXjLTa2EVPjpPjgpT4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769625254, "uuid": "260c3942-1096-4c65-9467-f2add2d18c0b", "value": 166548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769625254, "uuid": "f50fed56-aee2-4c07-b0f1-68cb8a95298d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9f1574a-fc79-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769626099, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769626099, "uuid": "2ed6b5d3-1c37-455f-9c33-ebe8ec87ca42", "comment": "Malware payload (Mirai)", "value": "079a6b18158a0f95c350ce7a052839ff", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769626099, "uuid": "e18fcc12-d51e-4efd-be3a-017ea2e69269", "comment": "Malware payload (Mirai)", "value": "98ed64e307b12f20fb49a22a06c7b08a672fdf1a47aba67817368cfc56dc60e8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769626099, "uuid": "b0fc59f3-0e1a-4dfb-8c42-ce5a1b1a47e0", "value": "T1FFF2021A73CB570ED98CE4FF018C88D75C6AE919472EC4462E092B3B5BEE2A650345", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769626099, "uuid": "2928cb22-9f06-4d36-af88-973f61c3a2e0", "value": "768:V6pbw8ibUESyiwBm9oyGC6HfKO0KVlEOMH8qg/96lF2:V8RibUESyiym9X4fKO0KVsHJk62", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769626099, "uuid": "49eaed49-dca7-48ba-9098-6c4828f581ed", "value": 34652, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769626099, "uuid": "b639b347-a3f6-467f-84a4-d65e2474db02", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4377080d-fc7a-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769626249, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769626249, "uuid": "f834f19b-65b8-48da-be41-fb7782ccfa8f", "comment": "Malware payload (Mirai)", "value": "d5f2c8ce9d5597dfe3958c05f1d99720", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769626249, "uuid": "04b0f145-ffe6-4f3c-b8de-a4523e6f3fdc", "comment": "Malware payload (Mirai)", "value": "7ce444ec23ab9186c9855b0e04524239baad5cc1dc8b8b07e68d35d98190ac64", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769626249, "uuid": "07aff9b9-15f8-4e0d-a174-2ebd56afdc53", "value": "T1F9E33A02B30D0947E2632EF43B3B27D193DFDA8125B4EA44355FAE4991B2D32558AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769626249, "uuid": "e8a651b6-794b-48c2-b449-a219088bd440", "value": "1536:WHLZS5yXVZfXAcQcqfrnxC5nMAZ9GxT67ddfaEvWGfq/+7cuN+LH3h4zcGCWMdFV:WrZS5SvAxxFutR9TvlM4z2WSpepuJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769626249, "uuid": "aebd6943-8715-4124-898e-318b34f86ae4", "value": 154348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769626249, "uuid": "64841f91-87dd-4399-802b-6ae776a647dd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c669ca5a-fc7a-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769626469, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769626469, "uuid": "8bb808f9-e978-4031-8b1d-765cfde727bf", "comment": "Malware payload (Mirai)", "value": "468d79b1e5ffcfd1822bd9d29230d6e4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769626469, "uuid": "e4b17434-16db-46d6-ac6f-007645410e3c", "comment": "Malware payload (Mirai)", "value": "644de80b6ee185e5b37edc8d9af882f58c9f0ae459f254b24215a32741f73ba7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769626469, "uuid": "d0c2df2b-64e0-45ef-b79b-a0721d8cc22d", "value": "T173330249DA23FE274620DA32EB9C128777BD7F70B66F75262D044205368ABC553E88", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769626469, "uuid": "042031bc-89ce-4abc-85e0-b87db4078ddb", "value": "768:A+yKm9I6evJiacF5tfFWa/HuhSqSzZDJjbWb0AGfKSRrXwv5obS3f7LCm9q3UELX:UIjALfca/OYrzZD60pWvvz+LLX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769626469, "uuid": "adce5508-6e97-4809-8f32-090134b6df9b", "value": 53632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769626469, "uuid": "acf93d9d-4e48-44ea-bf64-b0d83635bd0f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ddd73c93-fc7a-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769626508, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769626508, "uuid": "3fcb21d1-d4eb-4ec4-82a4-5fcdfc26d423", "comment": "Malware payload (Mirai)", "value": "0937da836fe4bf543c3f8445071f9805", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769626508, "uuid": "d60b5504-e5ec-4602-b57d-2d4133d0a859", "comment": "Malware payload (Mirai)", "value": "6a9ce7819f97757913825e139c27ee5a9cf8e93991d037286a4cd0d72519c54e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769626508, "uuid": "ff6731a9-de56-4794-9ea2-4017273e2b01", "value": "T19AA3ADDBB7475490C8A64BF00BC78BDD3E2762119E27C4E77C0E29B9587A1DF89027", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769626508, "uuid": "7ef9c27e-2924-41b8-9786-dc2071fee564", "value": "1536:TVaQBVf0+1fdC67krKgk/xtCeyHtong4/LWc:TVaQBVfn1fd57VBzCeyHtwg4q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769626508, "uuid": "bd1c439b-1f94-43ae-9cb8-83ff493331db", "value": 99704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769626508, "uuid": "4fac3957-db29-4d19-b37b-337d89827f7a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b7e885b-fc7c-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769627068, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769627068, "uuid": "5a416488-85a6-49b6-80ef-c724d8c871e4", "comment": "Malware payload (Mirai)", "value": "18061de1be242b22d92c9ca9f864cd73", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769627068, "uuid": "d787154d-c98d-4cb7-bb3a-7ba6d7519cc4", "comment": "Malware payload (Mirai)", "value": "e368bd223868997613b2ba853fe28aab85eaf1033e42e689c3ce506ccd044293", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769627068, "uuid": "da782fb0-0d06-4fde-ae36-121f7575bded", "value": "T1D423F1D413E998719B70EB739CBB0A4AEE17047461FB7777D7203A5E424E02AC6746", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769627068, "uuid": "3affd6c0-d8b1-4e8e-8719-c32080fcc34a", "value": "768:Ldinmc5qiTYs12rcXC3T8oXlNAU44X/2TBgr3nQkT2uj6vYsckh08fGjjGs3Uozu:LdimTG2riCLkeP2TY3nNT2a6hcKejjrK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769627068, "uuid": "a5173bab-d18c-475d-9279-a2057bf632f8", "value": 49128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769627068, "uuid": "9915ff94-f80f-487a-83a0-c4271c33ade4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4aac0882-fc7c-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769627120, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769627120, "uuid": "24171aa7-4dea-4ee8-b64c-3267cda4925a", "comment": "Malware payload", "value": "2aacd33756b52156a798f599def5a688", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769627120, "uuid": "708d4fac-387c-42bc-b478-b55d97e8b816", "comment": "Malware payload", "value": "7731fd60ccae2b3652c899be8420c6a3e1ec320c088c08d62f0f77441e86ddd6", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769627120, "uuid": "20b3819f-ee6a-49d5-9cbf-8a123e7d5186", "value": "T1D8852362166B0213D9EF4D336A5EBFC536EF72E10F029D3505044CE22552B61FB6BA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769627120, "uuid": "fcce39f7-f16d-409d-bd4e-f07774578354", "value": "81bbda50a2982e0e014acf537665f7af", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769627120, "uuid": "f38e959e-bd76-4bd7-bc80-8ccb1f3b05ea", "value": "49152:klDViRp1RfVO4a0z6N3RqHpf4z8ISO1rgEj1pKR:kQLO3yq294zB11r7J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769627120, "uuid": "63368724-3f61-408d-be71-5a9f38979ed3", "value": 1851392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769627120, "uuid": "d3f98725-24d1-422c-994d-c42fc642b5eb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e90e7387-fc7c-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769627386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769627386, "uuid": "8b024552-64d9-4b06-8285-7fe4a37b8f0f", "comment": "Malware payload (Mirai)", "value": "d5b9740d0d0881b9b37ac5a1977a3678", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769627386, "uuid": "3e1922b3-adce-46d3-ad75-94f0ab215b7a", "comment": "Malware payload (Mirai)", "value": "22cd6940237ec732bf5abc6685f9f969492a0930b60ae14dd327310611298a77", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769627386, "uuid": "2586c832-88b7-43db-9b4b-faadc1c035d2", "value": "T13914C70A9F510EFBD8BFDE3342E9070635CC650722A97B363674D524F64AA4B4AD3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769627386, "uuid": "a02315bb-a48f-4fe0-8173-29e00e48e246", "value": "1536:SFtUxW4oQqOWcDxRMeRpvz5WmYgWGOJeYH+n9rip+FfojECrl6xZ16zBzEII1OMH:Rqap471ef4rUAwM+Hh/OV2gv86GP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769627386, "uuid": "dc66ff4c-15f5-4b47-966d-61c669e32fae", "value": 206360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769627386, "uuid": "df2ef190-ad37-4622-86bd-6f76a7b86106", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4310040c-fc7d-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769627537, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769627537, "uuid": "023060be-48d1-4a47-a045-d3f3d852b664", "comment": "Malware payload (Mirai)", "value": "ec5c7b4c40f63df2f4076a169a7dc285", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769627537, "uuid": "23c9b3a9-ff5c-4aa1-87f1-61a5f278371d", "comment": "Malware payload (Mirai)", "value": "bf35d7b55839426e06de89b4ca4b96c345915d10ea626ea86e0c22ce75e98d76", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769627537, "uuid": "bdfb9157-8472-4c98-b012-428a651c4eb7", "value": "T10E5178D92372497B1D34EA9BE66AC44CE261E5DF0B9E6F5428DC28B840CCE1A5001D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769627537, "uuid": "18b71e58-0dc0-456b-8b6d-26a9fe42b5eb", "value": "48:vj3r3rj3x37j3w3Xj3a3rbj3n3fj3Ah3AuJj3sQ3suj3Y3Nfj3M3Vg2j3W63W0/y:vTbrTx7T6XT0rbT3fT4rTHLTiNfT2Vgh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769627537, "uuid": "9ed41f72-fdf8-45f0-a4f4-564bc768c4ac", "value": 2466, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769627537, "uuid": "4a7cef51-ff02-45b2-b6b9-c2cae11d2502", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "393f0114-fc82-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769629668, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769629668, "uuid": "bcf568cf-08aa-4a7c-8761-ab5649db92aa", "comment": "Malware payload (Mirai)", "value": "6f511cd51c4097dd463cd27dceb6b96f", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "hex", "colour": "#cde6b5", "exportable": true, "hide_tag": false }, { "name": "hex-loader", "colour": "#8a18e3", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769629668, "uuid": "fbe71e61-ee8f-4ae7-86a0-360f2c329766", "comment": "Malware payload (Mirai)", "value": "b66fb87f09220c9c0c858cb5a934c8849c4b6df38778c89840c1a1b14f09375f", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "hex", "colour": "#cde6b5", "exportable": true, "hide_tag": false }, { "name": "hex-loader", "colour": "#8a18e3", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769629668, "uuid": "d1f71f26-29d2-48d5-a659-a8980e0e8825", "value": "T17C210E66B5D9EC72CB2601B7A2C19F4F2715C9E6595BFF07CE604803EC286C1D8312", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769629668, "uuid": "e191c0a7-eaff-4411-a4c9-5c5f1a31bf1c", "value": "24:FlmgMoJ5ZdWul6ZSiSZSLOUrYaxwAQqGrpkruQ6RMNfTh:f9xvZMgsSi0SLOUrBwAQqGpYHHNV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769629668, "uuid": "a21ae6cb-175b-4f83-ade6-0486a610689e", "value": 1180, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769629668, "uuid": "44b7eb84-1b28-4a01-a730-7be61ff7e147", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "960f2e84-fc87-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769631971, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631971, "uuid": "cc9328d7-8aa2-4ab9-aea6-a7f5820325c5", "comment": "Malware payload", "value": "55e2dfb82aeeb2e546043a4913389ed2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631971, "uuid": "d36560d4-83d5-4823-a914-52929b201089", "comment": "Malware payload", "value": "ffce43f8d771f3a62a8acf6afd0f6aafa8155e0957d05dcc6b64ae9eb3108202", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769631971, "uuid": "9757aa9f-1aa0-4a68-bcca-61fe440d6f8b", "value": "T1E81449C7F800DDBAF80EE73B88074906B130A7A114926A377167757BED7A1A5047BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769631971, "uuid": "74978376-7af6-4e49-afc1-d82439135cad", "value": "3072:3fz7bjuGQCwKHkbu5SxKX2/srFVmhvnyNxguJxWNWdEfzAuJQVV4jbi2LvHD5T0:vz3WvyNCuJxkW+5JQELvh0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769631971, "uuid": "1a47aa24-72b4-4b9f-89f8-773c7f45ef24", "value": 199776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769631971, "uuid": "2eff4ccd-6315-492e-9bcd-d4be715cf7c4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "961a5714-fc87-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769631971, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631971, "uuid": "224113fc-29c4-4bfc-8f45-1e3ddb3b0a6b", "comment": "Malware payload", "value": "6f3e4e990b41b0056183828e463f9516", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631971, "uuid": "92e88f07-3034-4afc-af3e-697ff4fedf27", "comment": "Malware payload", "value": "b8f6b53d0c2330dee76418f6666f742362d39e3ee1c320db6f26fb8bf996a283", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769631971, "uuid": "0d8df1a7-6e80-44c5-af71-f5a2f578cf46", "value": "T19FF37B73CC256FA8D624D5B5B4F48F785F63A85081872FBA59ABC2744083D8CF2593", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769631971, "uuid": "ed609552-903e-48e0-b872-db440606de32", "value": "3072:YV/ZFKpUBu3jFIzqZBrw7uELSBpTZ0W9EjkOk:SNuFIzqZpwpMZt9HOk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769631971, "uuid": "2807ee51-4962-4013-ae6b-6367eb787c67", "value": 166528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769631971, "uuid": "aefb48ec-2732-42e9-b84b-cf76e24d379d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "961aa762-fc87-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769631971, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631971, "uuid": "18f52230-51c1-49ac-ac77-f83ba1201170", "comment": "Malware payload", "value": "51e208491e2331a2c998991cc48b6760", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631971, "uuid": "0356b6ce-6e30-4f76-8741-7e3dff28356d", "comment": "Malware payload", "value": "8bf5b0d856837364297a6af3a64b6b70f7eef3291428d642aa36569b611965cd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769631971, "uuid": "a628a3a8-2992-44e5-8dbc-a0691ca3bc7a", "value": "T17834B65E6E228F7DF2A8C73447B74F30975D62D622E1D6C4E2ACD1041E2424E685FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769631971, "uuid": "41980bf7-cd84-4b00-af11-94cbd39f9728", "value": "3072:jRaiTqtLXskq9yObO194vpw7tBmwdPPTSa5KKPmp6:jJqp899yYOYyxBmmP35Kcmp6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769631971, "uuid": "5fde0569-0cfb-4956-87dc-20d2e89d4180", "value": 241380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769631971, "uuid": "67d24f3f-ca81-4d5f-9fc9-c73c066e77a8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "961b0a86-fc87-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769631971, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631971, "uuid": "0c822da3-62c9-4bd3-8697-7c44c3bc8166", "comment": "Malware payload (Mirai)", "value": "80669350a333a3b2c2ac97317ddc9357", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631971, "uuid": "1a29c08e-6bde-4f37-b7fe-34552db4b043", "comment": "Malware payload (Mirai)", "value": "ab4d6c1ddb8f9dc0dd1ecf20c6f6652bf5d85c6ce2b61022154945455ea97266", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769631971, "uuid": "23054ddb-39e5-486e-9233-f3a382ed0167", "value": "T10E246BA4FA0F6C52F2C6D3FD9A8C47F0391734E3C67699B16D1203ECDAA79D95A809", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769631971, "uuid": "9fef650e-a62c-4ddb-9ca6-4fc55856a42b", "value": "3072:9tT61EYrqXsWiEEZSt4rOEoaMtnSPQIXADNj7uHNIFBysftM3a+xq:9tT6kOWaMtnSPfwR7ut/sftZ+xq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769631971, "uuid": "feb1fda1-fe55-41e8-9a20-b51b75e8fbaa", "value": 223096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769631971, "uuid": "9e6bb836-a4bb-492c-be29-68f31a89da3e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "961b6f00-fc87-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769631971, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631971, "uuid": "16b5d4b0-51ac-43f6-94ea-fa62bda9c89e", "comment": "Malware payload", "value": "ced6bc55c7975b81829100b914fb57af", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631971, "uuid": "96a69cab-89bc-4420-8652-29a4f101a337", "comment": "Malware payload", "value": "7997e6274f6c2539c0179e7504b0ec6d2c4f07925e499c21cb38fe698e8ea4ff", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769631971, "uuid": "50f9167e-42e3-480a-ba1f-d6d4532cc7b4", "value": "T12D042A56FC419A22C6C762B7FF4E824837271768D3EE32039E156F21379B95B0E3A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769631971, "uuid": "811f38a0-dc5f-4528-9fc1-00daba74ca78", "value": "3072:B5/wmr7OyYNhEtfQRN46Fq20BONhS6oBM:rIw7OJhM2N46g200HS6oBM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769631971, "uuid": "9b45245b-0943-4cec-8a1a-75edad14b02f", "value": 178752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769631971, "uuid": "cc753421-1337-41c3-8c53-4ebb18278ee4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96219e61-fc87-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769631971, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631971, "uuid": "88b3afcf-d62c-4d14-8724-011c434c5976", "comment": "Malware payload", "value": "ac7284212f1d73e06889c31299cbce24", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631971, "uuid": "793443af-3185-4f46-a93a-b3cba0199809", "comment": "Malware payload", "value": "33961e7893f0e03b96850974db145e6917d06ba15b2428bf398a2df39f0c7dd3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769631971, "uuid": "024d51b7-4fe0-432c-8b14-7855c22ccfdd", "value": "T1C1C36C86EB43D0F0FA5A05F0206BEB388575ED310026AD5ADFF4FDB6AC61641625B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769631971, "uuid": "fc8e0346-17dc-4783-8765-0e3596f82751", "value": "3072:/nFO4wzeGnfJV6tgVI6W1WcmQyrD4Njw:/A4wzeSfJV6tsI6W1Wb3ANjw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769631971, "uuid": "985e32d6-9444-463f-927f-daf39794dbdd", "value": 123808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769631971, "uuid": "f6b5d31b-109d-4090-b641-c57dfff5bf75", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "962a7110-fc87-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769631971, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631971, "uuid": "92804832-c280-452d-bc98-4d1c79288d8f", "comment": "Malware payload", "value": "316dee725e42cbdb8d0f8f31c8a55855", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631971, "uuid": "08ea4f4b-7fdf-4a1b-bd3f-b403fe60bb67", "comment": "Malware payload", "value": "18d92432c267b1c37fc9f2703f4545a9f03bd3d52a8b4633e2e27a0f5844cc7c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769631971, "uuid": "8083a18c-d271-4b01-934e-3744d560f693", "value": "T114043B52FD519E23C6C716B7FB4E828877271768D3EE32039E256F20378A95B0E366", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769631971, "uuid": "88343ec2-ad8d-4546-8dbe-eac1791f6273", "value": "3072:LiT2gcnKP/kuZ4rqk5GG44eCqdBEVGCa/3FiZ:OTVnkuW1H44eCOBEMn/3FiZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769631971, "uuid": "35899862-6c89-4e1f-b29a-9ace6096f7e7", "value": 182848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769631971, "uuid": "df31b86b-d574-4d43-8c4a-d8a821c6385a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bba25de7-fc87-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769632034, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769632034, "uuid": "e8a86021-7c6c-47d8-9549-19f5a272d93c", "comment": "Malware payload", "value": "37e410c17da99f7d2797e59727803b05", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769632034, "uuid": "ca555914-13f3-4c8b-ba58-05e238da1991", "comment": "Malware payload", "value": "3aabfdab06c4f70a9f4ffb660947a6ac15c06595f26b1c27dbc578406407cef3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769632034, "uuid": "7e31f858-0c84-4497-ae63-9884c79e9c5b", "value": "T166833A229A78AA2AD0C0F13715DB0771E4F70F8625A09B6FAC644C6D7F2E3C417797", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769632034, "uuid": "8f460bc8-d370-4e1a-a2f6-99114779689f", "value": "1536:W1nBeSO13XfAH/E0xBA9vQWmHZzJNqlAFmI9NTAr6:W1ne13A/E0x+pw5FN9Ne6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769632034, "uuid": "65d950a5-e394-48e1-8f22-3f47d8b72d33", "value": 84800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769632034, "uuid": "82bd7785-33a2-486e-ba75-664af83f7d26", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a29e50-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1769634067, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769634067, "uuid": "ca61c606-e8a8-465e-a6db-9a9a6dec900a", "comment": "Malware payload (Hajime)", "value": "9b6c3518a91d23ed77504b5416bfb5b3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769634067, "uuid": "a6ffbfec-0b29-47d7-a881-efa80b70bbfa", "comment": "Malware payload (Hajime)", "value": "a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769634067, "uuid": "0508f7df-60bd-491f-9384-b4f3e4efcd43", "value": "6D7312E017B517CC1371A8353BED205E9128223972AE35302E97528DF957703BAB2DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769634067, "uuid": "ad759d7a-d7ae-433c-b4cf-9e7f7f5def82", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBht5:8D+CAXFYQChaAUk5ljnQssL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769634067, "uuid": "2da1a802-284f-4135-ab46-918ad1ce8fab", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "109c3e97-fc73-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769634076, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769634076, "uuid": "a957ce57-a3e4-4bf9-9962-84de24651119", "comment": "Malware payload (Mirai)", "value": "64f9f4b9ec621e9ce9294fbf596bc6d0", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769634076, "uuid": "1349ae86-a5c5-4f18-bba1-634e6c2b35d2", "comment": "Malware payload (Mirai)", "value": "664c96ecc2763ca7df83e60a3a118d1dc52121012d396713969f910db22c695b", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769634076, "uuid": "92e5669e-e22a-4673-ad16-0bed8d520199", "value": "T19B6412ABD9767DCBFE1B4FF021970E4E5EFDD2CAD2C668905215048026FD346A290B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769634076, "uuid": "dbd0cb8c-42a0-4926-9747-1e07f3a62291", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6co:7O/QJHZweEL/NOjCHm7FZZnc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769634076, "uuid": "891f7e28-fada-42b8-a207-88830f4e45fd", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769634076, "uuid": "54dff90e-018b-49af-addb-18bd2bbc9671", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9dcfcd89-fc8c-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769634132, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769634132, "uuid": "ef589a06-bc88-4e83-af27-2ca89e519b75", "comment": "Malware payload", "value": "0f33bedace26da6c6850a6f95fea4c5a", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769634132, "uuid": "0e6b7eef-e873-4548-b677-5e6ad6c5a8e2", "comment": "Malware payload", "value": "e0207d8f191257a46b9ebc289398ff80c7995998a74c20b073e8d108b89da010", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769634132, "uuid": "8574838b-c3ca-4225-ab96-2641826e9fe0", "value": "T1F3056D227B21CF69D354C27009F3C7525AE524A217E2508AA37CC7287AA166D2D5FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769634132, "uuid": "c7b63aeb-cf0e-4461-a3b4-a3b54143a89e", "value": "24576:B4pgl4YxMg8OGolxq1KObPXKv71C7dppKP:B4psrGovq1KEW71C7du", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769634132, "uuid": "8dc0ed94-24b7-4d85-82c5-af196d1e92ab", "value": 860884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769634132, "uuid": "75fd1f93-d902-4bf0-b02a-28830fb3eb0a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4489d8c-fc8c-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769634196, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769634196, "uuid": "2f54996f-d7bb-4403-8396-a66176146b6a", "comment": "Malware payload", "value": "66cb7084d9bbc5e869bd0a7756e320cb", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769634196, "uuid": "11394378-a135-469e-84ad-cb1a7130b82d", "comment": "Malware payload", "value": "86a89d23fc74b81cb10aee961f4f21d5e91bb72156223155bbfd8ba4c2b727d2", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769634196, "uuid": "6df1b495-cc56-4720-af0a-3147c8cd2a9d", "value": "T100C4BE63F2252E43C4E3923F1567C264937BDA5513918702A70BF6BC3DDA66A8F1A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769634196, "uuid": "421130f5-50ee-49dd-b742-f946a8036488", "value": "12288:XxgPh3K7L5134bXcJKYWr//AsmW8pYJizsncKbcmd+LK:Eh3i4LGfWr/nncKImd+L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769634196, "uuid": "c5a7db4c-8a5c-4c61-a6f0-f867aa240ab3", "value": 585384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769634196, "uuid": "c387110b-a3a7-4e37-9205-209719df0a2c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b5ca4c6-fc8d-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769634557, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769634557, "uuid": "9fa9c890-4b29-4f7d-9ac5-c315db52346c", "comment": "Malware payload", "value": "01502e4b6a5a0d0b1783f82cc1246a4d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769634557, "uuid": "479fcbb6-91d4-4be3-a567-86b6e706f806", "comment": "Malware payload", "value": "7d1b05f19b24b7cb9d7cfc5053b98da46c922e19282981a0407f5815fd65a1e5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769634557, "uuid": "f077a6ed-43e5-4c93-bbe8-7cf2bd1eb96e", "value": "T1F9058D9BFE5F3C47D2D2E33EDF8AD3B0522B7191D21341627A41032CE5C6AD98BA16", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769634557, "uuid": "cc05d976-a251-4fff-b6f9-7781a20e79f3", "value": "12288:QmToVUpoVUcoVU6M5UcM5U7M5U4I6r2I6rs1Z6ftDe8BSV7s78pqgzykzuIaann+:n1h6J8pqgOkqIfQ2uql8g5Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769634557, "uuid": "222018c1-9c3b-4a3a-a6f3-39f7a92c7b00", "value": 814040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769634557, "uuid": "53ac4f13-5147-4ba3-aff8-6521f98338a0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e8ecb612-fbad-11f0-8b2a-82aee05be84a", "comment": "Malware payload (SalatStealer)", "timestamp": 1769634607, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769634607, "uuid": "7fc1be54-6bf9-4294-851f-0d3b06224297", "comment": "Malware payload (SalatStealer)", "value": "bab0fd433be9c673ce0965b434dc21eb", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769634607, "uuid": "69fb9fcc-4cf2-4b6b-bf35-1b9c7a6a4254", "comment": "Malware payload (SalatStealer)", "value": "48b66a15b70f7b3b7f26ee10287d292c6c68ea3d4c540af550564d692f67a982", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769634607, "uuid": "14475cbe-53ca-43d6-97d7-2cc51a2715f3", "value": "T1C8F5F173728BD47EF42E073648B7825848F76A2A95636C5A92F4949CCE311711E3FB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769634607, "uuid": "2367e03c-2baf-41e2-a728-c043ad3bacb9", "value": "40ab50289f7ef5fae60801f88d4541fc", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769634607, "uuid": "02266d1d-62c0-4145-bfaa-2f9b204e485e", "value": "98304:Ur7QeWfKAbVPdDOTmdl5ogaZ8RJsJrPkVu1F2HOMDbpJ5PFg/:y7QeWfKAbVPdDOTmdl5ogaZAJsJPF612", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769634607, "uuid": "81287123-c56a-41a0-a194-475c9aebe5f1", "value": 3335681, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769634607, "uuid": "1327ccca-ddee-445a-989b-51e087d2262b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2064ac0d-fc95-11f0-8b2a-82aee05be84a", "comment": "Malware payload (MaskGramStealer)", "timestamp": 1769637787, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769637787, "uuid": "52ae6e46-6279-4572-aa0e-e01bc183e195", "comment": "Malware payload (MaskGramStealer)", "value": "bb59f6144f82b1f056053518b9785435", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "MaskGramStealer", "colour": "#44b235", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769637787, "uuid": "bdde87d5-9270-4bc5-8661-e6cc6c64d6a8", "comment": "Malware payload (MaskGramStealer)", "value": "ca2c000a17f88dfec57ad41b850ea3ef0399574743d1c7df57730ea80c22ea81", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "MaskGramStealer", "colour": "#44b235", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769637787, "uuid": "f5828667-f814-405f-a20b-3f83ed630a75", "value": "T1F5E533F07998FD90C57199F33698C69F050A55B6ED2EF213980385F7BEB21F722085", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769637787, "uuid": "a0e1aa8b-3132-42a1-9311-36733e38c159", "value": "dc6b57a7282f87959d9942f26d5c0b74", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769637787, "uuid": "c7c362e6-e6bd-4c0a-b2cd-3451b70eae2a", "value": "49152:6B+m5rSNc5ufbqRCMNTmRhDSA/hjNqhNfWsfNdEjJw+Lqmj:5LMmP22jNxiEjJBe+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769637787, "uuid": "392e35b8-6e42-4579-82e0-782d7f3002ed", "value": 3024384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769637787, "uuid": "acf8236d-0dbd-4a59-9e02-121b39e2475c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a594fb5d-fc9d-11f0-8b2a-82aee05be84a", "comment": "Malware payload (SVCStealer)", "timestamp": 1769641446, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769641446, "uuid": "ed1986fc-8708-4fa5-b687-2cfcdfd60033", "comment": "Malware payload (SVCStealer)", "value": "ceb269e65a5147e28c118d24a569656a", "object_relation": "md5", "Tag": [ { "name": "24x01x2026", "colour": "#8127e5", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769641446, "uuid": "5c1fdcd1-49aa-43df-9f4b-54474314b9af", "comment": "Malware payload (SVCStealer)", "value": "0da1a26f3da6f4712aca28a7cdba40f97fe228c604ce7087bc8db990dea3fc4c", "object_relation": "sha256", "Tag": [ { "name": "24x01x2026", "colour": "#8127e5", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769641446, "uuid": "6e9b658f-01bf-47af-85dc-847c82b03800", "value": "T140759E55B2B400FCD167C178C9475A0BEBB278061770EADF57908A6A6F23FE11A7E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769641446, "uuid": "858991dd-9cc2-4857-abad-6b4c9fc99fb4", "value": "14c00cd98c6c67089f15befbbc9b5dc3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769641446, "uuid": "9ea347f3-317c-4ddb-828b-95e5f5712ec1", "value": "24576:R02+h4Q8qAjv6qfjq1nJAfPVHDClF7rDheENnlBtSqNOqrXtd0RlgbCpS:1Q8FDjWJAfPVHCpheENndL5r03gb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769641446, "uuid": "3da1e793-ffb8-4723-b6b9-e7ea6ab0bd3c", "value": 1665536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769641446, "uuid": "74cbc1ea-f1f3-40db-9615-2c5247c83d6e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab2aba2d-fc9d-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769641456, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769641456, "uuid": "c19f8ab0-a456-4f77-9419-8b2ad9d00d41", "comment": "Malware payload (Mirai)", "value": "f3add9e09053dc60f5b2a55c996e2e28", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769641456, "uuid": "80ccfa07-dde5-4ec4-ac3e-b13294d95bf2", "comment": "Malware payload (Mirai)", "value": "685c3e9b12662ff9d10a581a40a9c8d4b2d8d4e7b5d88efea6873518599dd0b6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769641456, "uuid": "6e9d5b8c-207f-429d-ab5d-8611afedef47", "value": "T138E32AC7F800D9FEF80AE33648170905B630B7E155925E373267796FAD3A1990537E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769641456, "uuid": "5ff4f123-3221-4ac2-949e-41c91a99762e", "value": "3072:s1omwDLkyHhpp7M1dzoN/fGkVYjbiKLzJ0VY6fblki4kymSlg:yomQxl7MHzsfG7LzWlqkym6g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769641456, "uuid": "7ec65989-8802-42e7-a09a-bc469088ce4a", "value": 150016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769641456, "uuid": "e8735aee-38c7-4e63-ae70-0dcf1b4805a1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769558425, "uuid": "590b6a0c-fbdc-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.201.174:34685/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769558720, "uuid": "092abdaa-fbdd-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.234.150:51202/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769559019, "uuid": "bb6967e3-fbdd-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.128.121:38102/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769559188, "uuid": "1fa3523d-fbde-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.70.215:51469/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769559377, "uuid": "904df24d-fbde-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.83.98.10:58008/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769559389, "uuid": "97b57ef3-fbde-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.151.242:45005/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769559741, "uuid": "69af8eb2-fbdf-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.85.179:34395/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769559980, "uuid": "f7d825c0-fbdf-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.201.174:34685/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769560160, "uuid": "63266866-fbe0-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.85.179:34395/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769560218, "uuid": "85e3d022-fbe0-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.66.249:38874/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769560582, "uuid": "5e9f32bd-fbe1-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.29.145:52528/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769560880, "uuid": "1085e74f-fbe2-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.83.98.10:58008/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769561298, "uuid": "09977bab-fbe3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.42.225:38351/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769562256, "uuid": "4461342e-fbe5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.106.2:44570/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769562611, "uuid": "17e6d0e6-fbe6-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.186.206.82:59338/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769563037, "uuid": "1629b78a-fbe7-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.42.225:38351/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769563100, "uuid": "3b64c6ad-fbe7-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.138.58:34350/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769563751, "uuid": "bfc3481a-fbe8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.210.191:58786/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769564239, "uuid": "e23d5e2d-fbe9-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.55.23:55706/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769564296, "uuid": "047f23d2-fbea-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.32.185:40804/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769564409, "uuid": "479f47c3-fbea-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.70.125:33937/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769564466, "uuid": "6a15c17c-fbea-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:90/nx86_64.1", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769564467, "uuid": "6a26bbd0-fbea-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:90/nx86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769564597, "uuid": "b7d205ab-fbea-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.210.191:58786/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769565008, "uuid": "acb46fb2-fbeb-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.186.206.82:59338/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769565428, "uuid": "a773d069-fbec-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.106.2:44570/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769565789, "uuid": "7eb020fc-fbed-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.55.23:55706/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769565977, "uuid": "ee38e729-fbed-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.70.125:33937/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769566157, "uuid": "59dfa30e-fbee-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.229.78:43364/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769566518, "uuid": "30f77405-fbef-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.103.213:37959/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769566634, "uuid": "75f5cf97-fbef-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.52.211:47039/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769566756, "uuid": "beb37df4-fbef-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.122.31:37574/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769567417, "uuid": "48f5ebdb-fbf1-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.196.127:51441/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769567477, "uuid": "6c865ad2-fbf1-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.83.8:58272/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769567538, "uuid": "90b50047-fbf1-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.198.56:40514/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769567538, "uuid": "9107d34e-fbf1-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.37.136:48737/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769567590, "uuid": "afe633e5-fbf1-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.122.31:37574/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769567657, "uuid": "d7e2f798-fbf1-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.43.20:53201/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769567841, "uuid": "456f42d7-fbf2-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.202.7:49120/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769567960, "uuid": "8ca45ae1-fbf2-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.255.46.253:47005/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769567965, "uuid": "8f33dd2e-fbf2-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.4.173:43783/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769568198, "uuid": "1a27b8a3-fbf3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.255.46.253:47005/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769568252, "uuid": "3a98d7bb-fbf3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.103.213:37959/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769568315, "uuid": "603e7c1f-fbf3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.188.145:38636/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769568668, "uuid": "32884048-fbf4-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.226.208.187:57067/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769568849, "uuid": "9e2694bc-fbf4-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.226.208.187:57067/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769568968, "uuid": "e5699637-fbf4-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.230.116.160:55365/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769569096, "uuid": "31829ebb-fbf5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.43.20:53201/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769569097, "uuid": "31db36fc-fbf5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.196.127:51441/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769569218, "uuid": "7a176491-fbf5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.37.136:48737/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769569266, "uuid": "969d549f-fbf5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.55.92:54636/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769569274, "uuid": "9bb7cb8f-fbf5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.123.237:60472/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769569275, "uuid": "9c0f9fc6-fbf5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.227.45:37405/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769569275, "uuid": "9c26127c-fbf5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.236.7:33933/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769569275, "uuid": "9c749344-fbf5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.129.166:55859/Mozi.a", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769569279, "uuid": "9e76351c-fbf5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.60.231.182:60649/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769569337, "uuid": "c13b72e3-fbf5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.119.80:43935/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769569337, "uuid": "c1666e4f-fbf5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.71.231.194:44588/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769569344, "uuid": "c540a545-fbf5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.143.243:48121/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769569345, "uuid": "c6020f4e-fbf5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.4.173:43783/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769569476, "uuid": "13ef0c07-fbf6-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.187.249.185:53458/Mozi.m", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769569629, "uuid": "6f3f4b88-fbf6-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.119.80:43935/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769569999, "uuid": "4ba99e16-fbf7-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.238.134:47295/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769570415, "uuid": "43fbeb69-fbf8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.68.26:56358/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769570491, "uuid": "710d9914-fbf8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.230.116.160:55365/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769570960, "uuid": "88ac40e1-fbf9-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.187.106:51407/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769571255, "uuid": "38965c70-fbfa-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.70.128:40497/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769571486, "uuid": "c254fc2b-fbfa-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.238.134:47295/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769571609, "uuid": "0bafddd5-fbfb-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.28.101.7:43189/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769572030, "uuid": "06987820-fbfc-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.92.25:47867/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769572182, "uuid": "611762fa-fbfc-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.98.58:34049/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769572214, "uuid": "74040317-fbfc-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.97.104:33172/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769573176, "uuid": "b1578c95-fbfe-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.98.58:34049/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769573299, "uuid": "faa9ef8d-fbfe-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.143.199:37273/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769573595, "uuid": "ab515f45-fbff-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.70.128:40497/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769573595, "uuid": "ab619695-fbff-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.92.25:47867/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769573838, "uuid": "3c2e21c6-fc00-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.236.142:52376/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769573958, "uuid": "83a214f9-fc00-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.57.245:49376/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769574264, "uuid": "39cc6e67-fc01-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.30.104:50852/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769574573, "uuid": "f226ff61-fc01-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.251.183.93:50919/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769574859, "uuid": "9c93a600-fc02-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.184.117:47605/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769575689, "uuid": "8b8cf789-fc04-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.187.225:37375/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769575815, "uuid": "d63fc9a5-fc04-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.224.61:34652/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769575878, "uuid": "fbb0b9fe-fc04-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.236.58:38866/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769575989, "uuid": "3e106548-fc05-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.57.245:49376/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769576599, "uuid": "a9f1f1bc-fc06-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.246.197:40183/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769576767, "uuid": "0dd8e12c-fc07-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8170069107/CINNwZk.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769577021, "uuid": "a53e4c56-fc07-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.224.61:34652/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769577742, "uuid": "5304f545-fc09-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.167.5.30:49487/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769578229, "uuid": "7511c472-fc0a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.236.58:38866/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769578461, "uuid": "ff7ecf1f-fc0a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.103.240:57707/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769578580, "uuid": "463456f7-fc0b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.36.172:60929/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769578696, "uuid": "8bd9b324-fc0b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.9.23:32778/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769578813, "uuid": "d1808bac-fc0b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.36.172:60929/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769578998, "uuid": "3fc362e5-fc0c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.167.5.30:49487/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769579233, "uuid": "cba1b1ea-fc0c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.71.55.210:47249/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769579290, "uuid": "ed5b4eab-fc0c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/837705322/CXx1bFy.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769579471, "uuid": "597dce58-fc0d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.2.54:35066/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769579479, "uuid": "5e16c1da-fc0d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.244.72:47269/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769579781, "uuid": "11ffb84c-fc0e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.94.151:50199/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769579843, "uuid": "3741e86f-fc0e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.103.240:57707/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769580199, "uuid": "0b597862-fc0f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.94.151:50199/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769580268, "uuid": "344b332a-fc0f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.181.51:49470/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769580501, "uuid": "bf27d1c0-fc0f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.9.23:32778/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769580980, "uuid": "dccaf45c-fc10-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.71.55.210:47249/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769580980, "uuid": "dd2cf64e-fc10-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.27.46:50985/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769581088, "uuid": "1d4455cd-fc11-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.244.72:47269/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769581340, "uuid": "b388679b-fc11-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.181.51:49470/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769581403, "uuid": "d9372353-fc11-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.183.174:51135/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769581939, "uuid": "18d2e45a-fc13-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.66.47:43018/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769581985, "uuid": "33cedaa9-fc13-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/grading-chatter-dock73/sassy-generous-drv9/yard", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769582051, "uuid": "5b4ee644-fc13-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.66.47:43018/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769582238, "uuid": "ca7b729e-fc13-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.27.46:50985/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769582294, "uuid": "ec342209-fc13-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.18.106:43685/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769582358, "uuid": "121b30b5-fc14-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.7.15:38078/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769582526, "uuid": "764a50eb-fc14-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/cix256/lnattv/raw/refs/heads/main/inattv.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769582536, "uuid": "7c6bbe8f-fc14-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.27.199.101:55209/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769582722, "uuid": "eb3a00ab-fc14-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.1.234:40874/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769582779, "uuid": "0d1a417a-fc15-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.183.174:51135/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769582960, "uuid": "7930443f-fc15-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.18.106:43685/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769583858, "uuid": "90247bc1-fc17-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.252.229:41692/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769584029, "uuid": "f64059f5-fc17-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.77.78.55:26181/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769584038, "uuid": "fb5cd007-fc17-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.68.186:46218/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769584223, "uuid": "69cffafd-fc18-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.106.171:52983/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769584582, "uuid": "3fcc4f1b-fc19-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.152.114:44833/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769584875, "uuid": "ee68b7d9-fc19-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.70.223:45181/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769584931, "uuid": "0fa4fd56-fc1a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.106.51:32934/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769585656, "uuid": "bff13344-fc1b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.1.26.13:55598/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769586016, "uuid": "96a4447f-fc1c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.106.171:52983/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769586618, "uuid": "fd3b0c74-fc1d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.106.51:32934/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769586667, "uuid": "1a95194f-fc1e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.70.223:45181/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769586736, "uuid": "43d22b7d-fc1e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.234:41918/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769587039, "uuid": "f81b2a19-fc1e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.182.112:55896/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769587161, "uuid": "40df1c07-fc1f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.1.26.13:55598/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769587752, "uuid": "a175bbba-fc20-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.215.170:60700/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769587872, "uuid": "e90e4574-fc20-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.233.226:46088/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769587929, "uuid": "0b0c0d02-fc21-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.150.52:46502/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769588050, "uuid": "5325ff3c-fc21-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.182.112:55896/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769588108, "uuid": "75459e30-fc21-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.234:41918/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769588955, "uuid": "6e362a31-fc23-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.150.52:46502/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769588956, "uuid": "6ec42d52-fc23-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.107.34:34885/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769590692, "uuid": "79c617f1-fc27-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.107.34:34885/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769590693, "uuid": "7a38364c-fc27-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.165.163:49127/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769590759, "uuid": "a1989b0c-fc27-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.142.223:44850/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769590821, "uuid": "c6e60665-fc27-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.196.227:55948/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769590867, "uuid": "e2464e49-fc27-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.72.176:32982/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769590868, "uuid": "e26e8e04-fc27-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.180.35.224:33865/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769590868, "uuid": "e2b0d1d1-fc27-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.88.1.255:34110/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769590868, "uuid": "e2b3d94b-fc27-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.219.237.175/m4dfhweEw/Plugins/cred.dll", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "cred.dll", "colour": "#fe9d71", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "f397a7", "colour": "#c8cc2d", "exportable": true, "hide_tag": false }, { "name": "plugin", "colour": "#e5c9e6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769590872, "uuid": "e54ae848-fc27-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.219.237.175/m4dfhweEw/Plugins/cred64.dll", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "cred64.dll", "colour": "#b1d1dd", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "f397a7", "colour": "#c8cc2d", "exportable": true, "hide_tag": false }, { "name": "plugin", "colour": "#e5c9e6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769590930, "uuid": "07a99245-fc28-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.248.117:46867/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769590930, "uuid": "07e6d7ef-fc28-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.141.140:41230/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769590931, "uuid": "080ad2fe-fc28-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.222.206:56401/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769590931, "uuid": "08684e67-fc28-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.193.64:41852/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769590989, "uuid": "2ac3afd1-fc28-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.225.86:52733/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769590990, "uuid": "2b4b3db5-fc28-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.21.161:45755/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769590990, "uuid": "2b905660-fc28-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.161.193.73:52970/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769591057, "uuid": "5351affd-fc28-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.190.107:36462/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769591057, "uuid": "53546a17-fc28-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.40.215:40116/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769591058, "uuid": "53c78ee2-fc28-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.24.138:45517/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769591058, "uuid": "53d55d9c-fc28-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.161.193.73:52970/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769591109, "uuid": "72336d3b-fc28-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.230.124:57682/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769591111, "uuid": "737dd9c8-fc28-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.110.49:56527/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769591171, "uuid": "9715ca37-fc28-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.37.105:47757/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769591172, "uuid": "97e6fc28-fc28-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.34.109.121:45206/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769591178, "uuid": "9b709540-fc28-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.31.18:34606/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769591285, "uuid": "db70097e-fc28-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.158.153/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769591285, "uuid": "db76e777-fc28-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.158.153/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769591710, "uuid": "d8794cef-fc29-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.241.80:56183/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769592373, "uuid": "637fdd45-fc2b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.165.163:49127/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769592376, "uuid": "657d2e4b-fc2b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.196.227:55948/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769592498, "uuid": "ae499a67-fc2b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.228.151:52593/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769592676, "uuid": "188a22c0-fc2c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.72.176:32982/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769593214, "uuid": "5911af61-fc2d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.241.80:56183/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769593985, "uuid": "24431227-fc2f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.158.153/arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769593985, "uuid": "24431d46-fc2f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.158.153/arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769593985, "uuid": "244323e1-fc2f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.158.153/arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769593985, "uuid": "2443578d-fc2f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.158.153/arm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769593987, "uuid": "25830561-fc2f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.158.153/mass", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769595311, "uuid": "3aa3011b-fc32-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.234.30:41036/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769595382, "uuid": "65758935-fc32-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.246.127:35477/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769595506, "uuid": "af4af8da-fc32-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.188.65:53180/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769596155, "uuid": "32251f07-fc34-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.57.239:49180/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769596267, "uuid": "74fa1afe-fc34-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.163.21:53101/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769596331, "uuid": "9a9b6394-fc34-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.234.30:41036/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769596386, "uuid": "bb76c040-fc34-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/grading-chatter-dock73/sassy-generous-drv9/wrap1q", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769596517, "uuid": "09d23a78-fc35-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.255.247:36101/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769596579, "uuid": "2e78ef93-fc35-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.176.197:51945/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769596997, "uuid": "27926646-fc36-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.246.127:35477/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769597416, "uuid": "21ce1407-fc37-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.83.168:52003/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769597719, "uuid": "d61ad3ce-fc37-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.188.65:53180/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769597719, "uuid": "d630155a-fc37-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.163.21:53101/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769597725, "uuid": "d9aa18f5-fc37-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.251.187.183:41215/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769597836, "uuid": "1c1b10f9-fc38-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.57.239:49180/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769598135, "uuid": "ce42518f-fc38-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.27.118:46940/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769598315, "uuid": "3951d02c-fc39-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.255.247:36101/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769598545, "uuid": "c2ab149b-fc39-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/grading-chatter-dock73/vigilant-bucket-gui/p1lot", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769598788, "uuid": "5385bd7f-fc3a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/6691015685/bEKVmef.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769599573, "uuid": "275b085d-fc3c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.251.187.183:41215/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769600299, "uuid": "d8431f8c-fc3d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.33.225.183:36345/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769600919, "uuid": "4970b675-fc3f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.143.123:51923/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769600919, "uuid": "49a5bdf6-fc3f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.82.249:48696/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769601368, "uuid": "55532942-fc40-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7154568111/QYfsVxm.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "MaskGramStealer", "colour": "#44b235", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769601445, "uuid": "82e14cd4-fc40-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.88:49682/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769601671, "uuid": "097529d4-fc41-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.24.176.168:33058/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769602207, "uuid": "4968ee7e-fc42-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/BountyTV/Roblox-Fisch-Script/refs/heads/main/harlequinism/Roblox_Fisch_Script_2.5.zip", "Tag": [ { "name": "fake-git", "colour": "#bdb17a", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "LuaLoader", "colour": "#15800b", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769602210, "uuid": "4af43dd9-fc42-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://mgtms.cc/direct/Printer_Driver_SSL_support_v43.22.209.99.exe", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769602210, "uuid": "4b169052-fc42-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/beni8833/cs2-external/main/Myzomyia/cs2-external-1.0.zip", "Tag": [ { "name": "fake-git", "colour": "#bdb17a", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "LuaLoader", "colour": "#15800b", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769602210, "uuid": "4b20998a-fc42-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/EtMathew/brainrot-script-roblox/main/juxtamarine/brainrot-script-roblox-unblenchingly.zip", "Tag": [ { "name": "fake-git", "colour": "#bdb17a", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "LuaLoader", "colour": "#15800b", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769602219, "uuid": "508a823c-fc42-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://mgtms.cc/direct/Win_Driver_SSL_support_v43.22.209.44.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769602223, "uuid": "528c62c8-fc42-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.192.139:49190/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769602331, "uuid": "9360cc25-fc42-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-8f57965f8599440e97ac52dbcca4fc58.r2.dev/Sqveiqrgbuniasncoigenr.zip", "Tag": [ { "name": "Malgent", "colour": "#a071f9", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#2b8df4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769602346, "uuid": "9c2d8574-fc42-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.143.123:51923/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769602347, "uuid": "9cb4b902-fc42-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.141.198:40340/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769602593, "uuid": "2f0e7df2-fc43-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.167.229:35111/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769603007, "uuid": "25e8b8be-fc44-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.141.198:40340/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769603009, "uuid": "2744327d-fc44-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.33.225.183:36345/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769603011, "uuid": "285db78f-fc44-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.192.171:58817/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769603017, "uuid": "2be4b1fb-fc44-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.92.67:59591/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769603069, "uuid": "4afd5112-fc44-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.24.176.168:33058/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769603246, "uuid": "b457ff7c-fc44-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.92.67:59591/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769603347, "uuid": "f0cd08bc-fc44-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/drum/monk.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769603430, "uuid": "223c2733-fc45-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.192.139:49190/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769603793, "uuid": "fa82e9bc-fc45-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.82.249:48696/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769604264, "uuid": "1346ce94-fc47-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.167.229:35111/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769604325, "uuid": "3780d8d7-fc47-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.27.164:49878/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769604325, "uuid": "3794b5d3-fc47-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.192.171:58817/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769604506, "uuid": "a34d82f7-fc47-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.91.64:41094/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769604576, "uuid": "cd47f478-fc47-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.62.62:44379/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769605160, "uuid": "2920f5f1-fc49-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.107.251:38670/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769605225, "uuid": "4fd462bc-fc49-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.230.94:47398/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769606003, "uuid": "1fd57094-fc4b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.14.20:55063/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769606365, "uuid": "f755ea91-fc4b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.95.181:45595/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769606717, "uuid": "c931df41-fc4c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.230.94:47398/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769606960, "uuid": "5a155fe4-fc4d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.14.20:55063/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769606960, "uuid": "5a7626b7-fc4d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.215.150:46134/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769607615, "uuid": "e06ed79d-fc4e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.95.181:45595/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769607757, "uuid": "35150c83-fc4f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.151.118.226:49372/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769607979, "uuid": "b9515af7-fc4f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.133.137:33006/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769608216, "uuid": "46f249fd-fc50-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.208.77:43299/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769608216, "uuid": "47153b91-fc50-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.161.156:39463/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769608522, "uuid": "fd6786eb-fc50-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.94.151.189/bins/astro.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769608522, "uuid": "fd696988-fc50-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.94.151.189/bins/astro.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769608522, "uuid": "fd6c66c3-fc50-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.94.151.189/bins/astro.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769608522, "uuid": "fd6d399c-fc50-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.94.151.189/bins/astro.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769608522, "uuid": "fd6dc57e-fc50-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.94.151.189/bins/astro.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769608522, "uuid": "fd7186d7-fc50-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.94.151.189/bins/astro.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769608522, "uuid": "fd72e8b5-fc50-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.94.151.189/bins/astro.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769608522, "uuid": "fd74c8ea-fc50-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.94.151.189/bins/astro.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769608522, "uuid": "fd763c76-fc50-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.94.151.189/bins/astro.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769608522, "uuid": "fd787d91-fc50-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.94.151.189/bins/astro.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769608523, "uuid": "fd9a4fbc-fc50-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.94.151.189/bins/astro.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769608929, "uuid": "f013093b-fc51-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.185.248:55400/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769609056, "uuid": "3bcbdb90-fc52-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.198.203:44538/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769609469, "uuid": "316ebc6b-fc53-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.146.92.46:39175/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769609662, "uuid": "a4bbe696-fc53-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.27.164:49878/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769610015, "uuid": "772a6d88-fc54-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.65.23:56589/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769610077, "uuid": "9c6648d0-fc54-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://108.170.151.197:58213/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769610127, "uuid": "ba2a10c4-fc54-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.198.203:44538/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769610671, "uuid": "fded11b1-fc55-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.51.5:60160/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769610742, "uuid": "2889235b-fc56-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8536096438/TgjmGtn.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769611035, "uuid": "d7426539-fc56-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.73.95:53224/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769611215, "uuid": "42af3415-fc57-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://108.170.151.197:58213/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769611768, "uuid": "8c12aadb-fc58-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.65.23:56589/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769611927, "uuid": "eab41353-fc58-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.163.204.142/rs4-evaluator.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "f397a7", "colour": "#c8cc2d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769612477, "uuid": "32a47ec5-fc5a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.51.5:60160/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769612478, "uuid": "32f4de00-fc5a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.182.90:53936/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769612478, "uuid": "33360ad7-fc5a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.255.45.212:53303/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769612479, "uuid": "33f71af7-fc5a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.160.190.96:55159/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769612540, "uuid": "5848744c-fc5a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.242.135:56149/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769612541, "uuid": "58d77f62-fc5a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.31.152:60342/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769612549, "uuid": "5d71d590-fc5a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.73.95:53224/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769612593, "uuid": "77e02ebc-fc5a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.60.208.247:54197/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769612658, "uuid": "9e6db8b4-fc5a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.104.155.24/mips", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769612714, "uuid": "bfb951ba-fc5a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.143.172.66:53695/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769612716, "uuid": "c0e75c60-fc5a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.25.82:43296/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769612727, "uuid": "c7ac50c9-fc5a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.207.26:44420/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769612832, "uuid": "060b477e-fc5b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.88.84.202:44705/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769612832, "uuid": "061c5a5d-fc5b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.230.171:38317/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769612832, "uuid": "0621038f-fc5b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.206.125.109:50655/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769613492, "uuid": "8f8bf7d1-fc5c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.107.251:38670/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769613744, "uuid": "26013e13-fc5d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.65.250:51752/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769613786, "uuid": "3f1c3ff9-fc5d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.141.140:41230/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769614099, "uuid": "f9483975-fc5d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.242.135:56149/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769614937, "uuid": "ecaf3cdc-fc5f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.27.87:49405/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769615050, "uuid": "302f050c-fc60-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.59.36.18:4199/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769615067, "uuid": "3a8ae87d-fc60-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.113.86:50528/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769615352, "uuid": "e451fe50-fc60-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.65.250:51752/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769615422, "uuid": "0dde63c9-fc61-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.247.209:37807/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769615839, "uuid": "067b7033-fc62-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.27.87:49405/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616487, "uuid": "889778ed-fc63-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.212.45.5/iran.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616488, "uuid": "8935a6d3-fc63-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.212.45.5/iran.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616488, "uuid": "893c3d02-fc63-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.212.45.5/iran.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616488, "uuid": "894981e3-fc63-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.212.45.5/iran.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616493, "uuid": "8c76d520-fc63-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.212.45.5/iran.armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616493, "uuid": "8c770649-fc63-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.212.45.5/iran.armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616493, "uuid": "8c78ff38-fc63-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.212.45.5/iran.powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616493, "uuid": "8c79a78d-fc63-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.212.45.5/iran.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616493, "uuid": "8c7ec145-fc63-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.212.45.5/cat.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616493, "uuid": "8c812c5a-fc63-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.212.45.5/iran.armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616493, "uuid": "8c852ca2-fc63-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.212.45.5/iran.aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616493, "uuid": "8c877673-fc63-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.212.45.5/iran.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616493, "uuid": "8c89a369-fc63-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.212.45.5/iran.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616494, "uuid": "8d26398a-fc63-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.212.45.5/iran.armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616851, "uuid": "61a93141-fc64-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.247.209:37807/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616976, "uuid": "ac4a7344-fc64-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.247.134.212/hiddenbin/boatnet.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616976, "uuid": "ac5cba6c-fc64-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.247.134.212/hiddenbin/boatnet.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616976, "uuid": "ac5cd397-fc64-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.247.134.212/bins/boatnet.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616976, "uuid": "ac81d21c-fc64-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.247.134.212/bins/boatnet.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616977, "uuid": "ac93131a-fc64-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.247.134.212/bins/boatnet.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616977, "uuid": "aca2405b-fc64-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.247.134.212/bins/boatnet.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616978, "uuid": "adacb0eb-fc64-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.247.134.212/bins/boatnet.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616979, "uuid": "adc58cbe-fc64-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.247.134.212/bins/boatnet.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616979, "uuid": "add66d33-fc64-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.247.134.212/bins/boatnet.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616979, "uuid": "ade19122-fc64-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.247.134.212/hiddenbin/boatnet.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616979, "uuid": "ade88779-fc64-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.247.134.212/bins/boatnet.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616979, "uuid": "aded732c-fc64-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.247.134.212/bins/boatnet.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616979, "uuid": "adf65d48-fc64-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.247.134.212/bins/boatnet.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616979, "uuid": "ae0817ed-fc64-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.247.134.212/hiddenbin/boatnet.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769616979, "uuid": "ae139a0a-fc64-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.247.134.212/bins/boatnet.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617027, "uuid": "ca838b8d-fc64-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://138.204.196.254:33691/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617027, "uuid": "caa57cd1-fc64-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.247.134.212/bins/boatnet.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617086, "uuid": "edead855-fc64-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.158.153/hmips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617088, "uuid": "eeb3bb95-fc64-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.247.134.212/hiddenbin/boatnet.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617155, "uuid": "16f152ab-fc65-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.247.134.212/hiddenbin/boatnet.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617281, "uuid": "61dc294c-fc65-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.236.159:46986/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617329, "uuid": "7e8a973e-fc65-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.3.239:47369/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617577, "uuid": "126e9184-fc66-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.104.155.24/lilin.sh", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617577, "uuid": "126e9e4c-fc66-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.104.155.24/uni", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617577, "uuid": "12725bc7-fc66-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.104.155.24/arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617579, "uuid": "13d108c9-fc66-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.104.155.24/o", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617580, "uuid": "13fb7018-fc66-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.104.155.24/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617580, "uuid": "14039db3-fc66-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.104.155.24/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617580, "uuid": "1404c6d0-fc66-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.104.155.24/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617580, "uuid": "140980fe-fc66-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.104.155.24/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617638, "uuid": "37140fe1-fc66-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.104.155.24/massload", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617689, "uuid": "54f5fb20-fc66-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.104.155.24/dvr.sh", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617693, "uuid": "5777f05e-fc66-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.doctorfix.com.br/arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617693, "uuid": "5779b836-fc66-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://doctorfix.com.br/arm4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617693, "uuid": "577fdb23-fc66-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.doctorfix.com.br/arm4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617693, "uuid": "57863119-fc66-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://doctorfix.com.br/arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617693, "uuid": "57863e4e-fc66-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://doctorfix.com.br/arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617693, "uuid": "57868652-fc66-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://doctorfix.com.br/arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617693, "uuid": "57871ff4-fc66-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.doctorfix.com.br/mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617693, "uuid": "578f1bce-fc66-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://doctorfix.com.br/mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617693, "uuid": "57931a32-fc66-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.doctorfix.com.br/arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769617705, "uuid": "5e852b12-fc66-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.doctorfix.com.br/mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769618595, "uuid": "71346ecc-fc68-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.157.253.209:41123/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769618599, "uuid": "7361e076-fc68-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.doctorfix.com.br/uni", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769618599, "uuid": "7361e178-fc68-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://doctorfix.com.br/dvr.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769618599, "uuid": "7361e2f8-fc68-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.doctorfix.com.br/o", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769618599, "uuid": "7361e472-fc68-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://doctorfix.com.br/o", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769618599, "uuid": "7375e532-fc68-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://doctorfix.com.br/mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769618599, "uuid": "73811ba7-fc68-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.doctorfix.com.br/dvr.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769618602, "uuid": "75a613a8-fc68-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://doctorfix.com.br/massload", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769618602, "uuid": "75a89f04-fc68-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.doctorfix.com.br/massload", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769618602, "uuid": "75a8b65b-fc68-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.doctorfix.com.br/lilin.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769618602, "uuid": "75ab6668-fc68-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://doctorfix.com.br/uni", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769618602, "uuid": "75ab6b5c-fc68-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://doctorfix.com.br/lilin.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769618603, "uuid": "75b56483-fc68-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.doctorfix.com.br/arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619128, "uuid": "aefd0db0-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.219/smss.exe", "Tag": [ { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619128, "uuid": "aefd8272-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.219/winninitt.exe", "Tag": [ { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619128, "uuid": "aefe5464-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.219/onedrivetray.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619128, "uuid": "af17a66d-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.219/primary.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619130, "uuid": "b05ef530-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.219/win.exe", "Tag": [ { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619130, "uuid": "b063c315-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.219/wininittt.exe", "Tag": [ { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619131, "uuid": "b0748ae2-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.219/UniRun.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619131, "uuid": "b07bb4b9-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.219/updater.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619131, "uuid": "b09b812e-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.219/UserOOBE.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619131, "uuid": "b09ca87e-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.219/det.exe", "Tag": [ { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619131, "uuid": "b09fa85a-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.219/ss.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619131, "uuid": "b0a2a3c1-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.219/wxipp.exe", "Tag": [ { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619133, "uuid": "b1fe549f-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.219/auth_cw.exe", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619137, "uuid": "b447663c-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.219/MAYBE.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619138, "uuid": "b4c98da9-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.219/Mesh.exe", "Tag": [ { "name": "MeshAgent", "colour": "#985f9d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619139, "uuid": "b5846d12-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.219/WEB_RTC_Update.exe", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619139, "uuid": "b58f30f8-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.219/RunTimeBroker.exe", "Tag": [ { "name": "MeshAgent", "colour": "#985f9d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619139, "uuid": "b5982fdc-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.219/ServiceHost_1.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619139, "uuid": "b5a1f9dc-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.219/ServiceHost.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619139, "uuid": "b5c46017-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.219/3.0_X-Lite_Win32_1006e_34025.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619140, "uuid": "b5d64edd-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.219/OneDrivesvc64-Transfer.exe", "Tag": [ { "name": "MeshAgent", "colour": "#985f9d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619140, "uuid": "b5d66478-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.219/OneDrivesvc64-Dumpster.exe", "Tag": [ { "name": "MeshAgent", "colour": "#985f9d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619140, "uuid": "b5d6ea85-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.219/OneDrivesv.exe", "Tag": [ { "name": "MeshAgent", "colour": "#985f9d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619140, "uuid": "b5f6feaf-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.219/B.exe", "Tag": [ { "name": "MeshAgent", "colour": "#985f9d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769619551, "uuid": "ab564124-fc6a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.201.47:52717/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769620629, "uuid": "2d6e7bfb-fc6d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.201.47:52717/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769621349, "uuid": "da8dbfae-fc6e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8541372660/rHpoTiI.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769621425, "uuid": "07fb6c9a-fc6f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.246.147:59990/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769621903, "uuid": "24d802fe-fc70-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.68.26:53831/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769622008, "uuid": "636b5f4b-fc70-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8541372660/rHpoTiI.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769622078, "uuid": "8d3d5ded-fc70-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.157.253.209:41123/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769622610, "uuid": "ca22193b-fc71-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7309295924/83OpFoG.msi", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769622983, "uuid": "a8b16d68-fc72-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.246.147:59990/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769623163, "uuid": "13f5b6da-fc73-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.216.243:46320/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769623341, "uuid": "7e501e88-fc73-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.68.26:53831/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769623342, "uuid": "7ed1a477-fc73-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.181.215:36412/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769624479, "uuid": "24211298-fc76-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.222.206:56401/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769624781, "uuid": "d8503136-fc76-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.181.215:36412/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769624886, "uuid": "173af6eb-fc77-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/5561582465/GWcR1uV.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769625496, "uuid": "82a9ac9f-fc78-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.27.118:46940/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769626095, "uuid": "e7a4d1a2-fc79-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.45.151:49208/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769626221, "uuid": "326b54cd-fc7a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.42.63:45384/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769626626, "uuid": "24382e9d-fc7b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.93.20.151/tl.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769627298, "uuid": "b4b6d8c7-fc7c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.42.63:45384/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769627538, "uuid": "43afea67-fc7d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://191.19.235.78:8443/o", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769627657, "uuid": "8ae122dd-fc7d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.168.203.241:40796/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769627837, "uuid": "f5c11074-fc7d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.181.202:35275/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769628131, "uuid": "a50f1b51-fc7e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.30.62:55781/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769628211, "uuid": "d48982ea-fc7e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.168.203.241:40796/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769628428, "uuid": "55f1dbba-fc7f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.34:59276/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769628496, "uuid": "7ee15a1d-fc7f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.30.62:55781/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769628614, "uuid": "c51ba538-fc7f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.12.183:49452/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769628787, "uuid": "2bf2ca2b-fc80-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/mas/random.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769629633, "uuid": "2443dfed-fc82-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.12.183:49452/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769629633, "uuid": "2453790d-fc82-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.77.143:45148/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769629988, "uuid": "f7c2dd3a-fc82-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.229.80:58100/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769630358, "uuid": "d4846e8e-fc83-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.228.183:37350/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769630528, "uuid": "399617a1-fc84-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.218.64:37891/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769630896, "uuid": "14fc2226-fc85-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://75.180.21.218:53846/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631127, "uuid": "9ea6a7c8-fc85-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:1/xd.arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631127, "uuid": "9ea76733-fc85-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:1/xd.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631127, "uuid": "9ea76e05-fc85-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:1/xd.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631127, "uuid": "9ea8f5ce-fc85-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:1/hola.sh", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631127, "uuid": "9ea90236-fc85-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:1/xd.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631127, "uuid": "9ea93a93-fc85-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:1/xd.arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631127, "uuid": "9ea9ac3c-fc85-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:1/xd.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631127, "uuid": "9ea9dca8-fc85-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:1/xd.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631127, "uuid": "9eaa5280-fc85-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:1/xd.arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631127, "uuid": "9eaa9a04-fc85-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:1/xd.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631127, "uuid": "9eab2ca2-fc85-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:1/xd.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631127, "uuid": "9eab850d-fc85-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:1/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631127, "uuid": "9eac22ab-fc85-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:1/xd.arm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631127, "uuid": "9eac2daf-fc85-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:1/nx86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631127, "uuid": "9eadb051-fc85-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.215.26:1/nx86_64.1", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631128, "uuid": "9fa99a17-fc85-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://my.onbuka.com/login/file.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631196, "uuid": "c7f4711f-fc85-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.10.89:51578/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631261, "uuid": "eeef76d5-fc85-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.118.157:57331/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631368, "uuid": "2e95d8c8-fc86-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/5729578977/N2WJpbz.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631865, "uuid": "56bbb756-fc87-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://political-psychological-integrated-certification.trycloudflare.com/manji.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631866, "uuid": "5722dd36-fc87-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://political-psychological-integrated-certification.trycloudflare.com/manji.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631867, "uuid": "57cb70d4-fc87-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://political-psychological-integrated-certification.trycloudflare.com/manji.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631867, "uuid": "57cba0af-fc87-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://political-psychological-integrated-certification.trycloudflare.com/manji.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631867, "uuid": "57cbacd5-fc87-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://political-psychological-integrated-certification.trycloudflare.com/manji.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631868, "uuid": "5874e179-fc87-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://political-psychological-integrated-certification.trycloudflare.com/manji.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631972, "uuid": "965398fa-fc87-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.37.191/herios.armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631972, "uuid": "96558341-fc87-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.37.191/herios.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631972, "uuid": "9656d04b-fc87-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.37.191/herios.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631972, "uuid": "965b67b7-fc87-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.37.191/herios.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631972, "uuid": "965c773a-fc87-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.37.191/herios.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631972, "uuid": "9666e107-fc87-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.37.191/herios.armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631972, "uuid": "967667de-fc87-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.37.191/herios.armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631972, "uuid": "9677eb82-fc87-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.37.191/herios.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631972, "uuid": "9678bd78-fc87-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.37.191/herios.powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631972, "uuid": "9679dda5-fc87-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.37.191/herios.armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631972, "uuid": "9679de75-fc87-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.37.191/herios.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631972, "uuid": "9684dd14-fc87-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.37.191/herios.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631972, "uuid": "96854b61-fc87-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.37.191/herios.aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769631980, "uuid": "9b53e69c-fc87-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.196.95.249:61265/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769632034, "uuid": "bbb2fc07-fc87-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.37.191/herios.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769632090, "uuid": "dcd1b716-fc87-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.37.191/cat.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769632525, "uuid": "e01ed5e6-fc88-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.13.111:34679/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769632636, "uuid": "22355fa9-fc89-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.174.89.212:59699/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769632877, "uuid": "b222c1e8-fc89-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.10.89:51578/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769633061, "uuid": "1f70bad2-fc8a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.36.38.160/payloads/proxy_linux_amd64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769633235, "uuid": "87839e63-fc8a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.119.230:40340/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769633429, "uuid": "faecfad4-fc8a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.26.82.163:46855/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769634067, "uuid": "778ddb4d-fc8c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.184.161.17:3496/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769634076, "uuid": "7c8cd291-fc8c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.76.67:33076/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769634080, "uuid": "7f0b316d-fc8c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.76.67:33076/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769634081, "uuid": "7f730ce9-fc8c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.2.11:42626/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769634081, "uuid": "7f757c3f-fc8c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.56.167:42033/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769634094, "uuid": "87865c70-fc8c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.22.170.233:50858/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769634100, "uuid": "8b2561af-fc8c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.122.92:56424/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769634131, "uuid": "9dabcbd0-fc8c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.238.26:49029/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769634132, "uuid": "9dce6ae2-fc8c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.13.111:34679/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769634132, "uuid": "9dcfa109-fc8c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.64.201.67:8080/mipsel", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769634132, "uuid": "9dd40325-fc8c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.64.201.67:8080/mips", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769634132, "uuid": "9e29e197-fc8c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.240.71:43185/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769634132, "uuid": "9e2e205f-fc8c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.200.123:36457/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769634132, "uuid": "9e32067a-fc8c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.12.100:56537/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769634132, "uuid": "9e387758-fc8c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.182.115:48934/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769634132, "uuid": "9e47c299-fc8c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.186.140:51348/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769634133, "uuid": "9e6f1bc8-fc8c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.200.123:36457/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769634196, "uuid": "c453328d-fc8c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.64.201.67:8080/arm", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769634430, "uuid": "4faedcf7-fc8d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.119.230:40340/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769634557, "uuid": "9b675bf5-fc8d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.64.201.67:8080/arm64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769634557, "uuid": "9b766fe9-fc8d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.64.201.67:8080/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769634607, "uuid": "b92d9429-fc8d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/klon/random.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769634975, "uuid": "94ba8ec3-fc8e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.59.164:42563/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769636166, "uuid": "5a3fa255-fc91-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://limewire.com/d/fWi5E#9LzPG2fkpb.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769636357, "uuid": "cc26a4cd-fc91-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.167.247:54763/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769636529, "uuid": "32981ff4-fc92-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8428202012/8zqt1PN.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769636717, "uuid": "a301dd34-fc92-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.59.164:42563/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769637313, "uuid": "06272d6b-fc94-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/837705322/6IJumfE.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769637391, "uuid": "34ba4581-fc94-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.187.66.105:38447/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769637429, "uuid": "4b540702-fc94-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.224.209:36843/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769637560, "uuid": "99595177-fc94-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.15.151:54526/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769637612, "uuid": "b884a005-fc94-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.171.232:52271/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769637787, "uuid": "20716748-fc95-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7311893838/uQDJDPV.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "MaskGramStealer", "colour": "#44b235", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769637862, "uuid": "4d3d5fd2-fc95-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.92.142.255:39480/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769638761, "uuid": "654b8996-fc97-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.92.142.255:39480/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769638812, "uuid": "83612a42-fc97-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.12.100:56537/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769638812, "uuid": "8364acf2-fc97-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.204.233:51785/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769639297, "uuid": "a47dc8cc-fc98-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.67.134:59875/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769639528, "uuid": "2e760cdb-fc99-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.15.151:54526/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769639647, "uuid": "75230a4f-fc99-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.187.66.105:38447/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769639842, "uuid": "e937e7db-fc99-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.21.224:47686/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769639891, "uuid": "06c2a4b6-fc9a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.101.19:33019/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769640327, "uuid": "0a9c60ae-fc9b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.242.248:49311/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769640373, "uuid": "25ab92fb-fc9b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.71.80:35867/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769640805, "uuid": "2740faeb-fc9c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.189.248:45112/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769640845, "uuid": "3f2d13ac-fc9c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://limewire.com/d/LkC4U#NIBsm9M54d.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769641096, "uuid": "d4cd3d7d-fc9c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.67.134:59875/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769641096, "uuid": "d4e57a67-fc9c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.130.111:59378/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769641325, "uuid": "5d6c82da-fc9d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7309295924/83OpFoG.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769641446, "uuid": "a5a1f41d-fc9d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.93.20.151/mcoibp.exe", "Tag": [ { "name": "24x01x2026", "colour": "#8127e5", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769641698, "uuid": "3b8d72e0-fc9e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.242.248:49311/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769641758, "uuid": "5f442bfa-fc9e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.225.173:52916/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769641809, "uuid": "7dd49c96-fc9e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.121.43:59954/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769642228, "uuid": "7785e063-fc9f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/strat/random.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769642348, "uuid": "beea3eb9-fc9f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.10.48:53172/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769642710, "uuid": "96dbb74e-fca0-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/pao/random.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769643255, "uuid": "dbb21efe-fca1-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.225.173:52916/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769643427, "uuid": "4201e12d-fca2-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.22:8080/file/data.mips-uclibc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769643501, "uuid": "6e4fea5c-fca2-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.121.43:59954/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769643927, "uuid": "6c763453-fca3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.10.48:53172/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769643978, "uuid": "8ab06906-fca3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.142.91:43329/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769644229, "uuid": "2069c943-fca4-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.158.9:32804/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769644352, "uuid": "696d1f30-fca4-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.182.111:42555/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769644695, "uuid": "362cfbec-fca5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.142.91:43329/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769633406, "uuid": "ed1729ac-fc8a-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.26.82.163", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769612645, "uuid": "96e20d57-fc5a-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "109.104.155.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769564405, "uuid": "45673c9a-fbea-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.70.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769571244, "uuid": "31dae047-fbfa-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.70.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769584864, "uuid": "e847009c-fc19-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.70.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769640364, "uuid": "20da807b-fc9b-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.71.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769566505, "uuid": "29222208-fbef-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.103.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769569265, "uuid": "965b5366-fbf5-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.123.237", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769591044, "uuid": "4b92ea5c-fc28-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.24.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769580965, "uuid": "d4287701-fc10-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.27.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769614925, "uuid": "e5f3568d-fc5f-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.27.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769567525, "uuid": "88d8276e-fbf1-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.37.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769564224, "uuid": "d9b7e319-fbe9-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.55.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769639284, "uuid": "9cd81ea9-fc98-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.67.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769629624, "uuid": "1f26eee7-fc82-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.77.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769597406, "uuid": "1bb35316-fc37-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.83.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769575865, "uuid": "f442df3b-fc04-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.39.236.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769615406, "uuid": "04536102-fc61-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.39.247.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769634065, "uuid": "7635b32b-fc8c-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.239.122.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769572145, "uuid": "4aa8c580-fbfc-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.239.98.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769615044, "uuid": "2cc88170-fc60-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.113.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769569325, "uuid": "b9c2ea91-fbf5-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.143.243", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769568964, "uuid": "e2fae4ce-fbf4-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.230.116.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769579464, "uuid": "5597f1d2-fc0d-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.239.244.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769602335, "uuid": "9583b2d1-fc42-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.141.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769579464, "uuid": "5597f3e6-fc0d-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.2.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769634124, "uuid": "998323ae-fc8c-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.200.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769558405, "uuid": "4d667a67-fbdc-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.201.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769634124, "uuid": "9983d61d-fc8c-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.240.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769581385, "uuid": "ce230c68-fc11-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.183.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769637424, "uuid": "487a34e1-fc94-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.224.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769598124, "uuid": "c7aa8014-fc38-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.27.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769591165, "uuid": "93d92faa-fc28-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.31.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769602986, "uuid": "195f60b8-fc44-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.192.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769569265, "uuid": "965ba76c-fbf5-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.227.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769630344, "uuid": "cc3f69e2-fc83-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.228.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769634964, "uuid": "8e2c522c-fc8e-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.59.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769596144, "uuid": "2ba8f38f-fc34-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.57.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769634124, "uuid": "9982ea09-fc8c-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.182.115", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769602207, "uuid": "49137c30-fc42-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.192.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769595306, "uuid": "37ebe22a-fc32-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.234.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769591705, "uuid": "d580447a-fc29-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.241.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769592485, "uuid": "a6501ae9-fc2b-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.228.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769634124, "uuid": "9982f595-fc8c-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.186.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769576584, "uuid": "a0d95254-fc06-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.138.246.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769572205, "uuid": "6eecf49d-fbfc-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.138.97.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769602565, "uuid": "1e969a13-fc43-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.167.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769584025, "uuid": "f3e1250f-fc17-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.68.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769632506, "uuid": "d4b1ddfa-fc88-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.13.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769602986, "uuid": "195f5d0a-fc44-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.92.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769604545, "uuid": "ba8c34c8-fc47-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.212.62.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769570945, "uuid": "7f556b11-fbf9-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.187.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769573944, "uuid": "7b746a99-fc00-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.57.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769644324, "uuid": "58dee602-fca4-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.182.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769567944, "uuid": "831172f5-fbf2-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.4.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769574544, "uuid": "e0e25f5f-fc01-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.251.183.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769597708, "uuid": "cf71bf71-fc37-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.251.187.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769627824, "uuid": "ee69abef-fc7d-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.115.181.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769577725, "uuid": "489e747a-fc09-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.167.5.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769562605, "uuid": "14d7d018-fbe6-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.186.206.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769631964, "uuid": "92052f10-fc87-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.196.95.249", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769569265, "uuid": "965bacb3-fbf5-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.60.231.182", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769611025, "uuid": "d0ec84c0-fc56-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.73.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769590924, "uuid": "0430eab6-fc28-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.193.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769587925, "uuid": "087d5744-fc21-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.150.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769605985, "uuid": "15024bd4-fc4b-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.14.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769608205, "uuid": "4068da4b-fc50-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.161.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769637844, "uuid": "42af1a56-fc95-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.92.142.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769636345, "uuid": "c4e6d04a-fc91-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.94.167.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600885, "uuid": "34fef744-fc3f-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.94.82.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769612466, "uuid": "2bc8c89f-fc5a-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.160.190.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769591105, "uuid": "701ed371-fc28-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.230.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769631185, "uuid": "c1290c01-fc85-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.10.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769610006, "uuid": "71ac17b8-fc54-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.65.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769587744, "uuid": "9cd9eac5-fc20-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.215.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769634065, "uuid": "76359ec5-fc8c-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.56.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769584025, "uuid": "f3e13d1a-fc17-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "151.77.78.55", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769584565, "uuid": "35c1d558-fc19-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.148.152.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769590684, "uuid": "74b9dcbc-fc27-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.148.165.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769595484, "uuid": "a23d9462-fc32-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.148.188.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769607725, "uuid": "2204ab15-fc4f-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.151.118.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769627644, "uuid": "82ce3c0a-fc7d-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.168.203.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769637544, "uuid": "8fa4b006-fc94-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.175.15.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769568665, "uuid": "308067cd-fbf4-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.226.208.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769579225, "uuid": "c69f4dc0-fc0c-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "177.71.55.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769609044, "uuid": "34789844-fc52-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.141.198.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769612525, "uuid": "4f47863e-fc5a-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.31.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769590985, "uuid": "28516a89-fc28-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.21.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769572025, "uuid": "0322897a-fbfc-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.92.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769584205, "uuid": "5ef983fc-fc18-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.106.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769584925, "uuid": "0c542981-fc1a-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.106.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769630525, "uuid": "37cf95cb-fc84-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.122.218.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769608924, "uuid": "ecdb61ae-fc51-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.185.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769611925, "uuid": "e9830d94-fc58-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.163.204.142", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "f397a7", "colour": "#c8cc2d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769591284, "uuid": "da99a7a5-fc28-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.208.158.153", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769627525, "uuid": "3c03f9d8-fc7d-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "191.19.235.78", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769633044, "uuid": "15bca35f-fc8a-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.36.38.160", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619544, "uuid": "a713c977-fc6a-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.201.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769575806, "uuid": "d0b81e23-fc04-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.1.224.61", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769634124, "uuid": "998361ac-fc8c-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.12.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769590806, "uuid": "bd90387c-fc27-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.196.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769612825, "uuid": "0201ab7c-fc5b-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.206.125.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769643964, "uuid": "825cd27a-fca3-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.142.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600286, "uuid": "cffa6ddb-fc3d-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.33.225.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769566144, "uuid": "51f5461f-fbee-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.229.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769559365, "uuid": "8937148d-fbde-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.83.98.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769616965, "uuid": "a5b925a1-fc64-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "38.247.134.212", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769569325, "uuid": "b9c37b7f-fbf5-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.71.231.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769590865, "uuid": "e0e32be9-fc27-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.88.1.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769612825, "uuid": "02019aa5-fc5b-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.88.84.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769567405, "uuid": "41e68ff3-fbf1-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.177.196.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769590924, "uuid": "043117bd-fc28-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.177.222.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769590865, "uuid": "e0e3a985-fc27-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.180.35.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769612707, "uuid": "bba763d7-fc5a-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.25.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769582345, "uuid": "0a9f468b-fc14-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.7.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769621885, "uuid": "1a499593-fc70-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.68.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769578445, "uuid": "f5d95c9e-fc0a-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.103.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769606945, "uuid": "5115fe28-fc4d-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.215.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769628125, "uuid": "a1613c3b-fc7e-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.30.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769626206, "uuid": "29ba226d-fc7a-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.42.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769623324, "uuid": "7437e1c4-fc73-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.181.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769606345, "uuid": "ebbb1c1d-fc4b-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.95.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769588944, "uuid": "6821a310-fc23-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.233.107.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769607965, "uuid": "b1694c38-fc4f-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.133.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769600885, "uuid": "34feb852-fc3f-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.143.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769570405, "uuid": "3db5af0f-fbf8-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.68.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769628605, "uuid": "bfb5b8ad-fc7f-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.54.12.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769612466, "uuid": "2bc8dedf-fc5a-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.58.182.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769573824, "uuid": "33c637df-fc00-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.7.236.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769581925, "uuid": "1058433b-fc13-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.86.66.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769619123, "uuid": "ac04c598-fc69-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.141.58.219", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "MeshAgent", "colour": "#985f9d", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769634065, "uuid": "7635bc2b-fc8c-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.184.161.17", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769612466, "uuid": "2bc8cb0c-fc5a-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.255.45.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769567944, "uuid": "83117710-fbf2-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.255.46.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769613725, "uuid": "1a4c2162-fc5d-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.47.65.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769579765, "uuid": "08bb5161-fc0e-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.94.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769574246, "uuid": "2f390fd7-fc01-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.30.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769637605, "uuid": "b450e907-fc94-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.92.171.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769563085, "uuid": "326ee55f-fbe7-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.138.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769580245, "uuid": "26d5573e-fc0f-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.181.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769587025, "uuid": "efd6fea2-fc1e-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.182.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769583844, "uuid": "88423b7c-fc17-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.252.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769591105, "uuid": "701edad6-fc28-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.18.110.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769634065, "uuid": "7635b799-fc8c-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.18.2.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769634065, "uuid": "7635c3ef-fc8c-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.22.170.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769569984, "uuid": "430aff4a-fbf7-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.238.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769623145, "uuid": "09204644-fc73-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.216.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769563744, "uuid": "bb7b53dc-fbe8-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.210.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769560205, "uuid": "7e290755-fbe0-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.66.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769567464, "uuid": "64dc3900-fbf1-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.83.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769590985, "uuid": "285173f7-fc28-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "78.161.193.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769608506, "uuid": "f3d2832b-fc50-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "81.94.151.189", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769631964, "uuid": "9204df0c-fc87-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "84.54.37.191", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769590865, "uuid": "e0e36c03-fc27-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.219.237.175", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "cred.dll", "colour": "#fe9d71", "exportable": true, "hide_tag": false }, { "name": "cred64.dll", "colour": "#b1d1dd", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "f397a7", "colour": "#c8cc2d", "exportable": true, "hide_tag": false }, { "name": "plugin", "colour": "#e5c9e6", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769569265, "uuid": "965b5dbb-fbf5-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.92.129.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617685, "uuid": "52f0e620-fc66-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "doctorfix.com.br" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1769636165, "uuid": "598fe8da-fc91-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "limewire.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1769602207, "uuid": "4923629b-fc42-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "mgtms.cc" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1769631126, "uuid": "9e799a70-fc85-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "my.onbuka.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1769631845, "uuid": "4b136457-fc87-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "political-psychological-integrated-certification.trycloudflare.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1769602209, "uuid": "4a7f98df-fc42-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-8f57965f8599440e97ac52dbcca4fc58.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1769617685, "uuid": "52f2d680-fc66-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.doctorfix.com.br" } ] } }